[ OK ] Started Getty on tty3. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 54.204911] audit: type=1400 audit(1590101800.770:8): avc: denied { execmem } for pid=6419 comm="syz-executor666" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 54.218750] IPVS: ftp: loaded support on port[0] = 21 [ 54.352332] vma ffff88809adb0568 start 0000000020000000 end 0000000020b36000 [ 54.352332] next ffff88809adb0da8 prev ffff88809adb0eb0 mm ffff888089e34a00 [ 54.352332] prot 25 anon_vma 0000000000000000 vm_ops ffffffff87720c20 [ 54.352332] pgoff 0 file ffff888096293d00 private_data 0000000000000000 [ 54.352332] flags: 0xfe(write|exec|shared|mayread|maywrite|mayexec|mayshare) [ 54.388128] ------------[ cut here ]------------ [ 54.393003] kernel BUG at mm/memory.c:3947! [ 54.405743] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 54.411642] CPU: 0 PID: 6449 Comm: syz-executor666 Not tainted 4.19.124-syzkaller #0 [ 54.421143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.430985] RIP: 0010:__handle_mm_fault+0x29b0/0x43b0 [ 54.436563] Code: d6 d5 ff 84 db 0f 84 81 e7 ff ff e8 ea d4 d5 ff 48 89 ef e8 d2 a0 f4 ff e9 6f e7 ff ff e8 d8 d4 d5 ff 4c 89 e7 e8 b9 33 fd ff <0f> 0b e8 c9 d4 d5 ff 4c 8d 4c 24 60 4c 89 cf e8 5c da 0d 00 41 89 [ 54.458116] RSP: 0000:ffff88808a77fce8 EFLAGS: 00010283 [ 54.464256] RAX: 0000000000000137 RBX: 0000000000000008 RCX: 0000000000000000 [ 54.473585] RDX: 0000000000000000 RSI: ffffffff81534081 RDI: ffffed10114eff78 [ 54.481870] RBP: 00000000802000e5 R08: 0000000000000137 R09: ffffed1015ce5081 [ 54.490071] R10: ffffed1015ce5080 R11: ffff8880ae728407 R12: ffff88809adb0568 [ 54.498328] R13: 1ffff110114effa3 R14: 0000000000000001 R15: ffff888089e34a00 [ 54.506030] FS: 00007f12b4789700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 54.515021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.521037] CR2: 00007f2ab3094000 CR3: 000000009de53000 CR4: 00000000001406f0 [ 54.529491] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.539018] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.546663] Call Trace: [ 54.549301] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 54.554439] ? trace_hardirqs_off+0x64/0x200 [ 54.558871] ? check_preemption_disabled+0x41/0x280 [ 54.565077] handle_mm_fault+0x436/0xafd [ 54.569439] __do_page_fault+0x6d5/0xde0 [ 54.573515] ? trace_hardirqs_off_caller+0x69/0x210 [ 54.578525] ? mm_fault_error+0x380/0x380 [ 54.582938] ? page_fault+0x8/0x30 [ 54.586501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.591471] ? page_fault+0x8/0x30 [ 54.595135] page_fault+0x1e/0x30 [ 54.598669] RIP: 0033:0x4014b4 [ 54.601879] Code: 00 0f 1f 44 00 00 f0 83 2d 68 a7 2d 00 01 4c 89 e7 e8 20 fc ff ff eb af 48 b8 63 67 72 6f 75 70 2e 63 b9 72 73 00 00 45 31 c0 <48> 89 04 25 c0 01 00 20 48 b8 6f 6e 74 72 6f 6c 6c 65 66 89 0c 25 [ 54.622156] RSP: 002b:00007f12b4788d20 EFLAGS: 00010246 [ 54.627575] RAX: 632e70756f726763 RBX: 00000000006dbc48 RCX: 0000000000007372 [ 54.635970] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00000000006dbc4c [ 54.644200] RBP: 00000000006dbc40 R08: 0000000000000000 R09: 65732f636f72702f [ 54.652882] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 54.661080] R13: 00007f12b4788d20 R14: 00007f12b4788d20 R15: 00000000006dbc4c [ 54.668659] Modules linked in: [ 54.672897] ---[ end trace 71d9a04397c25329 ]--- [ 54.672931] RIP: 0010:__handle_mm_fault+0x29b0/0x43b0 [ 54.672943] Code: d6 d5 ff 84 db 0f 84 81 e7 ff ff e8 ea d4 d5 ff 48 89 ef e8 d2 a0 f4 ff e9 6f e7 ff ff e8 d8 d4 d5 ff 4c 89 e7 e8 b9 33 fd ff <0f> 0b e8 c9 d4 d5 ff 4c 8d 4c 24 60 4c 89 cf e8 5c da 0d 00 41 89 [ 54.672949] RSP: 0000:ffff88808a77fce8 EFLAGS: 00010283 [ 54.672958] RAX: 0000000000000137 RBX: 0000000000000008 RCX: 0000000000000000 [ 54.672966] RDX: 0000000000000000 RSI: ffffffff81534081 RDI: ffffed10114eff78 [ 54.672973] RBP: 00000000802000e5 R08: 0000000000000137 R09: ffffed1015ce5081 [ 54.672980] R10: ffffed1015ce5080 R11: ffff8880ae728407 R12: ffff88809adb0568 [ 54.672987] R13: 1ffff110114effa3 R14: 0000000000000001 R15: ffff888089e34a00 [ 54.672997] FS: 00007f12b4789700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 54.673004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.673011] CR2: 000000002100003f CR3: 000000009de53000 CR4: 00000000001406e0 [ 54.673022] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.673033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.789570] Kernel panic - not syncing: Fatal exception [ 54.796824] Kernel Offset: disabled [ 54.800456] Rebooting in 86400 seconds..