Warning: Permanently added '[localhost]:24950' (ECDSA) to the list of known hosts. executing program [ 112.478056][ T39] audit: type=1400 audit(1576456903.850:42): avc: denied { map } for pid=9005 comm="syz-executor309" path="/syz-executor309685826" dev="sda1" ino=16527 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 112.522510][ T3857] BUG: unable to handle page fault for address: fffff52001c00000 [ 112.566633][ T3857] #PF: supervisor read access in kernel mode [ 112.573788][ T3857] #PF: error_code(0x0000) - not-present page [ 112.573788][ T3857] PGD 7ffcd067 P4D 7ffcd067 PUD 2cd1c067 PMD 0 [ 112.573788][ T3857] Oops: 0000 [#1] PREEMPT SMP KASAN [ 112.573788][ T3857] CPU: 3 PID: 3857 Comm: ion_system_heap Not tainted 5.5.0-rc1-syzkaller #0 [ 112.573788][ T3857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 112.573788][ T3857] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 112.573788][ T3857] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 112.573788][ T3857] RSP: 0018:ffffc9000698fab8 EFLAGS: 00010212 [ 112.573788][ T3857] RAX: fffff52001c00000 RBX: fffff52001c01600 RCX: ffffffff85decb29 [ 112.573788][ T3857] RDX: 0000000000000001 RSI: 000000000000b000 RDI: ffffc9000e000000 [ 112.573788][ T3857] RBP: ffffc9000698fad0 R08: fffff52001c01600 R09: 0000000000001600 [ 112.573788][ T3857] R10: fffff52001c015ff R11: ffffc9000e00afff R12: fffff52001c00000 [ 112.573788][ T3857] R13: 000000000000b000 R14: 0000000000000000 R15: ffffc9000698fd08 [ 112.573788][ T3857] FS: 0000000000000000(0000) GS:ffff88802d300000(0000) knlGS:0000000000000000 [ 112.573788][ T3857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.573788][ T3857] CR2: fffff52001c00000 CR3: 0000000020c01000 CR4: 0000000000340ee0 [ 112.573788][ T3857] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.573788][ T3857] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.573788][ T3857] Call Trace: [ 112.573788][ T3857] memset+0x24/0x40 [ 112.573788][ T3857] ion_heap_clear_pages+0x49/0x70 [ 112.573788][ T3857] ion_heap_sglist_zero+0x245/0x270 [ 112.813976][ T3857] ? ion_heap_deferred_free+0x630/0x630 [ 112.823772][ T3857] ? mark_lock+0xc2/0x1220 [ 112.823772][ T3857] ? __kasan_check_read+0x11/0x20 [ 112.833781][ T3857] ? __lock_acquire+0x16f2/0x4a00 [ 112.843874][ T3857] ? finish_wait+0x18c/0x260 [ 112.843874][ T3857] ? find_held_lock+0x35/0x130 [ 112.853889][ T3857] ? ion_heap_deferred_free+0x295/0x630 [ 112.853889][ T3857] ? pgprot_writecombine+0x5e/0xf0 [ 112.853889][ T3857] ? pagerange_is_ram_callback+0x130/0x130 [ 112.853889][ T3857] ? ion_heap_deferred_free+0x295/0x630 [ 112.853889][ T3857] ion_heap_buffer_zero+0xf5/0x150 [ 112.853889][ T3857] ion_system_heap_free+0x1eb/0x250 [ 112.853889][ T3857] ion_buffer_destroy+0x159/0x2d0 [ 112.853889][ T3857] ion_heap_deferred_free+0x29d/0x630 [ 112.853889][ T3857] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 112.853889][ T3857] ? trace_hardirqs_on+0x67/0x240 [ 112.853889][ T3857] ? finish_wait+0x260/0x260 [ 112.853889][ T3857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 112.853889][ T3857] ? __kthread_parkme+0x108/0x1c0 [ 112.853889][ T3857] ? __kasan_check_read+0x11/0x20 [ 112.853889][ T3857] kthread+0x361/0x430 [ 112.853889][ T3857] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 112.853889][ T3857] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 112.853889][ T3857] ret_from_fork+0x24/0x30 [ 112.853889][ T3857] Modules linked in: [ 112.853889][ T3857] CR2: fffff52001c00000 [ 112.853889][ T3857] ---[ end trace 4f12909ca40de3f5 ]--- [ 112.853889][ T3857] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 112.853889][ T3857] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 112.853889][ T3857] RSP: 0018:ffffc9000698fab8 EFLAGS: 00010212 [ 112.853889][ T3857] RAX: fffff52001c00000 RBX: fffff52001c01600 RCX: ffffffff85decb29 [ 112.853889][ T3857] RDX: 0000000000000001 RSI: 000000000000b000 RDI: ffffc9000e000000 [ 112.853889][ T3857] RBP: ffffc9000698fad0 R08: fffff52001c01600 R09: 0000000000001600 [ 112.853889][ T3857] R10: fffff52001c015ff R11: ffffc9000e00afff R12: fffff52001c00000 [ 112.853889][ T3857] R13: 000000000000b000 R14: 0000000000000000 R15: ffffc9000698fd08 [ 112.853889][ T3857] FS: 0000000000000000(0000) GS:ffff88802d300000(0000) knlGS:0000000000000000 [ 112.853889][ T3857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.853889][ T3857] CR2: fffff52001c00000 CR3: 0000000020c01000 CR4: 0000000000340ee0 [ 112.853889][ T3857] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.853889][ T3857] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.853889][ T3857] Kernel panic - not syncing: Fatal exception [ 112.853889][ T3857] Kernel Offset: disabled [ 112.853889][ T3857] Rebooting in 86400 seconds..