[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.900833] kauditd_printk_skb: 8 callbacks suppressed [ 28.900845] audit: type=1800 audit(1544122334.631:29): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.935049] audit: type=1800 audit(1544122334.641:30): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 37.798674] WARNING: CPU: 0 PID: 6036 at mm/mempolicy.c:1745 alloc_pages_vma+0x1bd/0x4a0 [ 37.807208] Kernel panic - not syncing: panic_on_warn set ... [ 37.813094] CPU: 0 PID: 6036 Comm: syz-executor420 Not tainted 4.20.0-rc5+ #267 [ 37.820534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.829897] Call Trace: [ 37.832490] dump_stack+0x244/0x39d [ 37.836114] ? dump_stack_print_info.cold.1+0x20/0x20 [ 37.841323] panic+0x2ad/0x55c [ 37.844518] ? add_taint.cold.5+0x16/0x16 [ 37.848665] ? __warn.cold.8+0x5/0x45 [ 37.852460] ? __warn+0xe8/0x1d0 [ 37.855823] ? alloc_pages_vma+0x1bd/0x4a0 [ 37.860053] __warn.cold.8+0x20/0x45 [ 37.863867] ? rcu_softirq_qs+0x20/0x20 [ 37.867930] ? alloc_pages_vma+0x1bd/0x4a0 [ 37.872169] report_bug+0x254/0x2d0 [ 37.875795] do_error_trap+0x11b/0x200 [ 37.879680] do_invalid_op+0x36/0x40 [ 37.883391] ? alloc_pages_vma+0x1bd/0x4a0 [ 37.887661] invalid_op+0x14/0x20 [ 37.891112] RIP: 0010:alloc_pages_vma+0x1bd/0x4a0 [ 37.895949] Code: 5f 5d c3 e8 35 2f bf ff 45 89 ec 31 ff 41 81 e4 00 00 04 00 44 89 e6 e8 31 30 bf ff 45 85 e4 0f 84 50 ff ff ff e8 13 2f bf ff <0f> 0b e9 44 ff ff ff e8 07 2f bf ff e8 22 5e ff ff 48 89 c3 e9 6b [ 37.914851] RSP: 0018:ffff8881c0ec7298 EFLAGS: 00010293 [ 37.920226] RAX: ffff8881c1e060c0 RBX: ffff8881da96f000 RCX: ffffffff81c06c9f [ 37.927493] RDX: 0000000000000000 RSI: ffffffff81c06cad RDI: 0000000000000005 [ 37.934760] RBP: ffff8881c0ec72d8 R08: ffff8881c1e060c0 R09: ffffed103b5c5b5f [ 37.942022] R10: 0000000000000002 R11: ffff8881dae2dafb R12: 0000000000040000 [ 37.949288] R13: 00000000000742ca R14: ffff8881da96f008 R15: 0000000000000002 [ 37.956568] ? alloc_pages_vma+0x1af/0x4a0 [ 37.960796] ? alloc_pages_vma+0x1bd/0x4a0 [ 37.965027] ? alloc_pages_vma+0x1bd/0x4a0 [ 37.969261] do_huge_pmd_anonymous_page+0x59e/0x2030 [ 37.974358] ? zap_class+0x640/0x640 [ 37.978069] ? __thp_get_unmapped_area+0x180/0x180 [ 37.983002] ? find_held_lock+0x36/0x1c0 [ 37.987061] ? print_usage_bug+0xc0/0xc0 [ 37.991116] ? print_usage_bug+0xc0/0xc0 [ 37.995173] ? follow_page_mask+0x1bda/0x2160 [ 37.999660] ? lock_downgrade+0x900/0x900 [ 38.003812] ? __lock_acquire+0x62f/0x4c20 [ 38.008046] ? __lock_acquire+0x62f/0x4c20 [ 38.012280] ? print_usage_bug+0xc0/0xc0 [ 38.016340] ? mark_held_locks+0x130/0x130 [ 38.020569] ? mark_held_locks+0x130/0x130 [ 38.024797] ? gup_pgd_range+0x3ab0/0x3ab0 [ 38.029023] ? find_held_lock+0x36/0x1c0 [ 38.033088] __handle_mm_fault+0x3c91/0x5be0 [ 38.037558] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 38.042403] ? print_usage_bug+0xc0/0xc0 [ 38.046460] ? print_usage_bug+0xc0/0xc0 [ 38.050528] ? zap_class+0x640/0x640 [ 38.054239] ? zap_class+0x640/0x640 [ 38.057949] ? find_held_lock+0x36/0x1c0 [ 38.062018] ? handle_mm_fault+0x42a/0xc70 [ 38.066251] ? lock_downgrade+0x900/0x900 [ 38.070392] ? check_preemption_disabled+0x48/0x280 [ 38.075404] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 38.080328] ? kasan_check_read+0x11/0x20 [ 38.084470] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 38.089744] ? rcu_softirq_qs+0x20/0x20 [ 38.093714] ? trace_hardirqs_off_caller+0x310/0x310 [ 38.098813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 38.104347] ? check_preemption_disabled+0x48/0x280 [ 38.109517] handle_mm_fault+0x54f/0xc70 [ 38.113612] ? __handle_mm_fault+0x5be0/0x5be0 [ 38.118422] ? find_vma+0x34/0x190 [ 38.122125] __do_page_fault+0x5e8/0xe60 [ 38.126189] do_page_fault+0xf2/0x7e0 [ 38.129990] ? vmalloc_sync_all+0x30/0x30 [ 38.134178] ? error_entry+0x76/0xd0 [ 38.137921] ? trace_hardirqs_off_caller+0xbb/0x310 [ 38.142987] ? find_held_lock+0x36/0x1c0 [ 38.147086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.151935] ? trace_hardirqs_on_caller+0x310/0x310 [ 38.156950] ? __might_fault+0x12b/0x1e0 [ 38.161028] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.166004] page_fault+0x1e/0x30 [ 38.169470] RIP: 0010:__clear_user+0x3b/0x70 [ 38.173878] Code: f9 be 13 00 00 00 48 c7 c7 a0 47 d8 88 e8 ad 28 d8 f9 0f 1f 00 48 89 d8 48 c1 eb 03 4c 89 e7 83 e0 07 48 89 d9 48 85 c9 74 0f <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 38.192794] RSP: 0018:ffff8881c0ec7cd0 EFLAGS: 00010202 [ 38.198150] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 38.205413] RDX: 0000000000000000 RSI: ffffffff81b1b3d3 RDI: 00000000203e8000 [ 38.212676] RBP: ffff8881c0ec7ce0 R08: 1ffff110381d8f76 R09: 0000000000000008 [ 38.219980] R10: 0000000000000001 R11: ffff8881c1e060c0 R12: 00000000203e8000 [ 38.227391] R13: 00000000203e8000 R14: 00007ffffffff000 R15: 0000000000000000 [ 38.234670] ? __might_fault+0x1a3/0x1e0 [ 38.238731] clear_user+0xb1/0xe0 [ 38.242186] __ia32_compat_sys_get_mempolicy+0x204/0x2e0 [ 38.247633] ? __ia32_sys_get_mempolicy+0x140/0x140 [ 38.252767] ? __ia32_sys_mbind+0xdd/0x1a0 [ 38.257006] do_fast_syscall_32+0x34d/0xfb2 [ 38.261326] ? do_int80_syscall_32+0x890/0x890 [ 38.265920] ? entry_SYSENTER_compat+0x68/0x7f [ 38.270499] ? trace_hardirqs_off_caller+0xbb/0x310 [ 38.275513] ? syscall_return_slowpath+0x5e0/0x5e0 [ 38.280477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.285318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.290200] ? trace_hardirqs_on_caller+0x310/0x310 [ 38.295249] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 38.300270] ? prepare_exit_to_usermode+0x291/0x3b0 [ 38.305287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.310175] entry_SYSENTER_compat+0x70/0x7f [ 38.314578] RIP: 0023:0xf7ff2a29 [ 38.317941] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 38.336841] RSP: 002b:00000000ffaf87fc EFLAGS: 00000282 ORIG_RAX: 0000000000000113 [ 38.344547] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000203e8000 [ 38.351812] RDX: 0000000000000401 RSI: 00000000208d3000 RDI: 0000000000000003 [ 38.359075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 38.366336] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 38.373600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 38.382303] Kernel Offset: disabled [ 38.386009] Rebooting in 86400 seconds..