[info] Using makefile-style concurrent boot in runlevel 2.
[   26.073274] audit: type=1800 audit(1540967373.535:21): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   32.472917] sshd (5666) used greatest stack depth: 15744 bytes left
Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts.
executing program
[   39.002014] kasan: CONFIG_KASAN_INLINE enabled
[   39.006716] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   39.015144] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   39.021395] CPU: 0 PID: 5682 Comm: syz-executor407 Not tainted 4.19.0+ #89
[   39.028393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   39.037746] RIP: 0010:vb2_vmalloc_put_userptr+0x73/0x250
[   39.043182] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5e 08 48 8d 7b 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 72 01 00 00
[   39.062064] RSP: 0018:ffff8801b991f3b8 EFLAGS: 00010202
[   39.067407] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff113e18c
[   39.074666] RDX: 0000000000000001 RSI: ffffffff854c5ac9 RDI: 0000000000000009
[   39.081918] RBP: ffff8801b991f3e8 R08: ffff8801d3696700 R09: ffffed0039652b8b
[   39.089168] R10: ffff8801b991f4e0 R11: ffff8801cb295c5f R12: ffffc90002559000
[   39.096456] R13: 0000000000000000 R14: ffff8801d772b580 R15: ffff8801d772b580
[   39.103724] FS:  0000000000c00880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[   39.111932] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   39.117793] CR2: 000000000043e920 CR3: 000000000946a000 CR4: 00000000001406f0
[   39.125047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   39.132297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   39.139549] Call Trace:
[   39.142128]  __vb2_queue_free+0x4b1/0xa30
[   39.146260]  ? vb2_vmalloc_detach_dmabuf+0x80/0x80
[   39.151177]  ? __vb2_plane_dmabuf_put.isra.6+0x310/0x310
[   39.156615]  vb2_core_queue_release+0x62/0x80
[   39.161095]  _vb2_fop_release+0x1d2/0x2b0
[   39.165223]  vb2_fop_release+0x77/0xc0
[   39.169094]  vivid_fop_release+0x18e/0x440
[   39.173327]  ? vivid_remove+0x460/0x460
[   39.177288]  ? dev_debug_store+0x140/0x140
[   39.181506]  v4l2_release+0xfb/0x1a0
[   39.185209]  __fput+0x385/0xa30
[   39.188476]  ? get_max_files+0x20/0x20
[   39.192350]  ? trace_hardirqs_on+0xbd/0x310
[   39.196653]  ? kasan_check_read+0x11/0x20
[   39.200784]  ? task_work_run+0x1af/0x2a0
[   39.204831]  ? trace_hardirqs_off_caller+0x310/0x310
[   39.209918]  ____fput+0x15/0x20
[   39.213183]  task_work_run+0x1e8/0x2a0
[   39.217053]  ? task_work_cancel+0x240/0x240
[   39.221362]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[   39.226882]  ? switch_task_namespaces+0x9d/0xd0
[   39.231535]  do_exit+0x1ad6/0x26d0
[   39.235057]  ? mm_update_next_owner+0x990/0x990
[   39.239712]  ? kvfree+0x66/0x70
[   39.242989]  ? video_usercopy+0x79b/0x1760
[   39.247202]  ? v4l_s_fmt+0x990/0x990
[   39.250901]  ? v4l_enumstd+0x70/0x70
[   39.254596]  ? rcu_softirq_qs+0x20/0x20
[   39.258552]  ? is_bpf_text_address+0xd3/0x170
[   39.263033]  ? __kernel_text_address+0xd/0x40
[   39.267509]  ? unwind_get_return_address+0x61/0xa0
[   39.272429]  ? __save_stack_trace+0x8d/0xf0
[   39.276991]  ? smk_access+0x53b/0x700
[   39.280781]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   39.286299]  ? smack_log+0x423/0x590
[   39.289996]  ? smk_access_entry+0x310/0x310
[   39.294301]  ? trace_hardirqs_off+0xb8/0x310
[   39.298705]  ? smk_tskacc+0x3dd/0x520
[   39.302489]  ? video_usercopy+0x1760/0x1760
[   39.306788]  ? video_ioctl2+0x2c/0x33
[   39.310571]  ? v4l2_ioctl+0x15c/0x1b0
[   39.314353]  ? video_devdata+0xa0/0xa0
[   39.318222]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   39.323741]  ? do_vfs_ioctl+0x201/0x1720
[   39.327786]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[   39.333307]  ? ioctl_preallocate+0x300/0x300
[   39.337698]  ? smk_curacc+0x7f/0xa0
[   39.341309]  ? smack_file_ioctl+0x210/0x3c0
[   39.345646]  ? fget_raw+0x20/0x20
[   39.349079]  ? smack_file_lock+0x2e0/0x2e0
[   39.353295]  ? rcu_read_lock_sched_held+0x14f/0x180
[   39.358300]  do_group_exit+0x177/0x440
[   39.362172]  ? trace_hardirqs_on+0xbd/0x310
[   39.366473]  ? __ia32_sys_exit+0x50/0x50
[   39.370519]  ? trace_hardirqs_off_caller+0x310/0x310
[   39.375606]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   39.381123]  ? ksys_ioctl+0x81/0xd0
[   39.384734]  __x64_sys_exit_group+0x3e/0x50
[   39.389038]  do_syscall_64+0x1b9/0x820
[   39.392909]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[   39.398253]  ? syscall_return_slowpath+0x5e0/0x5e0
[   39.403161]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   39.408224]  ? trace_hardirqs_on_caller+0x310/0x310
[   39.413223]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[   39.418234]  ? prepare_exit_to_usermode+0x291/0x3b0
[   39.423233]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   39.428061]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   39.433230] RIP: 0033:0x442da8
[   39.436418] Code: Bad RIP value.
[   39.439767] RSP: 002b:00007ffd5b37d468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   39.447458] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000442da8
[   39.454711] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
[   39.461963] RBP: 00000000004c2968 R08: 00000000000000e7 R09: ffffffffffffffd0
[   39.469214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.476463] R13: 00000000006d4180 R14: 0000000000000000 R15: 0000000000000000
[   39.483717] Modules linked in:
[   39.487456] ---[ end trace 1d6ba73991ba2460 ]---
[   39.492266] RIP: 0010:vb2_vmalloc_put_userptr+0x73/0x250
[   39.497710] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5e 08 48 8d 7b 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 72 01 00 00
[   39.516666] RSP: 0018:ffff8801b991f3b8 EFLAGS: 00010202
[   39.522067] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff113e18c
[   39.529319] RDX: 0000000000000001 RSI: ffffffff854c5ac9 RDI: 0000000000000009
[   39.536605] RBP: ffff8801b991f3e8 R08: ffff8801d3696700 R09: ffffed0039652b8b
[   39.543895] R10: ffff8801b991f4e0 R11: ffff8801cb295c5f R12: ffffc90002559000
[   39.551184] R13: 0000000000000000 R14: ffff8801d772b580 R15: ffff8801d772b580
[   39.558458] FS:  0000000000c00880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[   39.566704] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   39.572601] CR2: 0000000000442d7e CR3: 000000000946a000 CR4: 00000000001406f0
[   39.579896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   39.587181] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   39.594472] Kernel panic - not syncing: Fatal exception
[   39.600833] Kernel Offset: disabled
[   39.604455] Rebooting in 86400 seconds..