Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 41.241687] audit: type=1400 audit(1588920613.864:8): avc: denied { execmem } for pid=6458 comm="syz-executor473" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.264833] ------------[ cut here ]------------ [ 41.264841] kernel BUG at arch/x86/mm/physaddr.c:27! [ 41.264855] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.264868] CPU: 0 PID: 6458 Comm: syz-executor473 Not tainted 4.19.121-syzkaller #0 [ 41.264873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.264884] RIP: 0010:__phys_addr+0xa7/0x110 [ 41.264891] Code: 0d 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 60 a9 37 00 48 85 db 75 0d e8 c6 a7 37 00 4c 89 e0 5b 5d 41 5c c3 e8 b9 a7 37 00 <0f> 0b e8 b2 a7 37 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc [ 41.264895] RSP: 0018:ffff88808923f8f0 EFLAGS: 00010093 [ 41.264901] RAX: ffff8880a5c54180 RBX: 0000000000000001 RCX: ffffffff813021d0 [ 41.264905] RDX: 0000000000000000 RSI: ffffffff813021e7 RDI: 0000000000000007 [ 41.264909] RBP: ffffc90085ae0000 R08: ffff8880a5c54180 R09: ffffed1015cc4733 [ 41.264913] R10: ffffed1015cc4732 R11: ffff8880ae623993 R12: 0000408005ae0000 [ 41.264917] R13: ffffffff83750f40 R14: 1ffff11011247f59 R15: ffff88812c27f200 [ 41.264923] FS: 00000000009fc880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 41.264927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.264931] CR2: 00000000004551c0 CR3: 00000000a0115000 CR4: 00000000001406f0 [ 41.264937] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.264941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.264943] Call Trace: [ 41.264954] ? vc_do_resize+0x10ac/0x1380 [ 41.264961] kfree+0x77/0x220 [ 41.264970] ? updatescrollmode.isra.0+0x850/0x850 [ 41.264977] vc_do_resize+0x10ac/0x1380 [ 41.264986] ? cred_has_capability+0x162/0x2e0 [ 41.264997] ? vt_console_print+0xf30/0xf30 [ 41.265005] ? lock_acquire+0x170/0x400 [ 41.265018] ? vt_ioctl+0x105c/0x2500 [ 41.265028] vt_ioctl+0x10c1/0x2500 [ 41.265036] ? complete_change_console+0x390/0x390 [ 41.265043] ? avc_has_extended_perms+0x9c6/0x1030 [ 41.265051] ? avc_ss_reset+0x180/0x180 [ 41.265062] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 41.265070] ? complete_change_console+0x390/0x390 [ 41.265080] tty_ioctl+0x7a1/0x1420 [ 41.265089] ? do_syscall_64+0xf9/0x620 [ 41.265096] ? tty_vhangup+0x30/0x30 [ 41.265104] ? find_held_lock+0x2d/0x110 [ 41.265112] ? debug_check_no_obj_freed+0x20a/0x42e [ 41.265120] ? lock_downgrade+0x740/0x740 [ 41.265127] ? tty_vhangup+0x30/0x30 [ 41.265135] do_vfs_ioctl+0xcda/0x12e0 [ 41.265141] ? selinux_file_ioctl+0x46c/0x5d0 [ 41.265147] ? selinux_file_ioctl+0x125/0x5d0 [ 41.265153] ? ioctl_preallocate+0x200/0x200 [ 41.265160] ? selinux_file_mprotect+0x600/0x600 [ 41.265168] ? putname+0xe1/0x120 [ 41.265177] ? rcu_read_lock_sched_held+0x5b/0x130 [ 41.265183] ? kmem_cache_free+0x218/0x260 [ 41.265190] ? putname+0xe1/0x120 [ 41.265200] ? security_file_ioctl+0x6c/0xb0 [ 41.265207] ksys_ioctl+0x9b/0xc0 [ 41.265214] __x64_sys_ioctl+0x6f/0xb0 [ 41.265221] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 41.265228] do_syscall_64+0xf9/0x620 [ 41.265237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.265243] RIP: 0033:0x440279 [ 41.265249] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 41.265252] RSP: 002b:00007ffe2244b278 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.265259] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440279 [ 41.265262] RDX: 0000000020000040 RSI: 0000000000005609 RDI: 0000000000000004 [ 41.265266] RBP: 00000000006ca018 R08: 000000000000000d R09: 00000000004002c8 [ 41.265270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401b60 [ 41.265274] R13: 0000000000401bf0 R14: 0000000000000000 R15: 0000000000000000 [ 41.265280] Modules linked in: [ 41.265289] ---[ end trace c2ffec05c440bed9 ]--- [ 41.265295] RIP: 0010:__phys_addr+0xa7/0x110 [ 41.265301] Code: 0d 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 60 a9 37 00 48 85 db 75 0d e8 c6 a7 37 00 4c 89 e0 5b 5d 41 5c c3 e8 b9 a7 37 00 <0f> 0b e8 b2 a7 37 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc [ 41.265305] RSP: 0018:ffff88808923f8f0 EFLAGS: 00010093 [ 41.265310] RAX: ffff8880a5c54180 RBX: 0000000000000001 RCX: ffffffff813021d0 [ 41.265313] RDX: 0000000000000000 RSI: ffffffff813021e7 RDI: 0000000000000007 [ 41.265317] RBP: ffffc90085ae0000 R08: ffff8880a5c54180 R09: ffffed1015cc4733 [ 41.265322] R10: ffffed1015cc4732 R11: ffff8880ae623993 R12: 0000408005ae0000 [ 41.265326] R13: ffffffff83750f40 R14: 1ffff11011247f59 R15: ffff88812c27f200 [ 41.265331] FS: 00000000009fc880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 41.265335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.265339] CR2: 00000000004551c0 CR3: 00000000a0115000 CR4: 00000000001406f0 [ 41.265345] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.265348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.265352] Kernel panic - not syncing: Fatal exception [ 41.266785] Kernel Offset: disabled [ 41.740733] Rebooting in 86400 seconds..