INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-5,10.128.0.38' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 52.390164] BUG: unable to handle kernel NULL pointer dereference at 00000000000001d8 [ 52.391731] IP: [] __remove_shared_vm_struct+0x6d/0xe0 [ 52.392848] PGD 1d00c7067 [ 52.393305] PUD 1d00c6067 PMD 0 [ 52.393905] [ 52.394185] Oops: 0002 [#1] PREEMPT SMP KASAN [ 52.394895] Dumping ftrace buffer: [ 52.395534] (ftrace buffer empty) [ 52.396118] Modules linked in: [ 52.396764] CPU: 0 PID: 5411 Comm: syzkaller263586 Not tainted 4.9.44-gc2e2621 #32 [ 52.397821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.399398] task: ffff8801d8b4e000 task.stack: ffff8801d8b50000 [ 52.400314] RIP: 0010:[] [] __remove_shared_vm_struct+0x6d/0xe0 [ 52.401640] RSP: 0018:ffff8801d8b57b60 EFLAGS: 00010246 [ 52.402441] RAX: 0000000000000000 RBX: ffff8801d7ffcc28 RCX: 0000000000000000 [ 52.403435] RDX: 1ffff1003a346284 RSI: ffff8801d1a31400 RDI: ffff8801d1a31420 [ 52.404551] RBP: ffff8801d8b57b88 R08: 0000000000000001 R09: 0000000000000000 [ 52.405735] R10: 0000000000000000 R11: 1ffff1003b16af3c R12: ffff8801d62037c0 [ 52.406889] R13: 0000000000000875 R14: ffff8801d6203810 R15: ffff8801d1a31400 [ 52.408071] FS: 0000000000c00880(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 52.409155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.409967] CR2: 00000000000001d8 CR3: 00000001d00c3000 CR4: 00000000001406f0 [ 52.412575] Stack: [ 52.414697] ffff8801d1a31400 ffff8801d62037c0 ffff8801d7ffcc88 ffff8801d7ffcc28 [ 52.422857] 00000000000000b1 ffff8801d8b57bb8 ffffffff814dcab3 ffff8801d62037c0 [ 52.430849] ffff8801d62038b8 dffffc0000000000 ffff8801d8b57c48 ffff8801d8b57c10 [ 52.438832] Call Trace: [ 52.441397] [] unlink_file_vma+0x83/0xb0 [ 52.447087] [] free_pgtables+0xef/0x330 [ 52.452696] [] exit_mmap+0x21a/0x400 [ 52.458050] [] ? SyS_munmap+0xa0/0xa0 [ 52.463476] [] ? trace_hardirqs_on+0xd/0x10 [ 52.469426] [] mmput+0xf3/0x2d0 [ 52.474329] [] do_exit+0x751/0x2a50 [ 52.479589] [] ? __hrtimer_init+0x102/0x190 [ 52.485536] [] ? hrtimer_nanosleep+0x2e8/0x780 [ 52.491744] [] ? release_task+0x1240/0x1240 [ 52.497689] [] ? __hrtimer_init+0x190/0x190 [ 52.503638] [] ? do_nanosleep+0x19d/0x4d0 [ 52.509414] [] do_group_exit+0x108/0x320 [ 52.515105] [] SyS_exit_group+0x1d/0x20 [ 52.520705] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 52.527253] Code: c5 00 08 00 00 74 47 e8 92 f3 e8 ff 49 8d 7f 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 61 49 8b 47 20 ff 80 d8 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 [ 52.554054] RIP [] __remove_shared_vm_struct+0x6d/0xe0 [ 52.561080] RSP [ 52.564676] CR2: 00000000000001d8 [ 52.568110] ---[ end trace 6988daddf2b309b3 ]--- [ 52.568119] BUG: unable to handle kernel NULL pointer dereference at 00000000000001d8 [ 52.568130] IP: [] copy_process.part.50+0x468e/0x5d40 [ 52.568136] PGD 1d605e067 [ 52.568138] PUD 1d68ec067 [ 52.568140] PMD 0 [ 52.568140] [ 52.568145] Oops: 0002 [#2] PREEMPT SMP KASAN [ 52.568151] Dumping ftrace buffer: [ 52.568155] (ftrace buffer empty) [ 52.568159] Modules linked in: [ 52.568166] CPU: 1 PID: 5470 Comm: syzkaller263586 Tainted: G D 4.9.44-gc2e2621 #32 [ 52.568169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.568173] task: ffff8801d6bbb000 task.stack: ffff8801d7340000 [ 52.568182] RIP: 0010:[] [] copy_process.part.50+0x468e/0x5d40 [ 52.568186] RSP: 0018:ffff8801d7347c18 EFLAGS: 00010297 [ 52.568189] RAX: 0000000000000000 RBX: ffff8801d606f9b0 RCX: 0000000000000000 [ 52.568193] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff8801d1a315b0 [ 52.568197] RBP: ffff8801d7347da8 R08: ffffed003ae68f22 R09: ffff8801d7347970 [ 52.568200] R10: 0000000000000008 R11: ffffed003ae68f21 R12: ffff8801d6e044d8 [ 52.568204] R13: ffff8801d606fa00 R14: ffff8801d736b480 R15: ffff8801d1a31400 [ 52.568209] FS: 00007fe9c66bc700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 52.568213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.568216] CR2: 00000000000001d8 CR3: 00000001d6e2b000 CR4: 00000000001406e0 [ 52.568221] Stack: [ 52.568230] 0000000000000000 0000000000000000 ffffed003ae6d69c ffff8801d736b4e0 [ 52.568238] 0000000000000000 0000000000000000 ffff8801d736b488 ffff8801d736b520 [ 52.568247] ffff8801d6205ae0 ffff8801d606f9c8 ffff8801d736b5c0 ffff8801d7350470 [ 52.568248] Call Trace: [ 52.568258] [] ? __cleanup_sighand+0x40/0x40 [ 52.568267] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 52.568274] [] _do_fork+0x1c0/0xd70 [ 52.568280] [] ? fork_idle+0x270/0x270 [ 52.568288] [] ? finish_task_switch+0x1c1/0x630 [ 52.568294] [] ? finish_task_switch+0x1ed/0x630 [ 52.568301] [] SyS_clone+0x37/0x50 [ 52.568309] [] ? ptregs_sys_rt_sigreturn+0x10/0x10 [ 52.568315] [] do_syscall_64+0x197/0x490 [ 52.568321] [] ? sys_vfork+0x30/0x30 [ 52.568329] [] entry_SYSCALL64_slow_path+0x25/0x25 [ 52.568432] Code: 00 00 00 fc ff df 4c 89 e8 48 c1 e8 03 80 3c 30 00 74 08 4c 89 ef e8 32 ea 40 00 f6 43 51 08 74 11 e8 c7 be 23 00 48 8b 44 24 20 ff 88 d8 01 00 00 e8 b6 be 23 00 48 8b 44 24 70 48 83 c0 60 [ 52.568440] RIP [] copy_process.part.50+0x468e/0x5d40 [ 52.568442] RSP [ 52.568444] CR2: 00000000000001d8 [ 52.579493] BUG: unable to handle kernel NULL pointer dereference at 00000000000001d8 [ 52.579503] IP: [] copy_process.part.50+0x468e/0x5d40 [ 52.579508] PGD 1cf588067 [ 52.579510] PUD 1d68ea067 [ 52.579512] PMD 0 [ 52.579512] [ 52.579517] Oops: 0002 [#3] PREEMPT SMP KASAN [ 52.579526] Dumping ftrace buffer: [ 52.579528] (ftrace buffer empty) [ 52.579532] Modules linked in: [ 52.579538] CPU: 1 PID: 5473 Comm: syzkaller263586 Tainted: G D 4.9.44-gc2e2621 #32 [ 52.579542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.579545] task: ffff8801d7351800 task.stack: ffff8801d8520000 [ 52.579554] RIP: 0010:[] [] copy_process.part.50+0x468e/0x5d40 [ 52.579558] RSP: 0018:ffff8801d8527c18 EFLAGS: 00010297 [ 52.579561] RAX: 0000000000000000 RBX: ffff8801d606fc98 RCX: 0000000000000000 [ 52.579564] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff8801d1a315b0 [ 52.579572] RBP: ffff8801d8527da8 R08: ffffed003b0a4f22 R09: ffff8801d8527970 [ 52.579576] R10: 0000000000000008 R11: ffffed003b0a4f21 R12: ffff8801d6e02d90 [ 52.579580] R13: ffff8801d606fce8 R14: ffff8801d736b9c0 R15: ffff8801d1a31400 [ 52.579585] FS: 00007fe9c66bc700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 52.579589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.579592] CR2: 00000000000001d8 CR3: 00000001d2393000 CR4: 00000000001406e0 [ 52.579596] Stack: [ 52.579605] 0000000000000000 0000000000000000 ffffed003ae6d744 ffff8801d736ba20 [ 52.579614] 0000000000000000 0000000000000000 ffff8801d736b9c8 ffff8801d736ba60 [ 52.579622] ffff8801d62055a0 ffff8801d606fcb0 ffff8801d736bb00 ffff8801d7353470 [ 52.579624] Call Trace: [ 52.579632] [] ? __cleanup_sighand+0x40/0x40 [ 52.579641] [] ? check_preemption_disabled+0x3b/0x200 [ 52.579647] [] _do_fork+0x1c0/0xd70 [ 52.579653] [] ? fork_idle+0x270/0x270 [ 52.579660] [] SyS_clone+0x37/0x50 [ 52.579668] [] ? ptregs_sys_rt_sigreturn+0x10/0x10 [ 52.579675] [] do_syscall_64+0x197/0x490 [ 52.579681] [] ? sys_vfork+0x30/0x30 [ 52.579688] [] entry_SYSCALL64_slow_path+0x25/0x25 [ 52.579792] Code: 00 00 00 fc ff df 4c 89 e8 48 c1 e8 03 80 3c 30 00 74 08 4c 89 ef e8 32 ea 40 00 f6 43 51 08 74 11 e8 c7 be 23 00 48 8b 44 24 20 ff 88 d8 01 00 00 e8 b6 be 23 00 48 8b 44 24 70 48 83 c0 60 [ 52.579799] RIP [] copy_process.part.50+0x468e/0x5d40 [ 52.579801] RSP [ 52.579803] CR2: 00000000000001d8 [ 52.579823] ---[ end trace 6988daddf2b309b4 ]--- [ 52.579827] Kernel panic - not syncing: Fatal exception