[ 38.678567] team0 (unregistering): Port device team_slave_1 removed [ 38.691336] team0 (unregistering): Port device team_slave_0 removed [ 38.703297] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 38.718274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 38.753411] bond0 (unregistering): Released all slaves [ 62.970597] can: request_module (can-proto-0) failed. [ 62.980274] can: request_module (can-proto-0) failed. [ 64.779277] random: sshd: uninitialized urandom read (32 bytes read) [ 65.559455] random: sshd: uninitialized urandom read (32 bytes read) [ 65.710166] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts. 2019/04/01 00:54:27 parsed 1 programs 2019/04/01 00:54:27 executed programs: 0 [ 71.971058] IPVS: ftp: loaded support on port[0] = 21 [ 71.986969] IPVS: ftp: loaded support on port[0] = 21 [ 72.007415] IPVS: ftp: loaded support on port[0] = 21 [ 72.018928] IPVS: ftp: loaded support on port[0] = 21 [ 72.026654] IPVS: ftp: loaded support on port[0] = 21 [ 72.043059] IPVS: ftp: loaded support on port[0] = 21 [ 72.925983] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.932418] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.941522] device bridge_slave_0 entered promiscuous mode [ 72.957410] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.963840] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.975064] device bridge_slave_0 entered promiscuous mode [ 72.983875] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.990268] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.001434] device bridge_slave_0 entered promiscuous mode [ 73.009671] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.016075] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.023197] device bridge_slave_1 entered promiscuous mode [ 73.032721] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.039110] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.046214] device bridge_slave_0 entered promiscuous mode [ 73.054452] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.060866] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.067984] device bridge_slave_0 entered promiscuous mode [ 73.078401] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.084793] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.091969] device bridge_slave_1 entered promiscuous mode [ 73.100524] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.106916] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.114924] device bridge_slave_0 entered promiscuous mode [ 73.123607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.131143] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.137633] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.145704] device bridge_slave_1 entered promiscuous mode [ 73.153164] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.159536] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.168187] device bridge_slave_1 entered promiscuous mode [ 73.176322] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.182726] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.190525] device bridge_slave_1 entered promiscuous mode [ 73.197311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.205491] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.211874] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.219768] device bridge_slave_1 entered promiscuous mode [ 73.231253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.240533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.248579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.256104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.264800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.296955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.305252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.314424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.349296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.378797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.398463] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.409531] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.461135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.472179] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.491310] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.512901] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.543054] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.553427] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.582310] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.607990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.631528] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.641564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.648572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.663326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.671913] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.692101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.716068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.723889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.732085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.740498] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.749388] team0: Port device team_slave_0 added [ 73.766744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.786851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.794657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.810468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.820334] team0: Port device team_slave_1 added [ 73.832703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.841396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.864691] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.876042] team0: Port device team_slave_0 added [ 73.884774] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.894803] team0: Port device team_slave_0 added [ 73.901719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.909239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.919703] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.927630] team0: Port device team_slave_0 added [ 73.941389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.948991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.956947] team0: Port device team_slave_1 added [ 73.970322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.980357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.990917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.998303] team0: Port device team_slave_1 added [ 74.006472] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.014949] team0: Port device team_slave_1 added [ 74.040950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.059510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.069520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.092329] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.100937] team0: Port device team_slave_0 added [ 74.109834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.126563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.136930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.147811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.155610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.169245] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.178245] team0: Port device team_slave_0 added [ 74.185427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.194307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.204967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.215388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.224633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.233492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.241666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.249534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.259253] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.266663] team0: Port device team_slave_1 added [ 74.277228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.285443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.294462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.303540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.312135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.323737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.334361] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.342101] team0: Port device team_slave_1 added [ 74.350702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.358154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.369162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.384275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.391815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.401116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.416666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.428055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.441984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.459624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.468593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.487607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.507802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.528546] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.543342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.559887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.573654] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.589565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.601369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.621470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.632119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.651142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.667940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.686094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.702245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.913805] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.920221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.926900] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.933292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.940645] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 74.989423] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.995845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.002521] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.008919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.016898] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.026490] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.032884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.039558] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.045947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.054138] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.098333] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.104769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.111445] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.117840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.125727] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.236743] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.243157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.249890] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.256321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.263545] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.275777] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.282164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.288843] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.295239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.303076] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.680191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.690485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.699358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.706617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.714055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.721385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.909985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.926581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.943178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.084401] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.097121] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.124149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.141431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.158859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.190970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.262186] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.268373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.275414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.293397] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.299925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.312484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.322220] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.366120] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.372371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.379517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.389610] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.435166] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.464228] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.489441] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.540412] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.555886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.563670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.574804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.606958] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.613529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.625270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.645740] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.652107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.663430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.767996] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.782747] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.836718] 8021q: adding VLAN 0 to HW filter on device team0 2019/04/01 00:54:35 executed programs: 6 [ 83.966959] hrtimer: interrupt took 334393 ns 2019/04/01 00:54:41 executed programs: 25 [ 87.642850] x86/PAT: syz-executor5:5993 map pfn RAM range req write-combining for [mem 0x23b00000-0x23b03fff], got write-back [ 87.756540] FAULT_INJECTION: forcing a failure. [ 87.756540] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 87.769439] CPU: 0 PID: 5993 Comm: syz-executor5 Not tainted 4.18.0-rc4+ #1 [ 87.776581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.786073] Call Trace: [ 87.788837] dump_stack+0x16a/0x22a [ 87.792517] ? dump_stack_print_info.cold.2+0x48/0x48 [ 87.797950] should_fail.cold.4+0x5/0xd [ 87.801986] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 87.807227] ? graph_lock+0x170/0x170 [ 87.811176] ? trace_hardirqs_on+0x10/0x10 [ 87.815495] ? find_held_lock+0x36/0x1c0 [ 87.819697] ? __lock_is_held+0xb5/0x140 [ 87.823800] ? check_same_owner+0x340/0x340 [ 87.828197] ? rcu_note_context_switch+0x730/0x730 [ 87.833280] __alloc_pages_nodemask+0x36e/0xdb0 [ 87.838118] ? __alloc_pages_slowpath+0x2d60/0x2d60 [ 87.843226] ? lock_downgrade+0x8f0/0x8f0 [ 87.847498] ? kasan_check_read+0x11/0x20 [ 87.851748] ? rcu_is_watching+0x8c/0x150 [ 87.855915] ? kasan_check_read+0x11/0x20 [ 87.860180] ? find_held_lock+0x36/0x1c0 [ 87.864358] ? is_bpf_text_address+0x81/0xe0 [ 87.868869] ? kernel_text_address+0x79/0xf0 [ 87.873344] ? __kernel_text_address+0xd/0x40 [ 87.877980] alloc_pages_current+0xd6/0x1b0 [ 87.882455] depot_save_stack+0x3f0/0x470 [ 87.886700] save_stack+0xa9/0xd0 [ 87.890246] ? save_stack+0x43/0xd0 [ 87.893946] ? kasan_kmalloc+0xc4/0xe0 [ 87.897965] ? kasan_slab_alloc+0x12/0x20 [ 87.902149] ? kmem_cache_alloc+0x11b/0x760 [ 87.906541] ? ptlock_alloc+0x1d/0x70 [ 87.910406] ? pte_alloc_one+0x4e/0x130 [ 87.914471] ? __pte_alloc+0x1d/0x330 [ 87.918355] ? remap_pfn_range+0x723/0x8d0 [ 87.922645] ? ion_heap_map_user+0x19f/0x300 [ 87.927144] ? ion_mmap+0x158/0x210 [ 87.930827] ? dma_buf_mmap_internal+0x14d/0x1f0 [ 87.935642] ? mmap_region+0xbb1/0x1af0 [ 87.939748] ? do_mmap+0x886/0x1590 [ 87.943488] ? vm_mmap_pgoff+0x1d7/0x2c0 [ 87.947673] ? ksys_mmap_pgoff+0x424/0x7a0 [ 87.951958] ? __x64_sys_mmap+0xe9/0x1b0 [ 87.956153] ? do_syscall_64+0x183/0x700 [ 87.960250] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.965731] ? find_held_lock+0x36/0x1c0 [ 87.969845] ? print_usage_bug+0xc0/0xc0 [ 87.973942] ? __lock_is_held+0xb5/0x140 [ 87.978151] ? kasan_unpoison_shadow+0x35/0x50 [ 87.982807] kasan_kmalloc+0xc4/0xe0 [ 87.986578] kasan_slab_alloc+0x12/0x20 [ 87.990712] kmem_cache_alloc+0x11b/0x760 [ 87.995053] ptlock_alloc+0x1d/0x70 [ 87.998803] pte_alloc_one+0x4e/0x130 [ 88.002697] __pte_alloc+0x1d/0x330 [ 88.006442] remap_pfn_range+0x723/0x8d0 [ 88.010746] ? apply_to_page_range+0x520/0x520 [ 88.015394] ? __lock_is_held+0xb5/0x140 [ 88.019600] ion_heap_map_user+0x19f/0x300 [ 88.023869] ? pagerange_is_ram_callback+0x110/0x110 [ 88.029102] ion_mmap+0x158/0x210 [ 88.032688] dma_buf_mmap_internal+0x14d/0x1f0 [ 88.037369] mmap_region+0xbb1/0x1af0 [ 88.041253] ? __x64_sys_brk+0x800/0x800 [ 88.045418] ? arch_get_unmapped_area+0x770/0x770 [ 88.050356] ? lock_acquire+0x1e4/0x540 [ 88.054531] ? get_unmapped_area+0x1bf/0x340 [ 88.059036] do_mmap+0x886/0x1590 [ 88.062591] ? mmap_region+0x1af0/0x1af0 [ 88.066741] ? vm_mmap_pgoff+0x194/0x2c0 [ 88.070818] ? down_read_killable+0x200/0x200 [ 88.075370] ? security_mmap_file+0xcb/0x130 [ 88.079890] vm_mmap_pgoff+0x1d7/0x2c0 [ 88.083856] ? vma_is_stack_for_current+0x90/0x90 [ 88.088787] ? __sb_end_write+0x8a/0xb0 [ 88.092819] ksys_mmap_pgoff+0x424/0x7a0 [ 88.096996] ? find_mergeable_anon_vma+0x90/0x90 [ 88.101798] ? __ia32_sys_read+0xa0/0xa0 [ 88.105927] __x64_sys_mmap+0xe9/0x1b0 [ 88.109884] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 88.114976] do_syscall_64+0x183/0x700 [ 88.118936] ? finish_task_switch+0x1d2/0x830 [ 88.123516] ? syscall_return_slowpath+0x4e0/0x4e0 [ 88.128526] ? syscall_return_slowpath+0x215/0x4e0 [ 88.133596] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 88.139118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.144295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.149587] RIP: 0033:0x455f79 [ 88.152862] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 88.173425] RSP: 002b:00007fe5eb891c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 88.181282] RAX: ffffffffffffffda RBX: 00007fe5eb8926d4 RCX: 0000000000455f79 [ 88.188689] RDX: 0000000000000000 RSI: 0000000000003060 RDI: 0000000020ffd000 [ 88.196100] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 88.203427] R10: 0000000004000812 R11: 0000000000000246 R12: 0000000000000005 [ 88.210836] R13: 00000000004c0605 R14: 00000000004d0050 R15: 0000000000000005 [ 90.372255] x86/PAT: syz-executor5:5996 map pfn RAM range req write-combining for [mem 0x46500000-0x46503fff], got write-back [ 90.433621] FAULT_INJECTION: forcing a failure. [ 90.433621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.446330] CPU: 0 PID: 5996 Comm: syz-executor5 Not tainted 4.18.0-rc4+ #1 [ 90.453483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.462906] Call Trace: [ 90.465654] dump_stack+0x16a/0x22a [ 90.469387] ? dump_stack_print_info.cold.2+0x48/0x48 [ 90.474724] should_fail.cold.4+0x5/0xd [ 90.478826] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 90.484027] ? graph_lock+0x170/0x170 [ 90.487989] ? find_held_lock+0x36/0x1c0 [ 90.492174] ? __lock_is_held+0xb5/0x140 [ 90.496382] ? check_same_owner+0x340/0x340 [ 90.500915] ? __pte_alloc+0x1d/0x330 [ 90.504800] ? remap_pfn_range+0x723/0x8d0 [ 90.509130] ? rcu_note_context_switch+0x730/0x730 [ 90.514158] ? do_mmap+0x886/0x1590 [ 90.517937] __alloc_pages_nodemask+0x36e/0xdb0 [ 90.522679] ? print_usage_bug+0xc0/0xc0 [ 90.526914] ? __alloc_pages_slowpath+0x2d60/0x2d60 [ 90.532062] ? lock_downgrade+0x8f0/0x8f0 [ 90.536367] alloc_pages_current+0xd6/0x1b0 [ 90.540825] pte_alloc_one+0x14/0x130 [ 90.544780] __pte_alloc+0x1d/0x330 [ 90.548515] remap_pfn_range+0x723/0x8d0 [ 90.552880] ? apply_to_page_range+0x520/0x520 [ 90.557577] ? __lock_is_held+0xb5/0x140 [ 90.561735] ion_heap_map_user+0x19f/0x300 [ 90.566906] ? pagerange_is_ram_callback+0x110/0x110 [ 90.572178] ion_mmap+0x158/0x210 [ 90.575790] dma_buf_mmap_internal+0x14d/0x1f0 [ 90.580489] mmap_region+0xbb1/0x1af0 [ 90.584451] ? __x64_sys_brk+0x800/0x800 [ 90.588625] ? arch_get_unmapped_area+0x770/0x770 [ 90.593543] ? lock_acquire+0x1e4/0x540 [ 90.597722] ? get_unmapped_area+0x1bf/0x340 [ 90.602250] do_mmap+0x886/0x1590 [ 90.605858] ? mmap_region+0x1af0/0x1af0 [ 90.610069] ? vm_mmap_pgoff+0x194/0x2c0 [ 90.614198] ? down_read_killable+0x200/0x200 [ 90.618840] ? security_mmap_file+0xcb/0x130 [ 90.623328] vm_mmap_pgoff+0x1d7/0x2c0 [ 90.627419] ? vma_is_stack_for_current+0x90/0x90 [ 90.632357] ? __sb_end_write+0x8a/0xb0 [ 90.636509] ksys_mmap_pgoff+0x424/0x7a0 [ 90.640707] ? find_mergeable_anon_vma+0x90/0x90 [ 90.645584] ? exit_to_usermode_loop+0x112/0x310 [ 90.650475] ? __ia32_sys_read+0xa0/0xa0 [ 90.654668] ? syscall_slow_exit_work+0x3f0/0x3f0 [ 90.659641] __x64_sys_mmap+0xe9/0x1b0 [ 90.663598] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.668677] do_syscall_64+0x183/0x700 [ 90.672623] ? finish_task_switch+0x1d2/0x830 [ 90.677188] ? syscall_return_slowpath+0x4e0/0x4e0 [ 90.682179] ? syscall_return_slowpath+0x215/0x4e0 [ 90.687144] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 90.692696] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 90.697703] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.703032] RIP: 0033:0x455f79 [ 90.706262] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 90.726706] RSP: 002b:00007fe5eb891c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 90.734483] RAX: ffffffffffffffda RBX: 00007fe5eb8926d4 RCX: 0000000000455f79 [ 90.741862] RDX: 0000000000000000 RSI: 0000000000003060 RDI: 0000000020ffd000 [ 90.749261] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 90.756632] R10: 0000000004000812 R11: 0000000000000246 R12: 0000000000000005 [ 90.764043] R13: 00000000004c0605 R14: 00000000004d0050 R15: 0000000000000005 [ 90.772120] ion_mmap: failure mapping buffer to userspace 2019/04/01 00:54:46 executed programs: 28 [ 90.780567] kasan: CONFIG_KASAN_INLINE enabled [ 90.790643] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 90.798330] general protection fault: 0000 [#1] SMP KASAN [ 90.803979] CPU: 0 PID: 5996 Comm: syz-executor5 Not tainted 4.18.0-rc4+ #1 [ 90.811158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.820631] RIP: 0010:_vm_normal_page+0x183/0x2f0 [ 90.825556] Code: c1 e9 03 80 3c 11 00 0f 85 14 01 00 00 4d 8b bc 24 90 00 00 00 48 ba 00 00 00 00 00 fc ff df 49 8d 7f 70 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 39 01 00 00 49 8b 57 70 48 85 d2 75 61 48 ba 00 [ 90.845421] RSP: 0018:ffff8801c0fef170 EFLAGS: 00010202 [ 90.850888] RAX: 0000000000046500 RBX: 1ffff100381fde30 RCX: 000000000000000e [ 90.858207] RDX: dffffc0000000000 RSI: 0000000020ffd000 RDI: 0000000000000070 [ 90.865522] RBP: ffff8801c0fef208 R08: ffffed0037fa8017 R09: ffffed0037fa8016 [ 90.872810] R10: ffffed0037fa8016 R11: ffff8801bfd400b3 R12: ffff8801cf622148 [ 90.880142] R13: ffff8801c0fef1e0 R14: 0000000046500320 R15: 0000000000000000 [ 90.887440] FS: 00007fe5eb892700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 90.895707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.901614] CR2: 00000000004e8704 CR3: 00000001bbb7f000 CR4: 00000000001406f0 [ 90.908933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.916218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.923536] Call Trace: [ 90.926183] ? __pte_alloc_kernel+0x250/0x250 [ 90.930726] ? kasan_check_write+0x14/0x20 [ 90.935023] ? do_raw_spin_lock+0xc1/0x200 [ 90.939342] unmap_page_range+0x824/0x2010 [ 90.943649] ? graph_lock+0x170/0x170 [ 90.947534] ? find_held_lock+0x36/0x1c0 [ 90.951641] ? vm_normal_page_pmd+0x420/0x420 [ 90.956169] ? find_held_lock+0x36/0x1c0 [ 90.960272] ? print_usage_bug+0xc0/0xc0 [ 90.964425] ? lock_downgrade+0x8f0/0x8f0 [ 90.968617] ? mark_held_locks+0xc9/0x160 [ 90.972818] ? console_unlock+0x5ed/0xf20 [ 90.977038] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.982139] ? trace_hardirqs_on+0xd/0x10 [ 90.986321] ? lock_acquire+0x1e4/0x540 [ 90.990363] ? vprintk_emit+0x3b3/0xad0 [ 90.994387] ? kmsg_dump_get_buffer+0x960/0x960 [ 90.999100] ? mark_held_locks+0xc9/0x160 [ 91.003304] ? track_pfn_insert+0x150/0x150 [ 91.007699] ? __down_trylock_console_sem+0xa5/0x190 [ 91.012861] ? vprintk_emit+0x3b3/0xad0 [ 91.016879] ? console_device+0xa0/0xa0 [ 91.020906] ? vprintk_emit+0x3b3/0xad0 [ 91.024963] ? __down_trylock_console_sem+0x104/0x190 [ 91.030185] ? vprintk_emit+0x3b3/0xad0 [ 91.034224] unmap_single_vma+0x121/0x300 [ 91.038481] unmap_vmas+0xe2/0x190 [ 91.042023] unmap_region+0x318/0x530 [ 91.045864] ? kasan_check_write+0x14/0x20 [ 91.050169] ? reusable_anon_vma+0x5f0/0x5f0 [ 91.054639] ? wait_for_completion+0x8d0/0x8d0 [ 91.059293] ? vprintk_func+0x22/0x53 [ 91.063186] ? printk+0x9a/0xc0 [ 91.066512] ? kmsg_dump_rewind_nolock+0xdf/0xdf [ 91.071297] ? pagerange_is_ram_callback+0x110/0x110 [ 91.076477] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 91.081490] ? ion_mmap.cold.11+0x13/0x35 [ 91.085766] mmap_region+0x11a2/0x1af0 [ 91.089762] ? __x64_sys_brk+0x800/0x800 [ 91.093908] ? arch_get_unmapped_area+0x770/0x770 [ 91.098841] ? lock_acquire+0x1e4/0x540 [ 91.102916] ? get_unmapped_area+0x1bf/0x340 [ 91.107402] do_mmap+0x886/0x1590 [ 91.110940] ? mmap_region+0x1af0/0x1af0 [ 91.115041] ? vm_mmap_pgoff+0x194/0x2c0 [ 91.119160] ? down_read_killable+0x200/0x200 [ 91.123743] ? security_mmap_file+0xcb/0x130 [ 91.128196] vm_mmap_pgoff+0x1d7/0x2c0 [ 91.132188] ? vma_is_stack_for_current+0x90/0x90 [ 91.137094] ? __sb_end_write+0x8a/0xb0 [ 91.141168] ksys_mmap_pgoff+0x424/0x7a0 [ 91.145301] ? find_mergeable_anon_vma+0x90/0x90 [ 91.150107] ? exit_to_usermode_loop+0x112/0x310 [ 91.154948] ? __ia32_sys_read+0xa0/0xa0 [ 91.159090] ? syscall_slow_exit_work+0x3f0/0x3f0 [ 91.163968] __x64_sys_mmap+0xe9/0x1b0 [ 91.167926] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 91.173054] do_syscall_64+0x183/0x700 [ 91.177048] ? finish_task_switch+0x1d2/0x830 [ 91.181614] ? syscall_return_slowpath+0x4e0/0x4e0 [ 91.186621] ? syscall_return_slowpath+0x215/0x4e0 [ 91.191769] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 91.197227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 91.202193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.207438] RIP: 0033:0x455f79 [ 91.210636] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 91.230322] RSP: 002b:00007fe5eb891c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 91.238131] RAX: ffffffffffffffda RBX: 00007fe5eb8926d4 RCX: 0000000000455f79 [ 91.245466] RDX: 0000000000000000 RSI: 0000000000003060 RDI: 0000000020ffd000 [ 91.252777] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 91.260112] R10: 0000000004000812 R11: 0000000000000246 R12: 0000000000000005 [ 91.267453] R13: 00000000004c0605 R14: 00000000004d0050 R15: 0000000000000005 [ 91.274821] Modules linked in: [ 91.278219] ---[ end trace 2a02935cf4fe66ee ]--- [ 91.283125] RIP: 0010:_vm_normal_page+0x183/0x2f0 [ 91.288133] Code: c1 e9 03 80 3c 11 00 0f 85 14 01 00 00 4d 8b bc 24 90 00 00 00 48 ba 00 00 00 00 00 fc ff df 49 8d 7f 70 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 39 01 00 00 49 8b 57 70 48 85 d2 75 61 48 ba 00 [ 91.307534] RSP: 0018:ffff8801c0fef170 EFLAGS: 00010202 [ 91.313003] RAX: 0000000000046500 RBX: 1ffff100381fde30 RCX: 000000000000000e [ 91.320379] RDX: dffffc0000000000 RSI: 0000000020ffd000 RDI: 0000000000000070 [ 91.327794] RBP: ffff8801c0fef208 R08: ffffed0037fa8017 R09: ffffed0037fa8016 [ 91.335176] R10: ffffed0037fa8016 R11: ffff8801bfd400b3 R12: ffff8801cf622148 [ 91.342595] R13: ffff8801c0fef1e0 R14: 0000000046500320 R15: 0000000000000000 [ 91.350090] FS: 00007fe5eb892700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 91.358430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.364880] CR2: 00000000004e8704 CR3: 00000001bbb7f000 CR4: 00000000001406f0 [ 91.372303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.379673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.387102] Kernel panic - not syncing: Fatal exception [ 91.393026] Kernel Offset: disabled [ 91.396677] Rebooting in 86400 seconds..