Warning: Permanently added '10.128.0.145' (ECDSA) to the list of known hosts. [ 37.302893] random: sshd: uninitialized urandom read (32 bytes read) [ 37.482120] audit: type=1400 audit(1566667184.255:36): avc: denied { map } for pid=6743 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/08/24 17:19:45 parsed 1 programs [ 38.283787] audit: type=1400 audit(1566667185.055:37): avc: denied { map } for pid=6743 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13803 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 38.814214] random: cc1: uninitialized urandom read (8 bytes read) 2019/08/24 17:19:46 executed programs: 0 [ 39.411148] audit: type=1400 audit(1566667186.185:38): avc: denied { map } for pid=6743 comm="syz-execprog" path="/root/syzkaller-shm198751210" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.680899] IPVS: ftp: loaded support on port[0] = 21 [ 40.473142] chnl_net:caif_netlink_parms(): no params data found [ 40.499828] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.506429] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.513306] device bridge_slave_0 entered promiscuous mode [ 40.519807] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.526524] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.533401] device bridge_slave_1 entered promiscuous mode [ 40.546792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.555641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.570766] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.577828] team0: Port device team_slave_0 added [ 40.583346] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.590444] team0: Port device team_slave_1 added [ 40.595502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.602765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.651740] device hsr_slave_0 entered promiscuous mode [ 40.690256] device hsr_slave_1 entered promiscuous mode [ 40.730549] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.737378] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.749442] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.755858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.762695] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.769019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.794342] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 40.801226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.808444] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.816390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.835373] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.842782] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.851886] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.857937] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.866010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.873599] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.879909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.888350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.896161] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.902522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.919249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.929106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.939932] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.946642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.955191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.962619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.969929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.977484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.984188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.996737] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 41.005758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.480837] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 42.039088] audit: type=1400 audit(1566667188.805:39): avc: denied { map } for pid=6774 comm="syz-executor.0" path="/root/syzkaller-testdir530332844/syzkaller.Cdc0nd/0/file0/mem" dev="devtmpfs" ino=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file permissive=1 [ 42.044654] x86/PAT: syz-executor.0:6774 freeing invalid memtype [mem 0x00001000-0x00001fff] [ 42.079654] FAULT_INJECTION: forcing a failure. [ 42.079654] name failslab, interval 1, probability 0, space 0, times 1 [ 42.090969] CPU: 1 PID: 6774 Comm: syz-executor.0 Not tainted 4.14.139 #35 [ 42.097966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.107293] Call Trace: [ 42.109881] dump_stack+0x138/0x19c [ 42.113483] should_fail.cold+0x10f/0x159 [ 42.117611] should_failslab+0xdb/0x130 [ 42.121560] kmem_cache_alloc_trace+0x2e9/0x790 [ 42.126204] ? pat_pagerange_is_ram+0x90/0xf0 [ 42.130673] ? __init_cache_modes+0x240/0x240 [ 42.135148] reserve_memtype+0x164/0x640 [ 42.139192] ? lock_downgrade+0x6e0/0x6e0 [ 42.143317] ? pat_init+0x420/0x420 [ 42.146918] ? __init_cache_modes+0x240/0x240 [ 42.151396] reserve_pfn_range+0x11c/0x390 [ 42.155607] ? arch_io_reserve_memtype_wc+0x80/0x80 [ 42.160695] ? copy_process.part.0+0x444f/0x6a00 [ 42.165435] ? SyS_clone+0x37/0x50 [ 42.168950] ? do_syscall_64+0x1e8/0x640 [ 42.172987] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 42.178326] track_pfn_copy+0x14a/0x190 [ 42.182274] ? reserve_pfn_range+0x390/0x390 [ 42.186660] copy_page_range+0x1255/0x1bd0 [ 42.190868] ? kmem_cache_alloc+0x568/0x780 [ 42.195169] ? save_trace+0x290/0x290 [ 42.198943] ? kmem_cache_alloc+0x568/0x780 [ 42.203238] ? copy_process.part.0+0x41de/0x6a00 [ 42.208055] ? find_held_lock+0x35/0x130 [ 42.212092] ? vma_compute_subtree_gap+0x190/0x1f0 [ 42.217000] ? vma_gap_callbacks_rotate+0x62/0x80 [ 42.221820] ? __rb_insert_augmented+0x22f/0xdf0 [ 42.226550] ? __pmd_alloc+0x410/0x410 [ 42.230411] ? __vma_link_rb+0x247/0x340 [ 42.234450] copy_process.part.0+0x4764/0x6a00 [ 42.239016] ? __cleanup_sighand+0x50/0x50 [ 42.243226] ? vfs_write+0x25f/0x500 [ 42.246922] _do_fork+0x19e/0xce0 [ 42.250355] ? fork_idle+0x280/0x280 [ 42.254046] ? vfs_write+0x104/0x500 [ 42.257740] ? SyS_write+0x15e/0x230 [ 42.261438] SyS_clone+0x37/0x50 [ 42.264786] ? sys_vfork+0x30/0x30 [ 42.268303] do_syscall_64+0x1e8/0x640 [ 42.272164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.276985] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 42.282157] RIP: 0033:0x459879 [ 42.285324] RSP: 002b:00007ffc5dc43548 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 42.293005] RAX: ffffffffffffffda RBX: 00007ffc5dc43560 RCX: 0000000000459879 [ 42.300255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.307521] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 42.314768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001be1914 [ 42.322015] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 42.331732] ------------[ cut here ]------------ [ 42.336498] WARNING: CPU: 0 PID: 6774 at arch/x86/mm/pat.c:1020 untrack_pfn+0x1dc/0x220 [ 42.344610] Kernel panic - not syncing: panic_on_warn set ... [ 42.344610] [ 42.351945] CPU: 0 PID: 6774 Comm: syz-executor.0 Not tainted 4.14.139 #35 [ 42.358929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.368256] Call Trace: [ 42.370909] dump_stack+0x138/0x19c [ 42.374513] panic+0x1f2/0x426 [ 42.378097] ? add_taint.cold+0x16/0x16 [ 42.382063] ? untrack_pfn+0x1dc/0x220 [ 42.385924] ? untrack_pfn+0x1dc/0x220 [ 42.392694] __warn.cold+0x2f/0x36 [ 42.396212] ? ist_end_non_atomic+0x10/0x10 [ 42.400514] ? untrack_pfn+0x1dc/0x220 [ 42.404377] report_bug+0x216/0x254 [ 42.407983] do_error_trap+0x1bb/0x310 [ 42.411843] ? math_error+0x360/0x360 [ 42.415615] ? lock_downgrade+0x6e0/0x6e0 [ 42.419731] ? unmap_page_range+0xbe7/0x1770 [ 42.424113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.428931] do_invalid_op+0x1b/0x20 [ 42.432615] invalid_op+0x1b/0x40 [ 42.436042] RIP: 0010:untrack_pfn+0x1dc/0x220 [ 42.440521] RSP: 0018:ffff888088637948 EFLAGS: 00010297 [ 42.445881] RAX: ffff8880922aa400 RBX: ffff888091834630 RCX: 0000000000000000 [ 42.453136] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 42.460389] RBP: ffff8880886379d8 R08: ffff8880922aa400 R09: 0000000000000000 [ 42.467633] R10: 0000000000000000 R11: ffff8880922aa400 R12: 1ffff110110c6f2a [ 42.474879] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880886379b0 [ 42.482130] ? untrack_pfn+0x1dc/0x220 [ 42.485986] ? track_pfn_insert+0x150/0x150 [ 42.490278] ? vm_normal_page_pmd+0x360/0x360 [ 42.494744] ? uprobe_munmap+0x94/0x210 [ 42.498691] unmap_single_vma+0x182/0x2c0 [ 42.502813] unmap_vmas+0xac/0x170 [ 42.506325] exit_mmap+0x285/0x4e0 [ 42.509836] ? SyS_munmap+0x30/0x30 [ 42.513445] ? kmem_cache_free+0x244/0x2b0 [ 42.517654] ? __khugepaged_exit+0xcf/0x3d0 [ 42.521948] ? lock_downgrade+0x6e0/0x6e0 [ 42.526066] mmput+0x114/0x440 [ 42.529245] copy_process.part.0+0x4743/0x6a00 [ 42.533807] ? __cleanup_sighand+0x50/0x50 [ 42.538016] ? vfs_write+0x25f/0x500 [ 42.541708] _do_fork+0x19e/0xce0 [ 42.545137] ? fork_idle+0x280/0x280 [ 42.548821] ? vfs_write+0x104/0x500 [ 42.552507] ? SyS_write+0x15e/0x230 [ 42.556201] SyS_clone+0x37/0x50 [ 42.559537] ? sys_vfork+0x30/0x30 [ 42.563063] do_syscall_64+0x1e8/0x640 [ 42.566922] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.571739] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 42.576901] RIP: 0033:0x459879 [ 42.580070] RSP: 002b:00007ffc5dc43548 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 42.587746] RAX: ffffffffffffffda RBX: 00007ffc5dc43560 RCX: 0000000000459879 [ 42.594986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.602241] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 42.609481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001be1914 [ 42.616724] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 0000000000000004 [ 42.625344] Kernel Offset: disabled [ 42.629023] Rebooting in 86400 seconds..