[info] Using makefile-style concurrent boot in runlevel 2.
[   25.606846] audit: type=1800 audit(1541205648.917:21): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   39.149482] sshd (5680) used greatest stack depth: 15744 bytes left
Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts.
executing program
[   45.852653] kasan: CONFIG_KASAN_INLINE enabled
[   45.857352] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   45.864850] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   45.871087] CPU: 0 PID: 5695 Comm: syz-executor789 Not tainted 4.19.0+ #316
[   45.878167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   45.887518] RIP: 0010:vb2_vmalloc_put_userptr+0x73/0x250
[   45.892964] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5e 08 48 8d 7b 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 72 01 00 00
[   45.911855] RSP: 0018:ffff8801bd9873a0 EFLAGS: 00010202
[   45.917201] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff113e4b8
[   45.924477] RDX: 0000000000000001 RSI: ffffffff854de1a9 RDI: 0000000000000009
[   45.931733] RBP: ffff8801bd9873d0 R08: ffff8801d705a4c0 R09: ffffed00396aacba
[   45.938992] R10: ffff8801bd9874c8 R11: ffff8801cb5565d7 R12: ffffc90002561000
[   45.946250] R13: 0000000000000000 R14: ffff8801bbdc2600 R15: ffff8801bbdc2600
[   45.953518] FS:  0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[   45.961733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   45.967606] CR2: 000000000043e920 CR3: 000000000946a000 CR4: 00000000001406f0
[   45.974959] Call Trace:
[   45.977545]  __vb2_queue_free+0x4b1/0xa30
[   45.981690]  ? vb2_vmalloc_detach_dmabuf+0x80/0x80
[   45.986607]  ? __vb2_plane_dmabuf_put.isra.5+0x310/0x310
[   45.992171]  vb2_core_queue_release+0x62/0x80
[   45.996664]  _vb2_fop_release+0x1d2/0x2b0
[   46.000807]  vb2_fop_release+0x77/0xc0
[   46.004689]  vivid_fop_release+0x18e/0x440
[   46.008922]  ? vivid_remove+0x460/0x460
[   46.012886]  v4l2_release+0x224/0x3a0
[   46.016689]  ? dev_debug_store+0x140/0x140
[   46.020917]  __fput+0x385/0xa30
[   46.024185]  ? get_max_files+0x20/0x20
[   46.028054]  ? trace_hardirqs_on+0xbd/0x310
[   46.032362]  ? kasan_check_read+0x11/0x20
[   46.036501]  ? task_work_run+0x1af/0x2a0
[   46.040549]  ? trace_hardirqs_off_caller+0x310/0x310
[   46.045643]  ____fput+0x15/0x20
[   46.048923]  task_work_run+0x1e8/0x2a0
[   46.052799]  ? task_work_cancel+0x240/0x240
[   46.057112]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[   46.062691]  ? switch_task_namespaces+0x9d/0xd0
[   46.067356]  do_exit+0x1ad6/0x26d0
[   46.070894]  ? mm_update_next_owner+0x990/0x990
[   46.075560]  ? kvfree+0x66/0x70
[   46.078825]  ? video_usercopy+0x79b/0x1760
[   46.083048]  ? v4l_s_fmt+0x990/0x990
[   46.086749]  ? v4l_enumstd+0x70/0x70
[   46.090444]  ? rcu_softirq_qs+0x20/0x20
[   46.094410]  ? is_bpf_text_address+0xd3/0x170
[   46.099043]  ? __kernel_text_address+0xd/0x40
[   46.103531]  ? unwind_get_return_address+0x61/0xa0
[   46.108447]  ? __save_stack_trace+0x8d/0xf0
[   46.112763]  ? save_stack+0x43/0xd0
[   46.116393]  ? __kasan_slab_free+0x102/0x150
[   46.120789]  ? kasan_slab_free+0xe/0x10
[   46.124746]  ? kmem_cache_free+0x83/0x290
[   46.128878]  ? do_sys_open+0x54d/0x700
[   46.132749]  ? __x64_sys_open+0x7e/0xc0
[   46.136714]  ? do_syscall_64+0x1b9/0x820
[   46.140763]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   46.146284]  ? trace_hardirqs_off+0xb8/0x310
[   46.150690]  ? kasan_check_read+0x11/0x20
[   46.154839]  ? do_raw_spin_unlock+0xa7/0x330
[   46.159278]  ? trace_hardirqs_on+0x310/0x310
[   46.163691]  ? video_usercopy+0x1760/0x1760
[   46.168001]  ? video_ioctl2+0x2c/0x33
[   46.171791]  ? v4l2_ioctl+0x15c/0x1b0
[   46.175652]  ? video_devdata+0xa0/0xa0
[   46.179576]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   46.185104]  ? do_vfs_ioctl+0x201/0x1790
[   46.189155]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[   46.194751]  ? ioctl_preallocate+0x300/0x300
[   46.199219]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   46.204747]  ? __fget_light+0x2e9/0x430
[   46.208703]  ? fget_raw+0x20/0x20
[   46.212283]  ? rcu_read_lock_sched_held+0x14f/0x180
[   46.217289]  ? kmem_cache_free+0x24f/0x290
[   46.221518]  ? putname+0xf7/0x130
[   46.224961]  do_group_exit+0x177/0x440
[   46.228840]  ? trace_hardirqs_on+0xbd/0x310
[   46.233152]  ? __ia32_sys_exit+0x50/0x50
[   46.237204]  ? trace_hardirqs_off_caller+0x310/0x310
[   46.242365]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   46.247897]  ? ksys_ioctl+0x81/0xd0
[   46.251523]  __x64_sys_exit_group+0x3e/0x50
[   46.255829]  do_syscall_64+0x1b9/0x820
[   46.259772]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[   46.265133]  ? syscall_return_slowpath+0x5e0/0x5e0
[   46.270065]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   46.274949]  ? trace_hardirqs_on_caller+0x310/0x310
[   46.279976]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[   46.284979]  ? prepare_exit_to_usermode+0x291/0x3b0
[   46.289981]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   46.294839]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   46.300017] RIP: 0033:0x442da8
[   46.303205] Code: Bad RIP value.
[   46.306552] RSP: 002b:00007ffe9c333698 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   46.314243] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000442da8
[   46.321500] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
[   46.328760] RBP: 00000000004c2968 R08: 00000000000000e7 R09: ffffffffffffffd0
[   46.336014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.343313] R13: 00000000006d4180 R14: 0000000000000000 R15: 0000000000000000
[   46.350659] Modules linked in:
[   46.354219] ---[ end trace b3487f4773da6249 ]---
[   46.359323] RIP: 0010:vb2_vmalloc_put_userptr+0x73/0x250
[   46.365086] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5e 08 48 8d 7b 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 72 01 00 00
[   46.384101] RSP: 0018:ffff8801bd9873a0 EFLAGS: 00010202
[   46.389489] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff113e4b8
[   46.396854] RDX: 0000000000000001 RSI: ffffffff854de1a9 RDI: 0000000000000009
[   46.404166] RBP: ffff8801bd9873d0 R08: ffff8801d705a4c0 R09: ffffed00396aacba
[   46.411493] R10: ffff8801bd9874c8 R11: ffff8801cb5565d7 R12: ffffc90002561000
[   46.418863] R13: 0000000000000000 R14: ffff8801bbdc2600 R15: ffff8801bbdc2600
[   46.426223] FS:  0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[   46.434577] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   46.440444] CR2: 0000000000442d7e CR3: 000000000946a000 CR4: 00000000001406f0
[   46.447760] Kernel panic - not syncing: Fatal exception
[   46.454051] Kernel Offset: disabled
[   46.457674] Rebooting in 86400 seconds..