INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-7,10.128.0.12' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.874764] FAULT_INJECTION: forcing a failure. [ 33.874764] name failslab, interval 1, probability 0, space 0, times 1 [ 33.876473] CPU: 1 PID: 3085 Comm: syzkaller719598 Not tainted 4.15.0-rc1-next-20171201+ #57 [ 33.877598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.878908] Call Trace: [ 33.879299] dump_stack+0x194/0x257 [ 33.879793] ? arch_local_irq_restore+0x53/0x53 [ 33.880434] ? find_held_lock+0x39/0x1d0 [ 33.881025] should_fail+0x8c0/0xa40 [ 33.881540] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 33.882231] ? find_held_lock+0x39/0x1d0 [ 33.882788] ? __lock_is_held+0xbc/0x140 [ 33.883348] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 33.884134] ? rcu_note_context_switch+0x710/0x710 [ 33.884791] ? lock_release+0xda0/0xda0 [ 33.885336] should_failslab+0xec/0x120 [ 33.885873] kmem_cache_alloc_trace+0x4b/0x750 [ 33.886497] ? ep_insert+0x25d/0x1b10 [ 33.887007] ? SyS_epoll_ctl+0x12e4/0x1ab0 [ 33.887587] binder_get_thread+0x1cf/0x870 [ 33.888158] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 33.888816] ? print_usage_bug+0x3f0/0x3f0 [ 33.889384] ? lock_downgrade+0x980/0x980 [ 33.889943] ? kmem_cache_alloc+0x4a2/0x760 [ 33.890528] ? lock_release+0xda0/0xda0 [ 33.891067] binder_poll+0x8c/0x390 [ 33.891561] ? binder_get_thread+0x870/0x870 [ 33.892154] ? rcu_read_lock_sched_held+0x108/0x120 [ 33.892828] ep_item_poll.isra.10+0xec/0x320 [ 33.893437] ep_insert+0x6a3/0x1b10 [ 33.893941] ? ep_poll+0x1190/0x1190 [ 33.894447] ? lock_release+0xda0/0xda0 [ 33.895460] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 33.901316] ? rcu_note_context_switch+0x710/0x710 [ 33.906220] ? __might_sleep+0x95/0x190 [ 33.910171] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 33.914291] ? __mutex_lock+0x16f/0x1a80 [ 33.918325] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 33.922445] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 33.926571] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 33.931732] ? check_noncircular+0x20/0x20 [ 33.935936] ? lock_downgrade+0x980/0x980 [ 33.940051] ? __free_insn_slot+0x5c0/0x5c0 [ 33.944342] ? check_noncircular+0x20/0x20 [ 33.948555] ? find_held_lock+0x39/0x1d0 [ 33.952597] ? find_held_lock+0x39/0x1d0 [ 33.956636] ? lock_downgrade+0x980/0x980 [ 33.960759] ? __might_fault+0xe0/0x1d0 [ 33.964725] ? __fget_light+0x29d/0x390 [ 33.968675] ? fget_raw+0x20/0x20 [ 33.972119] ? __might_sleep+0x95/0x190 [ 33.976060] ? ep_unregister_pollwait.isra.7+0x590/0x590 [ 33.981485] SyS_epoll_ctl+0x12e4/0x1ab0 [ 33.985514] ? SyS_epoll_ctl+0x12e4/0x1ab0 [ 33.989726] ? SyS_epoll_create+0x240/0x240 [ 33.994016] ? proc_fail_nth_write+0x9b/0x1d0 [ 33.998486] ? find_held_lock+0x39/0x1d0 [ 34.002526] ? lock_downgrade+0x980/0x980 [ 34.006642] ? kernel_read+0x120/0x120 [ 34.010506] ? __lock_is_held+0xbc/0x140 [ 34.014549] ? __sb_end_write+0x9e/0xd0 [ 34.018489] ? vfs_write+0x22a/0x510 [ 34.022175] ? SyS_write+0x184/0x220 [ 34.025860] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 34.030671] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.035661] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 34.040390] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 34.045111] RIP: 0033:0x4441a9 [ 34.048267] RSP: 002b:00007ffd023fc108 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 34.055943] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004441a9 [ 34.063180] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 34.070418] RBP: 0000000000000005 R08: 0000000000000001 R09: 0000000000000032 [ 34.077660] R10: 0000000020336ff4 R11: 0000000000000246 R12: 0000000000401ef0 [ 34.084896] R13: 0000000000401f80 R14: 0000000000000000 R15: 0000000000000000 [ 34.092697] kasan: CONFIG_KASAN_INLINE enabled [ 34.097282] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 34.104655] general protection fault: 0000 [#1] SMP KASAN [ 34.110171] Dumping ftrace buffer: [ 34.113687] (ftrace buffer empty) [ 34.117364] Modules linked in: [ 34.120528] CPU: 1 PID: 3085 Comm: syzkaller719598 Not tainted 4.15.0-rc1-next-20171201+ #57 [ 34.129064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.139109] task: 00000000d96cbce2 task.stack: 00000000f9bba1e1 [ 34.145138] RIP: 0010:binder_poll+0xa0/0x390 [ 34.149509] RSP: 0018:ffff8801d86c74c8 EFLAGS: 00010246 [ 34.154837] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff840282e0 [ 34.162071] RDX: 0000000000000000 RSI: ffffffff85f44b80 RDI: 0000000000000282 [ 34.169314] RBP: ffff8801d86c7570 R08: 1ffff1003b0d8dc6 R09: 0000000000000000 [ 34.176550] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b0d8e9d [ 34.183786] R13: ffff8801d86c7b00 R14: ffff8801cc3b92c0 R15: ffff8801d86c7548 [ 34.191029] FS: 0000000002678880(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 34.199221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.205068] CR2: 0000000020336ff4 CR3: 00000001cdd84000 CR4: 00000000001406e0 [ 34.212304] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.219539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.226774] Call Trace: [ 34.229327] ? binder_get_thread+0x870/0x870 [ 34.233703] ? rcu_read_lock_sched_held+0x108/0x120 [ 34.238694] ep_item_poll.isra.10+0xec/0x320 [ 34.243071] ep_insert+0x6a3/0x1b10 [ 34.246675] ? ep_poll+0x1190/0x1190 [ 34.250357] ? lock_release+0xda0/0xda0 [ 34.254295] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 34.260144] ? rcu_note_context_switch+0x710/0x710 [ 34.265038] ? __might_sleep+0x95/0x190 [ 34.268979] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 34.273094] ? __mutex_lock+0x16f/0x1a80 [ 34.277121] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 34.281245] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 34.285366] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 34.290522] ? check_noncircular+0x20/0x20 [ 34.294722] ? lock_downgrade+0x980/0x980 [ 34.298837] ? __free_insn_slot+0x5c0/0x5c0 [ 34.303124] ? check_noncircular+0x20/0x20 [ 34.307321] ? find_held_lock+0x39/0x1d0 [ 34.311351] ? find_held_lock+0x39/0x1d0 [ 34.315380] ? lock_downgrade+0x980/0x980 [ 34.319495] ? __might_fault+0xe0/0x1d0 [ 34.323436] ? __fget_light+0x29d/0x390 [ 34.327376] ? fget_raw+0x20/0x20 [ 34.330799] ? __might_sleep+0x95/0x190 [ 34.334736] ? ep_unregister_pollwait.isra.7+0x590/0x590 [ 34.340154] SyS_epoll_ctl+0x12e4/0x1ab0 [ 34.344178] ? SyS_epoll_ctl+0x12e4/0x1ab0 [ 34.348385] ? SyS_epoll_create+0x240/0x240 [ 34.352673] ? proc_fail_nth_write+0x9b/0x1d0 [ 34.357134] ? find_held_lock+0x39/0x1d0 [ 34.361171] ? lock_downgrade+0x980/0x980 [ 34.365285] ? kernel_read+0x120/0x120 [ 34.369140] ? __lock_is_held+0xbc/0x140 [ 34.373172] ? __sb_end_write+0x9e/0xd0 [ 34.377110] ? vfs_write+0x22a/0x510 [ 34.380788] ? SyS_write+0x184/0x220 [ 34.384465] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 34.389274] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 34.394254] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 34.398978] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 34.403704] RIP: 0033:0x4441a9 [ 34.406866] RSP: 002b:00007ffd023fc108 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 34.414540] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004441a9 [ 34.421775] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 34.429008] RBP: 0000000000000005 R08: 0000000000000001 R09: 0000000000000032 [ 34.436244] R10: 0000000020336ff4 R11: 0000000000000246 R12: 0000000000401ef0 [ 34.443481] R13: 0000000000401f80 R14: 0000000000000000 R15: 0000000000000000 [ 34.450723] Code: 03 80 3c 18 00 0f 85 3c 02 00 00 49 8b be b0 01 00 00 e8 04 f7 ff ff 48 89 c2 48 89 c3 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 02 00 00 48 8b 3b be 15 11 00 00 e8 b9 8b [ 34.469786] RIP: binder_poll+0xa0/0x390 RSP: ffff8801d86c74c8 [ 34.475682] ---[ end trace fc2a9656b3c84773 ]--- [ 34.480445] Kernel panic - not syncing: Fatal exception [ 34.486235] Dumping ftrace buffer: [ 34.489748] (ftrace buffer empty) [ 34.493862] Kernel Offset: disabled [ 34.497459] Rebooting in 86400 seconds..