[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 29.172053] kauditd_printk_skb: 7 callbacks suppressed [ 29.172065] audit: type=1800 audit(1544116569.967:29): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 29.198941] audit: type=1800 audit(1544116569.977:30): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.81' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 36.702163] WARNING: CPU: 0 PID: 6003 at mm/mempolicy.c:1745 alloc_pages_vma+0x1bd/0x4a0 [ 36.710562] Kernel panic - not syncing: panic_on_warn set ... [ 36.716439] CPU: 0 PID: 6003 Comm: syz-executor841 Not tainted 4.20.0-rc5+ #364 [ 36.723882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.733217] Call Trace: [ 36.735794] dump_stack+0x244/0x39d [ 36.739405] ? dump_stack_print_info.cold.1+0x20/0x20 [ 36.744586] panic+0x2ad/0x55c [ 36.747760] ? add_taint.cold.5+0x16/0x16 [ 36.751894] ? __warn.cold.8+0x5/0x45 [ 36.755676] ? __warn+0xe8/0x1d0 [ 36.759026] ? alloc_pages_vma+0x1bd/0x4a0 [ 36.763243] __warn.cold.8+0x20/0x45 [ 36.766937] ? rcu_softirq_qs+0x20/0x20 [ 36.770892] ? alloc_pages_vma+0x1bd/0x4a0 [ 36.775113] report_bug+0x254/0x2d0 [ 36.778726] do_error_trap+0x11b/0x200 [ 36.782596] do_invalid_op+0x36/0x40 [ 36.786293] ? alloc_pages_vma+0x1bd/0x4a0 [ 36.790513] invalid_op+0x14/0x20 [ 36.793945] RIP: 0010:alloc_pages_vma+0x1bd/0x4a0 [ 36.798772] Code: 5f 5d c3 e8 35 2f bf ff 45 89 ec 31 ff 41 81 e4 00 00 04 00 44 89 e6 e8 31 30 bf ff 45 85 e4 0f 84 50 ff ff ff e8 13 2f bf ff <0f> 0b e9 44 ff ff ff e8 07 2f bf ff e8 22 5e ff ff 48 89 c3 e9 6b [ 36.817658] RSP: 0000:ffff8881c14ce918 EFLAGS: 00010293 [ 36.823004] RAX: ffff8881c1f7a1c0 RBX: ffff8881da96f000 RCX: ffffffff81c06c9f [ 36.830254] RDX: 0000000000000000 RSI: ffffffff81c06cad RDI: 0000000000000005 [ 36.837521] RBP: ffff8881c14ce958 R08: ffff8881c1f7a1c0 R09: ffffed10389651ce [ 36.844773] R10: ffffed10389651ce R11: ffff8881c4b28e73 R12: 0000000000040000 [ 36.852021] R13: 00000000000742ca R14: ffff8881da96f008 R15: 0000000000000002 [ 36.859283] ? alloc_pages_vma+0x1af/0x4a0 [ 36.863503] ? alloc_pages_vma+0x1bd/0x4a0 [ 36.867722] ? alloc_pages_vma+0x1bd/0x4a0 [ 36.871942] do_huge_pmd_wp_page+0x1373/0x5fc0 [ 36.876510] ? print_usage_bug+0xc0/0xc0 [ 36.880558] ? __split_huge_pmd+0xa70/0xa70 [ 36.884865] ? lock_unpin_lock+0x4a0/0x4a0 [ 36.889085] ? mark_held_locks+0x130/0x130 [ 36.893303] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 36.897883] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 36.903402] ? __alloc_pages_nodemask+0x653/0xea0 [ 36.908232] ? trace_hardirqs_off_caller+0x310/0x310 [ 36.913321] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 36.918843] ? kernel_poison_pages+0x15a/0x290 [ 36.923409] ? kasan_unpoison_shadow+0x35/0x50 [ 36.927991] ? preempt_count_add+0xbc/0x1b0 [ 36.932297] ? get_page_from_freelist+0x17ae/0x5340 [ 36.937312] ? noop_count+0x40/0x40 [ 36.940928] ? print_bfs_bug+0x80/0x80 [ 36.944807] ? find_held_lock+0x36/0x1c0 [ 36.948855] ? check_usage+0x1aa/0x790 [ 36.952724] ? __unlock_page_memcg+0x53/0x100 [ 36.957209] ? check_usage_forwards+0x3d0/0x3d0 [ 36.961857] ? __lock_acquire+0x62f/0x4c20 [ 36.966075] ? __bfs+0x321/0x780 [ 36.969435] ? print_usage_bug+0xc0/0xc0 [ 36.973483] ? print_bfs_bug+0x80/0x80 [ 36.977365] ? print_usage_bug+0xc0/0xc0 [ 36.981437] ? __lock_acquire+0x62f/0x4c20 [ 36.985681] ? kasan_check_read+0x11/0x20 [ 36.989812] ? __lock_acquire+0x2aff/0x4c20 [ 36.994123] ? __lock_acquire+0x62f/0x4c20 [ 36.998359] ? mark_held_locks+0x130/0x130 [ 37.002590] ? mark_held_locks+0x130/0x130 [ 37.006812] ? mark_held_locks+0x130/0x130 [ 37.011027] ? print_usage_bug+0xc0/0xc0 [ 37.015090] ? lock_downgrade+0x900/0x900 [ 37.019237] ? print_usage_bug+0xc0/0xc0 [ 37.023284] ? print_usage_bug+0xc0/0xc0 [ 37.027337] ? __lock_acquire+0x62f/0x4c20 [ 37.031562] ? __lock_acquire+0x62f/0x4c20 [ 37.035789] ? mark_held_locks+0x130/0x130 [ 37.040006] ? mark_held_locks+0x130/0x130 [ 37.044230] ? is_bpf_text_address+0xac/0x170 [ 37.048708] ? find_held_lock+0x36/0x1c0 [ 37.052756] __handle_mm_fault+0x2ddc/0x5be0 [ 37.057156] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 37.061985] ? print_usage_bug+0xc0/0xc0 [ 37.066036] ? do_raw_spin_unlock+0xa7/0x330 [ 37.070429] ? trace_hardirqs_on+0x310/0x310 [ 37.074828] ? zap_class+0x640/0x640 [ 37.078525] ? zap_class+0x640/0x640 [ 37.082227] ? find_held_lock+0x36/0x1c0 [ 37.086277] ? handle_mm_fault+0x42a/0xc70 [ 37.090495] ? lock_downgrade+0x900/0x900 [ 37.094627] ? check_preemption_disabled+0x48/0x280 [ 37.099629] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 37.104543] ? kasan_check_read+0x11/0x20 [ 37.108702] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 37.113963] ? rcu_softirq_qs+0x20/0x20 [ 37.117924] ? trace_hardirqs_off_caller+0x310/0x310 [ 37.123014] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 37.128539] ? check_preemption_disabled+0x48/0x280 [ 37.133557] handle_mm_fault+0x54f/0xc70 [ 37.137607] ? __handle_mm_fault+0x5be0/0x5be0 [ 37.142174] ? find_vma+0x34/0x190 [ 37.145700] __do_page_fault+0x5e8/0xe60 [ 37.149751] do_page_fault+0xf2/0x7e0 [ 37.153550] ? vmalloc_sync_all+0x30/0x30 [ 37.157683] ? error_entry+0x76/0xd0 [ 37.161383] ? trace_hardirqs_off_caller+0xbb/0x310 [ 37.166383] ? find_held_lock+0x36/0x1c0 [ 37.170429] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.175257] ? trace_hardirqs_on_caller+0x310/0x310 [ 37.180262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.185090] page_fault+0x1e/0x30 [ 37.188526] RIP: 0010:__clear_user+0x3b/0x70 [ 37.192938] Code: f9 be 13 00 00 00 48 c7 c7 a0 47 d8 88 e8 ad 28 d8 f9 0f 1f 00 48 89 d8 48 c1 eb 03 4c 89 e7 83 e0 07 48 89 d9 48 85 c9 74 0f <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 37.211825] RSP: 0000:ffff8881c14cfae8 EFLAGS: 00010202 [ 37.217169] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 37.224427] RDX: 0000000000000000 RSI: ffffffff81b1b3d3 RDI: 00000000200001c0 [ 37.231679] RBP: ffff8881c14cfaf8 R08: 1ffff11038299f39 R09: 0000000000000008 [ 37.238929] R10: 0000000000000001 R11: ffff8881c1f7a1c0 R12: 00000000200001c0 [ 37.246181] R13: 000000001fffffc0 R14: 0000000000000001 R15: 00007ffffffff000 [ 37.253451] ? __might_fault+0x1a3/0x1e0 [ 37.257500] ? __clear_user+0x23/0x70 [ 37.261289] copy_fpstate_to_sigframe+0x297/0x530 [ 37.266119] get_sigframe.isra.11.constprop.12+0x559/0xd30 [ 37.271726] ? restore_sigcontext+0x780/0x780 [ 37.276211] ? force_sig_info+0x281/0x310 [ 37.280353] ? force_sig_fault+0x12c/0x1d0 [ 37.284573] do_signal+0xadc/0x21c0 [ 37.288188] ? setup_sigcontext+0x7d0/0x7d0 [ 37.292495] ? __bad_area_nosemaphore+0x2e1/0x3a0 [ 37.297322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 37.302848] ? exit_to_usermode_loop+0x8c/0x380 [ 37.307498] ? exit_to_usermode_loop+0x8c/0x380 [ 37.312153] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 37.316732] exit_to_usermode_loop+0x2e5/0x380 [ 37.321314] ? __bpf_trace_sys_exit+0x30/0x30 [ 37.325794] ? trace_hardirqs_off_caller+0xbb/0x310 [ 37.330793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.335619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.340449] prepare_exit_to_usermode+0x342/0x3b0 [ 37.345279] ? trace_event_raw_event_sys_enter+0x700/0x700 [ 37.350886] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.355713] ? page_fault+0x8/0x30 [ 37.359234] retint_user+0x8/0x18 [ 37.362666] RIP: 0033: (null) [ 37.366529] Code: Bad RIP value. [ 37.369875] RSP: 002b:0000000020000388 EFLAGS: 00010217 [ 37.375217] RAX: 0000000000000000 RBX: 00007fff0bffa1c0 RCX: 00000000004403b9 [ 37.382470] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000000 [ 37.389722] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000004009ae [ 37.396976] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401c40 [ 37.404229] R13: 0000000000401cd0 R14: 0000000000000000 R15: 0000000000000000 [ 37.412599] Kernel Offset: disabled [ 37.416282] Rebooting in 86400 seconds..