[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 44.314641] audit: type=1400 audit(1588430297.184:8): avc: denied { execmem } for pid=6454 comm="syz-executor174" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 44.337867] ------------[ cut here ]------------ [ 44.337873] kernel BUG at arch/x86/mm/physaddr.c:27! [ 44.337888] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 44.337896] CPU: 0 PID: 6454 Comm: syz-executor174 Not tainted 4.19.119-syzkaller #0 [ 44.337900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.337912] RIP: 0010:__phys_addr+0xa7/0x110 [ 44.337919] Code: 09 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 40 a9 37 00 48 85 db 75 0d e8 a6 a7 37 00 4c 89 e0 5b 5d 41 5c c3 e8 99 a7 37 00 <0f> 0b e8 92 a7 37 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc [ 44.337923] RSP: 0018:ffff8880a6af79f8 EFLAGS: 00010093 [ 44.337929] RAX: ffff8880a5646700 RBX: 0000000000000001 RCX: ffffffff813021d0 [ 44.337933] RDX: 0000000000000000 RSI: ffffffff813021e7 RDI: 0000000000000007 [ 44.337937] RBP: ffffc900819d4000 R08: ffff8880a5646700 R09: ffffed1015cc4733 [ 44.337941] R10: ffffed1015cc4732 R11: ffff8880ae623993 R12: 00004080019d4000 [ 44.337945] R13: ffffffff837504e0 R14: 00000000000000b1 R15: ffff88812c27f200 [ 44.337951] FS: 0000000001a3e880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 44.337955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.337959] CR2: 00007ff3cf20f6c0 CR3: 000000009f829000 CR4: 00000000001406f0 [ 44.337965] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.337968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.337970] Call Trace: [ 44.337981] ? vc_do_resize+0x10ac/0x1380 [ 44.337988] kfree+0x77/0x220 [ 44.337997] ? updatescrollmode.isra.0+0x850/0x850 [ 44.338003] vc_do_resize+0x10ac/0x1380 [ 44.338015] ? vt_console_print+0xf30/0xf30 [ 44.338022] ? lock_acquire+0x170/0x400 [ 44.338028] ? vt_resize+0x41/0xe0 [ 44.338036] ? vc_resize+0x60/0x60 [ 44.338043] vt_resize+0xa3/0xe0 [ 44.338050] tty_ioctl+0xbdf/0x1420 [ 44.338059] ? do_syscall_64+0xf9/0x620 [ 44.338065] ? tty_vhangup+0x30/0x30 [ 44.338074] ? find_held_lock+0x2d/0x110 [ 44.338081] ? debug_check_no_obj_freed+0x20a/0x42e [ 44.338089] ? lock_downgrade+0x740/0x740 [ 44.338096] ? tty_vhangup+0x30/0x30 [ 44.338104] do_vfs_ioctl+0xcda/0x12e0 [ 44.338110] ? selinux_file_ioctl+0x46c/0x5d0 [ 44.338116] ? selinux_file_ioctl+0x125/0x5d0 [ 44.338122] ? ioctl_preallocate+0x200/0x200 [ 44.338128] ? selinux_file_mprotect+0x600/0x600 [ 44.338137] ? putname+0xe1/0x120 [ 44.338145] ? rcu_read_lock_sched_held+0x7b/0x130 [ 44.338151] ? kmem_cache_free+0x218/0x260 [ 44.338158] ? putname+0xe1/0x120 [ 44.338168] ? security_file_ioctl+0x6c/0xb0 [ 44.338175] ksys_ioctl+0x9b/0xc0 [ 44.338182] __x64_sys_ioctl+0x6f/0xb0 [ 44.338189] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 44.338195] do_syscall_64+0xf9/0x620 [ 44.338205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.338210] RIP: 0033:0x4403a9 [ 44.338216] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 44.338219] RSP: 002b:00007ffe119e8f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.338225] RAX: ffffffffffffffda RBX: 00007ffe119e8f40 RCX: 00000000004403a9 [ 44.338229] RDX: 0000000020000000 RSI: 0000000000005414 RDI: 0000000000000005 [ 44.338233] RBP: 00000000006cb018 R08: 000000000000000d R09: 65732f636f72702f [ 44.338236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401c90 [ 44.338240] R13: 0000000000401d20 R14: 0000000000000000 R15: 0000000000000000 [ 44.338246] Modules linked in: [ 44.338255] ---[ end trace 87933b8c091ac456 ]--- [ 44.338262] RIP: 0010:__phys_addr+0xa7/0x110 [ 44.338268] Code: 09 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 40 a9 37 00 48 85 db 75 0d e8 a6 a7 37 00 4c 89 e0 5b 5d 41 5c c3 e8 99 a7 37 00 <0f> 0b e8 92 a7 37 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc [ 44.338271] RSP: 0018:ffff8880a6af79f8 EFLAGS: 00010093 [ 44.338276] RAX: ffff8880a5646700 RBX: 0000000000000001 RCX: ffffffff813021d0 [ 44.338279] RDX: 0000000000000000 RSI: ffffffff813021e7 RDI: 0000000000000007 [ 44.338283] RBP: ffffc900819d4000 R08: ffff8880a5646700 R09: ffffed1015cc4733 [ 44.338287] R10: ffffed1015cc4732 R11: ffff8880ae623993 R12: 00004080019d4000 [ 44.338291] R13: ffffffff837504e0 R14: 00000000000000b1 R15: ffff88812c27f200 [ 44.338296] FS: 0000000001a3e880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 44.338301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.338304] CR2: 00007ff3cf20f6c0 CR3: 000000009f829000 CR4: 00000000001406f0 [ 44.338308] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.338312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.338315] Kernel panic - not syncing: Fatal exception [ 44.339735] Kernel Offset: disabled [ 44.785018] Rebooting in 86400 seconds..