[info] Using makefile-style concurrent boot in runlevel 2. [ 25.232626] audit: type=1800 audit(1540964012.483:21): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.16' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 39.872976] kasan: CONFIG_KASAN_INLINE enabled [ 39.877681] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 39.885104] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 39.891381] CPU: 1 PID: 5666 Comm: syz-executor795 Not tainted 4.19.0+ #215 [ 39.898459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.907806] RIP: 0010:vb2_vmalloc_put_userptr+0x73/0x250 [ 39.913238] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5e 08 48 8d 7b 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 72 01 00 00 [ 39.932137] RSP: 0018:ffff8801bca2f3b8 EFLAGS: 00010202 [ 39.937483] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff113e18c [ 39.944748] RDX: 0000000000000001 RSI: ffffffff854c5ac9 RDI: 0000000000000009 [ 39.951999] RBP: ffff8801bca2f3e8 R08: ffff8801d8f66480 R09: ffffed003739109e [ 39.959253] R10: ffff8801bca2f4e0 R11: ffff8801b9c884f7 R12: ffffc90002559000 [ 39.966503] R13: 0000000000000000 R14: ffff8801d8d17000 R15: ffff8801d8d17000 [ 39.973781] FS: 0000000000000000(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 39.981988] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 39.987886] CR2: 00000000080a2aa0 CR3: 000000000946a000 CR4: 00000000001406e0 [ 39.995141] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.002394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.009645] Call Trace: [ 40.012228] __vb2_queue_free+0x4b1/0xa30 [ 40.016371] ? vb2_vmalloc_detach_dmabuf+0x80/0x80 [ 40.021295] ? __vb2_plane_dmabuf_put.isra.6+0x310/0x310 [ 40.026992] ? vidioc_querycap+0x110/0x110 [ 40.031214] ? dev_debug_store+0x140/0x140 [ 40.035432] vb2_core_queue_release+0x62/0x80 [ 40.039919] vb2_queue_release+0x15/0x20 [ 40.043969] v4l2_m2m_ctx_release+0x1e/0x35 [ 40.048273] vicodec_release+0xbd/0x120 [ 40.052233] v4l2_release+0xfb/0x1a0 [ 40.055932] __fput+0x385/0xa30 [ 40.059207] ? get_max_files+0x20/0x20 [ 40.063080] ? trace_hardirqs_on+0xbd/0x310 [ 40.067382] ? kasan_check_read+0x11/0x20 [ 40.071528] ? task_work_run+0x1af/0x2a0 [ 40.075571] ? trace_hardirqs_off_caller+0x310/0x310 [ 40.080657] ____fput+0x15/0x20 [ 40.083917] task_work_run+0x1e8/0x2a0 [ 40.087800] ? task_work_cancel+0x240/0x240 [ 40.092136] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 40.097652] ? switch_task_namespaces+0x9d/0xd0 [ 40.102310] do_exit+0x1ad6/0x26d0 [ 40.105835] ? mm_update_next_owner+0x990/0x990 [ 40.110489] ? find_held_lock+0x36/0x1c0 [ 40.114535] ? __handle_mm_fault+0x4729/0x5be0 [ 40.119101] ? lock_downgrade+0x900/0x900 [ 40.123248] ? kasan_check_read+0x11/0x20 [ 40.127375] ? do_raw_spin_unlock+0xa7/0x330 [ 40.131766] ? do_raw_spin_trylock+0x270/0x270 [ 40.136344] ? v4l_enumstd+0x70/0x70 [ 40.140044] ? _raw_spin_unlock+0x2c/0x50 [ 40.144177] ? __handle_mm_fault+0xa57/0x5be0 [ 40.148692] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 40.153526] ? zap_class+0x640/0x640 [ 40.157222] ? zap_class+0x640/0x640 [ 40.160920] ? zap_class+0x640/0x640 [ 40.164618] ? find_held_lock+0x36/0x1c0 [ 40.168663] ? __do_page_fault+0x620/0xe60 [ 40.172880] ? lock_downgrade+0x900/0x900 [ 40.177009] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 40.181925] ? kasan_check_read+0x11/0x20 [ 40.186069] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 40.191330] ? rcu_softirq_qs+0x20/0x20 [ 40.195286] ? trace_hardirqs_off_caller+0x310/0x310 [ 40.200374] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 40.205913] ? check_preemption_disabled+0x48/0x280 [ 40.210919] ? kasan_check_write+0x14/0x20 [ 40.215136] ? up_read+0x225/0x2c0 [ 40.218661] do_group_exit+0x177/0x440 [ 40.222534] ? trace_hardirqs_on+0xbd/0x310 [ 40.226839] ? __ia32_sys_exit+0x50/0x50 [ 40.230906] ? trace_hardirqs_off_caller+0x310/0x310 [ 40.235995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.241520] ? __do_page_fault+0x491/0xe60 [ 40.245739] ? __ia32_compat_sys_ioctl+0x17a/0x630 [ 40.250656] __ia32_sys_exit_group+0x3e/0x50 [ 40.255047] do_fast_syscall_32+0x34d/0xfb2 [ 40.259352] ? do_int80_syscall_32+0x890/0x890 [ 40.263920] ? entry_SYSENTER_compat+0x68/0x7f [ 40.268484] ? trace_hardirqs_off_caller+0xbb/0x310 [ 40.273500] ? syscall_return_slowpath+0x5e0/0x5e0 [ 40.278413] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.283252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.288075] ? trace_hardirqs_on_caller+0x310/0x310 [ 40.293083] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 40.298095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.303617] ? prepare_exit_to_usermode+0x291/0x3b0 [ 40.308620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.313453] entry_SYSENTER_compat+0x70/0x7f [ 40.317843] RIP: 0023:0xf7effa29 [ 40.321203] Code: Bad RIP value. [ 40.324548] RSP: 002b:00000000ff9e663c EFLAGS: 00000292 ORIG_RAX: 00000000000000fc [ 40.332235] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000080f0298 [ 40.339487] RDX: 0000000000000000 RSI: 00000000080d9db8 RDI: 00000000080f02a0 [ 40.346753] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 40.354003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 40.361272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.368539] Modules linked in: [ 40.372232] kobject: 'regulatory.0' (000000007af27aeb): kobject_uevent_env [ 40.374319] ---[ end trace 66cd28e50045cc20 ]--- [ 40.379318] kobject: 'regulatory.0' (000000007af27aeb): fill_kobj_path: path = '/devices/platform/regulatory.0' [ 40.394573] RIP: 0010:vb2_vmalloc_put_userptr+0x73/0x250 [ 40.400074] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5e 08 48 8d 7b 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 72 01 00 00 [ 40.419026] RSP: 0018:ffff8801bca2f3b8 EFLAGS: 00010202 [ 40.424380] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff113e18c [ 40.431669] RDX: 0000000000000001 RSI: ffffffff854c5ac9 RDI: 0000000000000009 [ 40.438945] RBP: ffff8801bca2f3e8 R08: ffff8801d8f66480 R09: ffffed003739109e [ 40.446259] R10: ffff8801bca2f4e0 R11: ffff8801b9c884f7 R12: ffffc90002559000 [ 40.453588] R13: 0000000000000000 R14: ffff8801d8d17000 R15: ffff8801d8d17000 [ 40.460884] FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 40.469141] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 40.475010] CR2: 0000000001c64000 CR3: 00000001bb534000 CR4: 00000000001406f0 [ 40.482334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.489626] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.496879] Kernel panic - not syncing: Fatal exception [ 40.503193] Kernel Offset: disabled [ 40.506819] Rebooting in 86400 seconds..