[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.198' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 41.657540] audit: type=1400 audit(1602708268.599:8): avc: denied { execmem } for pid=6482 comm="syz-executor237" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.660153] kasan: CONFIG_KASAN_INLINE enabled [ 41.682378] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 41.689739] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 41.695956] CPU: 1 PID: 6482 Comm: syz-executor237 Not tainted 4.19.150-syzkaller #0 [ 41.703856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.713247] RIP: 0010:qp_release_pages+0x5a/0x310 [ 41.718089] Code: 04 fd 31 ff 48 89 ee e8 94 5f 04 fd 48 85 ed 0f 85 09 01 00 00 e9 4e 02 00 00 e8 f1 5d 04 fd 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 46 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 41.737090] RSP: 0018:ffff88808a167788 EFLAGS: 00010202 [ 41.742430] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff846d759c [ 41.749676] RDX: 0000000000000000 RSI: ffffffff846d746f RDI: 0000000000000008 [ 41.756926] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 41.764177] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88809e5a27c0 [ 41.771446] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.778694] FS: 0000000000ad2880(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000 [ 41.786894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.792772] CR2: 0000000020000000 CR3: 000000008d480000 CR4: 00000000001406e0 [ 41.800039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.807286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.814529] Call Trace: [ 41.817102] qp_host_get_user_memory+0x249/0x3e0 [ 41.821865] qp_broker_alloc+0x10fa/0x1bd0 [ 41.826080] ? qp_get_queue_headers+0x400/0x400 [ 41.830730] ? lock_downgrade+0x750/0x750 [ 41.834862] ? lock_acquire+0x170/0x3f0 [ 41.838846] ? __might_fault+0xef/0x1d0 [ 41.842811] vmci_qp_broker_alloc+0x48/0x60 [ 41.847218] vmci_host_do_alloc_queuepair.constprop.0+0x1b4/0x400 [ 41.853435] ? drv_cp_harray_to_user+0x190/0x190 [ 41.858176] ? lock_downgrade+0x750/0x750 [ 41.862302] ? lock_acquire+0x170/0x3f0 [ 41.866256] ? avc_has_extended_perms+0xe4/0x1020 [ 41.871080] ? check_preemption_disabled+0x41/0x2b0 [ 41.876078] vmci_host_unlocked_ioctl+0x1459/0x1e40 [ 41.881163] ? vmci_host_do_alloc_queuepair.constprop.0+0x400/0x400 [ 41.887548] ? check_preemption_disabled+0x41/0x2b0 [ 41.892543] ? avc_ss_reset+0x170/0x170 [ 41.896497] ? __kasan_slab_free+0x186/0x1f0 [ 41.900927] ? kmem_cache_free+0x7f/0x2b0 [ 41.905062] ? putname+0xe1/0x130 [ 41.908507] ? do_sys_open+0x2ba/0x520 [ 41.912391] ? do_syscall_64+0xf9/0x670 [ 41.916345] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.921703] ? mark_held_locks+0xf0/0xf0 [ 41.925762] ? find_held_lock+0x2d/0x110 [ 41.929809] ? debug_check_no_obj_freed+0x201/0x482 [ 41.934810] ? lock_downgrade+0x750/0x750 [ 41.938937] ? vmci_host_do_alloc_queuepair.constprop.0+0x400/0x400 [ 41.945322] do_vfs_ioctl+0xcdb/0x12e0 [ 41.949189] ? selinux_file_ioctl+0x44f/0x5e0 [ 41.953685] ? ioctl_preallocate+0x200/0x200 [ 41.958087] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 41.963519] ? lookup_open+0x17d8/0x19c0 [ 41.967560] ? putname+0xe1/0x130 [ 41.971010] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 41.976003] ? putname+0xe1/0x130 [ 41.979454] ksys_ioctl+0x9b/0xc0 [ 41.982888] __x64_sys_ioctl+0x6f/0xb0 [ 41.986786] do_syscall_64+0xf9/0x670 [ 41.990577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.995748] RIP: 0033:0x4402f9 [ 41.998922] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 42.017854] RSP: 002b:00007fff59b50978 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.025576] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402f9 [ 42.032835] RDX: 0000000020000080 RSI: 00000000000007a8 RDI: 0000000000000003 [ 42.040090] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 42.047339] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401b00 [ 42.054589] R13: 0000000000401b90 R14: 0000000000000000 R15: 0000000000000000 [ 42.061842] Modules linked in: [ 42.065992] ---[ end trace ef612ce3a4ae7dc1 ]--- [ 42.070876] RIP: 0010:qp_release_pages+0x5a/0x310 [ 42.075718] Code: 04 fd 31 ff 48 89 ee e8 94 5f 04 fd 48 85 ed 0f 85 09 01 00 00 e9 4e 02 00 00 e8 f1 5d 04 fd 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 46 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 42.094684] RSP: 0018:ffff88808a167788 EFLAGS: 00010202 [ 42.100088] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff846d759c [ 42.107350] RDX: 0000000000000000 RSI: ffffffff846d746f RDI: 0000000000000008 [ 42.114664] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 42.122055] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88809e5a27c0 [ 42.129308] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.136637] FS: 0000000000ad2880(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000 [ 42.144894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.150819] CR2: 0000000020000000 CR3: 000000008d480000 CR4: 00000000001406e0 [ 42.158093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.165385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.172702] Kernel panic - not syncing: Fatal exception [ 42.179453] Kernel Offset: disabled [ 42.183071] Rebooting in 86400 seconds..