[ 58.876503][ T26] audit: type=1800 audit(1572965847.215:25): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.903216][ T26] audit: type=1800 audit(1572965847.215:26): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.947708][ T26] audit: type=1800 audit(1572965847.215:27): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 59.655088][ T8748] sshd (8748) used greatest stack depth: 22888 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 66.997517][ T8839] kasan: CONFIG_KASAN_INLINE enabled [ 67.003246][ T8839] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 67.011291][ T8839] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 67.018299][ T8839] CPU: 0 PID: 8839 Comm: syz-executor009 Not tainted 5.4.0-rc6-next-20191105 #0 [ 67.027470][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.037518][ T8839] RIP: 0010:pagemap_pmd_range+0x83/0x1e40 [ 67.043221][ T8839] Code: c1 ea 03 80 3c 02 00 0f 85 ef 1a 00 00 48 8b 43 18 49 8d 7f 40 48 89 fa 48 c1 ea 03 48 89 45 c8 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 be 1a 00 00 49 8b 5f 40 be 08 00 00 00 4c 8d ab [ 67.062802][ T8839] RSP: 0018:ffff8880a4e4f288 EFLAGS: 00010202 [ 67.068845][ T8839] RAX: dffffc0000000000 RBX: ffff8880a4e4f438 RCX: ffff8880a4e4f438 [ 67.076792][ T8839] RDX: 0000000000000008 RSI: ffffffff81dd1b94 RDI: 0000000000000040 [ 67.084739][ T8839] RBP: ffff8880a4e4f300 R08: ffff8880992ee040 R09: ffffed1012180ad2 [ 67.092684][ T8839] R10: ffffed1012180ad1 R11: ffff888090c0568b R12: ffff8880a53a2010 [ 67.100630][ T8839] R13: 0000000000600000 R14: 00000000005fffff R15: 0000000000000000 [ 67.108580][ T8839] FS: 000000000172c880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 67.117482][ T8839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.124052][ T8839] CR2: 0000000000455150 CR3: 000000009f949000 CR4: 00000000001406f0 [ 67.131999][ T8839] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.139943][ T8839] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.147886][ T8839] Call Trace: [ 67.151153][ T8839] ? do_splice_to+0x127/0x180 [ 67.155824][ T8839] ? smaps_pte_range+0x1460/0x1460 [ 67.160911][ T8839] __walk_page_range+0x10ff/0x1b40 [ 67.166012][ T8839] walk_page_range+0x1c5/0x3b0 [ 67.170750][ T8839] ? __walk_page_range+0x1b40/0x1b40 [ 67.176008][ T8839] ? security_capable+0x95/0xc0 [ 67.180835][ T8839] pagemap_read+0x4d1/0x650 [ 67.185314][ T8839] ? smaps_rollup_open+0x160/0x160 [ 67.190402][ T8839] do_iter_read+0x4a4/0x660 [ 67.194876][ T8839] ? dup_iter+0x260/0x260 [ 67.199185][ T8839] vfs_readv+0xf0/0x160 [ 67.203316][ T8839] ? alloc_pages_current+0x10f/0x210 [ 67.208574][ T8839] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 67.214628][ T8839] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 67.220841][ T8839] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 67.227067][ T8839] ? iov_iter_get_pages_alloc+0x3ae/0x12f0 [ 67.232859][ T8839] ? memcpy_mcsafe_to_page+0x150/0x150 [ 67.238291][ T8839] ? aa_file_perm+0x40b/0xdd0 [ 67.242954][ T8839] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 67.248644][ T8839] ? iov_iter_pipe+0xba/0x2f0 [ 67.253295][ T8839] default_file_splice_read+0x482/0x8a0 [ 67.258816][ T8839] ? rcu_read_lock_held+0x9c/0xb0 [ 67.263815][ T8839] ? iter_file_splice_write+0xbe0/0xbe0 [ 67.269336][ T8839] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 67.275290][ T8839] ? __lock_acquire+0x16f2/0x4a00 [ 67.280306][ T8839] ? aa_path_link+0x340/0x340 [ 67.284957][ T8839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.291175][ T8839] ? security_file_permission+0x8f/0x380 [ 67.296781][ T8839] ? __mutex_init+0xef/0x130 [ 67.301343][ T8839] ? iter_file_splice_write+0xbe0/0xbe0 [ 67.306861][ T8839] do_splice_to+0x127/0x180 [ 67.311337][ T8839] splice_direct_to_actor+0x2d3/0x970 [ 67.316679][ T8839] ? generic_pipe_buf_nosteal+0x10/0x10 [ 67.322200][ T8839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.328411][ T8839] ? do_splice_to+0x180/0x180 [ 67.333072][ T8839] ? rw_verify_area+0x126/0x360 [ 67.337894][ T8839] do_splice_direct+0x1da/0x2a0 [ 67.342720][ T8839] ? splice_direct_to_actor+0x970/0x970 [ 67.348239][ T8839] ? rw_verify_area+0x126/0x360 [ 67.353062][ T8839] do_sendfile+0x597/0xd00 [ 67.357464][ T8839] ? do_compat_pwritev64+0x1c0/0x1c0 [ 67.362737][ T8839] ? do_sys_open+0x31d/0x5d0 [ 67.367302][ T8839] __x64_sys_sendfile64+0x1dd/0x220 [ 67.372473][ T8839] ? __ia32_sys_sendfile+0x230/0x230 [ 67.377735][ T8839] ? do_syscall_64+0x26/0x760 [ 67.382389][ T8839] ? lockdep_hardirqs_on+0x421/0x5e0 [ 67.387648][ T8839] ? trace_hardirqs_on+0x67/0x240 [ 67.392646][ T8839] do_syscall_64+0xfa/0x760 [ 67.397126][ T8839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.402989][ T8839] RIP: 0033:0x4401e9 [ 67.406861][ T8839] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 67.426436][ T8839] RSP: 002b:00007ffcb2c0cd38 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 67.434824][ T8839] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401e9 [ 67.442769][ T8839] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 67.450721][ T8839] RBP: 00000000006ca018 R08: 0000000000000012 R09: 65732f636f72702f [ 67.458677][ T8839] R10: 0000100000206201 R11: 0000000000000246 R12: 0000000000401ad0 [ 67.466623][ T8839] R13: 0000000000401b60 R14: 0000000000000000 R15: 0000000000000000 [ 67.474571][ T8839] Modules linked in: [ 67.479584][ T8839] ---[ end trace d938329fe3462ca9 ]--- [ 67.485080][ T8839] RIP: 0010:pagemap_pmd_range+0x83/0x1e40 [ 67.490777][ T8839] Code: c1 ea 03 80 3c 02 00 0f 85 ef 1a 00 00 48 8b 43 18 49 8d 7f 40 48 89 fa 48 c1 ea 03 48 89 45 c8 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 be 1a 00 00 49 8b 5f 40 be 08 00 00 00 4c 8d ab [ 67.510400][ T8839] RSP: 0018:ffff8880a4e4f288 EFLAGS: 00010202 [ 67.516477][ T8839] RAX: dffffc0000000000 RBX: ffff8880a4e4f438 RCX: ffff8880a4e4f438 [ 67.524473][ T8839] RDX: 0000000000000008 RSI: ffffffff81dd1b94 RDI: 0000000000000040 [ 67.532459][ T8839] RBP: ffff8880a4e4f300 R08: ffff8880992ee040 R09: ffffed1012180ad2 [ 67.540404][ T8839] R10: ffffed1012180ad1 R11: ffff888090c0568b R12: ffff8880a53a2010 [ 67.548381][ T8839] R13: 0000000000600000 R14: 00000000005fffff R15: 0000000000000000 [ 67.556365][ T8839] FS: 000000000172c880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 67.565299][ T8839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.571868][ T8839] CR2: 0000000000455150 CR3: 000000009f949000 CR4: 00000000001406f0 [ 67.579852][ T8839] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.587833][ T8839] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.595808][ T8839] Kernel panic - not syncing: Fatal exception [ 67.603251][ T8839] Kernel Offset: disabled [ 67.607570][ T8839] Rebooting in 86400 seconds..