Warning: Permanently added '10.128.1.22' (ECDSA) to the list of known hosts. [ 63.426901] random: sshd: uninitialized urandom read (32 bytes read) [ 63.603583] audit: type=1400 audit(1566814484.944:36): avc: denied { map } for pid=6803 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/08/26 10:14:45 parsed 1 programs [ 64.431502] audit: type=1400 audit(1566814485.774:37): avc: denied { map } for pid=6803 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 65.159864] random: cc1: uninitialized urandom read (8 bytes read) 2019/08/26 10:14:47 executed programs: 0 [ 66.012751] audit: type=1400 audit(1566814487.354:38): avc: denied { map } for pid=6803 comm="syz-execprog" path="/root/syzkaller-shm481643590" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 66.291071] IPVS: ftp: loaded support on port[0] = 21 [ 67.191484] chnl_net:caif_netlink_parms(): no params data found [ 67.218767] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.225636] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.232755] device bridge_slave_0 entered promiscuous mode [ 67.239733] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.246417] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.253282] device bridge_slave_1 entered promiscuous mode [ 67.267313] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.275959] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.291129] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 67.298483] team0: Port device team_slave_0 added [ 67.303991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 67.311042] team0: Port device team_slave_1 added [ 67.316297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 67.323746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.371807] device hsr_slave_0 entered promiscuous mode [ 67.420342] device hsr_slave_1 entered promiscuous mode [ 67.460528] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 67.467342] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 67.479804] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.486415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.493263] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.499605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.524496] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 67.531539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.539045] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.547350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.566512] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.573925] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.583805] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 67.589891] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.597950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.606007] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.612406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.621343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.628887] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.635400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.649486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.657865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.668240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.678006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.687983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.696743] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 67.703642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.714899] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 67.723871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.201178] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.656254] audit: type=1400 audit(1566814489.994:39): avc: denied { map } for pid=6832 comm="syz-executor.0" path="/root/syzkaller-testdir239759720/syzkaller.sDAu4r/0/file0/mem" dev="devtmpfs" ino=13685 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file permissive=1 [ 68.657075] FAULT_INJECTION: forcing a failure. [ 68.657075] name failslab, interval 1, probability 0, space 0, times 1 [ 68.697908] CPU: 0 PID: 6832 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 68.704901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.714236] Call Trace: [ 68.716810] dump_stack+0x138/0x197 [ 68.720420] should_fail.cold+0x10f/0x159 [ 68.724568] should_failslab+0xdb/0x130 [ 68.728547] kmem_cache_alloc_trace+0x2e9/0x790 [ 68.733202] ? pat_pagerange_is_ram+0x90/0xf0 [ 68.737691] ? __init_cache_modes+0x240/0x240 [ 68.742229] reserve_memtype+0x164/0x640 [ 68.746524] ? pat_init+0x420/0x420 [ 68.750141] ? __init_cache_modes+0x240/0x240 [ 68.754621] reserve_pfn_range+0x11c/0x390 [ 68.758944] ? arch_io_reserve_memtype_wc+0x80/0x80 [ 68.763945] ? copy_process.part.0+0x444f/0x6a00 [ 68.768678] ? SyS_clone+0x37/0x50 [ 68.772221] ? do_syscall_64+0x1e8/0x640 [ 68.776334] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 68.781786] track_pfn_copy+0x14a/0x190 [ 68.785738] ? reserve_pfn_range+0x390/0x390 [ 68.790212] ? trace_hardirqs_on+0x10/0x10 [ 68.794544] copy_page_range+0x1255/0x1bd0 [ 68.803284] ? save_trace+0x290/0x290 [ 68.807075] ? copy_process.part.0+0x41de/0x6a00 [ 68.811812] ? find_held_lock+0x35/0x130 [ 68.815848] ? vma_compute_subtree_gap+0x190/0x1f0 [ 68.820770] ? vma_gap_callbacks_rotate+0x62/0x80 [ 68.825607] ? __rb_insert_augmented+0x22f/0xdf0 [ 68.830346] ? __pmd_alloc+0x410/0x410 [ 68.834212] ? __vma_link_rb+0x247/0x340 [ 68.838358] copy_process.part.0+0x4764/0x6a00 [ 68.843049] ? __cleanup_sighand+0x50/0x50 [ 68.847269] ? vfs_write+0x25f/0x500 [ 68.850966] _do_fork+0x19e/0xce0 [ 68.854399] ? fork_idle+0x280/0x280 [ 68.858089] ? vfs_write+0x104/0x500 [ 68.861783] ? SyS_write+0x15e/0x230 [ 68.865478] SyS_clone+0x37/0x50 [ 68.868821] ? sys_vfork+0x30/0x30 [ 68.872350] do_syscall_64+0x1e8/0x640 [ 68.876219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 68.881109] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 68.886295] RIP: 0033:0x459879 [ 68.889469] RSP: 002b:00007ffcd423bd28 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 68.897155] RAX: ffffffffffffffda RBX: 00007ffcd423bd40 RCX: 0000000000459879 [ 68.904405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.911766] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 68.919018] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000011f3914 [ 68.926276] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 68.935120] ------------[ cut here ]------------ [ 68.939984] WARNING: CPU: 0 PID: 6832 at arch/x86/mm/pat.c:1020 untrack_pfn+0x1dc/0x220 [ 68.948121] Kernel panic - not syncing: panic_on_warn set ... [ 68.948121] [ 68.955465] CPU: 0 PID: 6832 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 68.962454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.971846] Call Trace: [ 68.974436] dump_stack+0x138/0x197 [ 68.978128] panic+0x1f2/0x426 [ 68.981310] ? add_taint.cold+0x16/0x16 [ 68.985435] ? untrack_pfn+0x1dc/0x220 [ 68.989308] ? untrack_pfn+0x1dc/0x220 [ 68.993352] __warn.cold+0x2f/0x36 [ 68.996921] ? ist_end_non_atomic+0x10/0x10 [ 69.001240] ? untrack_pfn+0x1dc/0x220 [ 69.005124] report_bug+0x216/0x254 [ 69.008847] do_error_trap+0x1bb/0x310 [ 69.012717] ? math_error+0x360/0x360 [ 69.016499] ? lock_downgrade+0x6e0/0x6e0 [ 69.020634] ? unmap_page_range+0xbe7/0x1770 [ 69.025194] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 69.030149] do_invalid_op+0x1b/0x20 [ 69.033956] invalid_op+0x1b/0x40 [ 69.037393] RIP: 0010:untrack_pfn+0x1dc/0x220 [ 69.041871] RSP: 0018:ffff88809a6d7948 EFLAGS: 00010297 [ 69.047231] RAX: ffff8880a9158140 RBX: ffff888095520a50 RCX: 0000000000000000 [ 69.054486] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 69.061902] RBP: ffff88809a6d79d8 R08: ffff8880a9158140 R09: 0000000000000000 [ 69.069219] R10: 0000000000000000 R11: ffff8880a9158140 R12: 1ffff110134daf2a [ 69.076480] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88809a6d79b0 [ 69.084237] ? untrack_pfn+0x1dc/0x220 [ 69.088309] ? track_pfn_insert+0x150/0x150 [ 69.092871] ? vm_normal_page_pmd+0x360/0x360 [ 69.097354] ? uprobe_munmap+0x94/0x210 [ 69.101363] unmap_single_vma+0x182/0x2c0 [ 69.105612] unmap_vmas+0xac/0x170 [ 69.109171] exit_mmap+0x285/0x4e0 [ 69.112823] ? SyS_munmap+0x30/0x30 [ 69.116436] ? kmem_cache_free+0x244/0x2b0 [ 69.120701] ? __khugepaged_exit+0xcf/0x3d0 [ 69.125149] ? lock_downgrade+0x6e0/0x6e0 [ 69.129294] mmput+0x114/0x440 [ 69.132468] copy_process.part.0+0x4743/0x6a00 [ 69.137039] ? __cleanup_sighand+0x50/0x50 [ 69.141256] ? vfs_write+0x25f/0x500 [ 69.144964] _do_fork+0x19e/0xce0 [ 69.148423] ? fork_idle+0x280/0x280 [ 69.152120] ? vfs_write+0x104/0x500 [ 69.155833] ? SyS_write+0x15e/0x230 [ 69.159552] SyS_clone+0x37/0x50 [ 69.162897] ? sys_vfork+0x30/0x30 [ 69.166419] do_syscall_64+0x1e8/0x640 [ 69.170290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 69.175119] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 69.180303] RIP: 0033:0x459879 [ 69.183475] RSP: 002b:00007ffcd423bd28 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 69.191181] RAX: ffffffffffffffda RBX: 00007ffcd423bd40 RCX: 0000000000459879 [ 69.198439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.205698] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 69.213280] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000011f3914 [ 69.220537] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 69.229379] Kernel Offset: disabled [ 69.233426] Rebooting in 86400 seconds..