[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.577473] kauditd_printk_skb: 7 callbacks suppressed [ 28.577490] audit: type=1800 audit(1544124371.127:29): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.603738] audit: type=1800 audit(1544124371.127:30): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.871426] WARNING: CPU: 0 PID: 6024 at mm/mempolicy.c:1745 alloc_pages_vma+0x1bd/0x4a0 [ 38.879761] Kernel panic - not syncing: panic_on_warn set ... [ 38.885682] CPU: 0 PID: 6024 Comm: syz-executor180 Not tainted 4.20.0-rc5+ #267 [ 38.893126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.902478] Call Trace: [ 38.905052] dump_stack+0x244/0x39d [ 38.908687] ? dump_stack_print_info.cold.1+0x20/0x20 [ 38.913867] panic+0x2ad/0x55c [ 38.917046] ? add_taint.cold.5+0x16/0x16 [ 38.921202] ? __warn.cold.8+0x5/0x45 [ 38.924986] ? __warn+0xe8/0x1d0 [ 38.928347] ? alloc_pages_vma+0x1bd/0x4a0 [ 38.932567] __warn.cold.8+0x20/0x45 [ 38.936266] ? rcu_softirq_qs+0x20/0x20 [ 38.940225] ? alloc_pages_vma+0x1bd/0x4a0 [ 38.944443] report_bug+0x254/0x2d0 [ 38.948057] do_error_trap+0x11b/0x200 [ 38.951930] do_invalid_op+0x36/0x40 [ 38.955629] ? alloc_pages_vma+0x1bd/0x4a0 [ 38.959853] invalid_op+0x14/0x20 [ 38.963292] RIP: 0010:alloc_pages_vma+0x1bd/0x4a0 [ 38.968128] Code: 5f 5d c3 e8 35 2f bf ff 45 89 ec 31 ff 41 81 e4 00 00 04 00 44 89 e6 e8 31 30 bf ff 45 85 e4 0f 84 50 ff ff ff e8 13 2f bf ff <0f> 0b e9 44 ff ff ff e8 07 2f bf ff e8 22 5e ff ff 48 89 c3 e9 6b [ 38.987014] RSP: 0018:ffff8881c125ed48 EFLAGS: 00010293 [ 38.992378] RAX: ffff8881c1238400 RBX: ffff8881da96f280 RCX: ffffffff81c06c9f [ 38.999634] RDX: 0000000000000000 RSI: ffffffff81c06cad RDI: 0000000000000005 [ 39.006889] RBP: ffff8881c125ed88 R08: ffff8881c1238400 R09: ffffed103b5c5b5f [ 39.014157] R10: 0000000000000002 R11: ffff8881dae2dafb R12: 0000000000040000 [ 39.021411] R13: 00000000000742ca R14: ffff8881da96f288 R15: 0000000000000002 [ 39.028718] ? alloc_pages_vma+0x1af/0x4a0 [ 39.032950] ? alloc_pages_vma+0x1bd/0x4a0 [ 39.037173] ? alloc_pages_vma+0x1bd/0x4a0 [ 39.041401] do_huge_pmd_anonymous_page+0x59e/0x2030 [ 39.046504] ? __lock_acquire+0x62f/0x4c20 [ 39.050725] ? zap_class+0x640/0x640 [ 39.054431] ? __thp_get_unmapped_area+0x180/0x180 [ 39.059348] ? mark_held_locks+0x130/0x130 [ 39.063570] ? print_usage_bug+0xc0/0xc0 [ 39.067623] ? print_usage_bug+0xc0/0xc0 [ 39.071671] ? print_usage_bug+0xc0/0xc0 [ 39.075717] ? print_usage_bug+0xc0/0xc0 [ 39.079764] ? print_usage_bug+0xc0/0xc0 [ 39.083844] ? print_usage_bug+0xc0/0xc0 [ 39.087913] ? __lock_acquire+0x62f/0x4c20 [ 39.092134] ? __lock_acquire+0x62f/0x4c20 [ 39.096373] ? __lock_acquire+0x62f/0x4c20 [ 39.100597] ? print_usage_bug+0xc0/0xc0 [ 39.104648] ? mark_held_locks+0x130/0x130 [ 39.108870] ? mark_held_locks+0x130/0x130 [ 39.113131] __handle_mm_fault+0x3c91/0x5be0 [ 39.117522] ? print_usage_bug+0xc0/0xc0 [ 39.121574] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 39.126402] ? print_usage_bug+0xc0/0xc0 [ 39.130449] ? print_usage_bug+0xc0/0xc0 [ 39.134497] ? zap_class+0x640/0x640 [ 39.138211] ? zap_class+0x640/0x640 [ 39.141910] ? find_held_lock+0x36/0x1c0 [ 39.145963] ? handle_mm_fault+0x42a/0xc70 [ 39.150184] ? lock_downgrade+0x900/0x900 [ 39.154324] ? check_preemption_disabled+0x48/0x280 [ 39.159341] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 39.164256] ? kasan_check_read+0x11/0x20 [ 39.168390] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 39.173657] ? rcu_softirq_qs+0x20/0x20 [ 39.177620] ? trace_hardirqs_off_caller+0x310/0x310 [ 39.182724] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 39.188250] ? check_preemption_disabled+0x48/0x280 [ 39.193257] handle_mm_fault+0x54f/0xc70 [ 39.197305] ? __handle_mm_fault+0x5be0/0x5be0 [ 39.201889] ? find_vma+0x34/0x190 [ 39.205418] __do_page_fault+0x5e8/0xe60 [ 39.209472] do_page_fault+0xf2/0x7e0 [ 39.213257] ? vmalloc_sync_all+0x30/0x30 [ 39.217407] ? error_entry+0x76/0xd0 [ 39.221121] ? trace_hardirqs_off_caller+0xbb/0x310 [ 39.226128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.230954] ? trace_hardirqs_on_caller+0x310/0x310 [ 39.235961] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.240791] page_fault+0x1e/0x30 [ 39.244246] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 39.249858] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 39.268746] RSP: 0018:ffff8881c125f788 EFLAGS: 00010202 [ 39.274090] RAX: 000000000000004b RBX: 0000000000000004 RCX: 0000000000000004 [ 39.281348] RDX: 0000000000000004 RSI: ffff8881c125f860 RDI: 0000000020d11000 [ 39.288604] RBP: ffff8881c125f7c0 R08: ffffed103824bf0d R09: ffffed103824bf0c [ 39.295858] R10: ffffed103824bf0c R11: 0000000000000003 R12: 0000000020d11004 [ 39.303125] R13: 0000000020d11000 R14: ffff8881c125f860 R15: 00007ffffffff000 [ 39.310394] ? _copy_to_user+0xf6/0x110 [ 39.314364] do_tcp_getsockopt.isra.43+0x2d5/0x3da0 [ 39.319370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.324892] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 39.330342] ? refcount_add_not_zero_checked+0x330/0x330 [ 39.335974] ? tcp_ioctl+0x740/0x740 [ 39.339690] ? kmem_cache_alloc_trace+0x353/0x750 [ 39.344533] ? __lockdep_init_map+0x105/0x590 [ 39.349022] ? find_held_lock+0x36/0x1c0 [ 39.353074] ? __fget+0x4aa/0x740 [ 39.356512] ? lock_downgrade+0x900/0x900 [ 39.360643] ? check_preemption_disabled+0x48/0x280 [ 39.365654] ? perf_trace_sched_process_exec+0x860/0x860 [ 39.371114] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 39.376637] ? aa_label_sk_perm+0x91/0x100 [ 39.380862] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 39.385776] ? aa_sk_perm+0x22b/0x8e0 [ 39.389563] ? aa_af_perm+0x5a0/0x5a0 [ 39.393352] ? __fd_install+0x2f9/0x8f0 [ 39.397323] compat_tcp_getsockopt+0x73/0x80 [ 39.401720] ? compat_tcp_getsockopt+0x73/0x80 [ 39.406296] compat_sock_common_getsockopt+0xb4/0x150 [ 39.411479] ? tcp_getsockopt+0xe0/0xe0 [ 39.415440] ? sock_common_getsockopt+0xe0/0xe0 [ 39.420093] __compat_sys_getsockopt+0x1b6/0x8a0 [ 39.424836] ? compat_sock_get_timestampns+0x220/0x220 [ 39.430102] ? do_fast_syscall_32+0x150/0xfb2 [ 39.434581] ? do_fast_syscall_32+0x150/0xfb2 [ 39.439064] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 39.443631] ? trace_hardirqs_on+0xbd/0x310 [ 39.447940] ? move_addr_to_kernel+0x70/0x70 [ 39.452359] ? entry_SYSENTER_compat+0x70/0x7f [ 39.456927] ? trace_hardirqs_off_caller+0x310/0x310 [ 39.462017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.467541] __ia32_compat_sys_getsockopt+0xbd/0x150 [ 39.472880] do_fast_syscall_32+0x34d/0xfb2 [ 39.477190] ? do_int80_syscall_32+0x890/0x890 [ 39.481759] ? entry_SYSENTER_compat+0x68/0x7f [ 39.486339] ? trace_hardirqs_off_caller+0xbb/0x310 [ 39.491362] ? syscall_return_slowpath+0x5e0/0x5e0 [ 39.496292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.501141] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.505971] ? trace_hardirqs_on_caller+0x310/0x310 [ 39.510974] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 39.515975] ? prepare_exit_to_usermode+0x291/0x3b0 [ 39.520977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.525832] entry_SYSENTER_compat+0x70/0x7f [ 39.530228] RIP: 0023:0xf7fd0a29 [ 39.533623] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 39.552522] RSP: 002b:00000000fff4929c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 39.560216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 39.567470] RDX: 0000000000000005 RSI: 0000000020d11000 RDI: 0000000020000000 [ 39.574725] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 39.581976] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 39.589230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.597609] Kernel Offset: disabled [ 39.601373] Rebooting in 86400 seconds..