[[0;32m OK [0m] Reached target Graphical Interface.
Starting Update UTMP about System Runlevel Changes...
Starting Load/Save RF Kill Switch Status...
[[0;32m OK [0m] Started Update UTMP about System Runlevel Changes.
[[0;32m OK [0m] Started Load/Save RF Kill Switch Status.
Debian GNU/Linux 9 syzkaller ttyS0
Warning: Permanently added '10.128.15.198' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 41.657540] audit: type=1400 audit(1602708268.599:8): avc: denied { execmem } for pid=6482 comm="syz-executor237" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 41.660153] kasan: CONFIG_KASAN_INLINE enabled
[ 41.682378] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 41.689739] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 41.695956] CPU: 1 PID: 6482 Comm: syz-executor237 Not tainted 4.19.150-syzkaller #0
[ 41.703856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 41.713247] RIP: 0010:qp_release_pages+0x5a/0x310
[ 41.718089] Code: 04 fd 31 ff 48 89 ee e8 94 5f 04 fd 48 85 ed 0f 85 09 01 00 00 e9 4e 02 00 00 e8 f1 5d 04 fd 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 46 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89
[ 41.737090] RSP: 0018:ffff88808a167788 EFLAGS: 00010202
[ 41.742430] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff846d759c
[ 41.749676] RDX: 0000000000000000 RSI: ffffffff846d746f RDI: 0000000000000008
[ 41.756926] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 41.764177] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88809e5a27c0
[ 41.771446] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.778694] FS: 0000000000ad2880(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000
[ 41.786894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.792772] CR2: 0000000020000000 CR3: 000000008d480000 CR4: 00000000001406e0
[ 41.800039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.807286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.814529] Call Trace:
[ 41.817102] qp_host_get_user_memory+0x249/0x3e0
[ 41.821865] qp_broker_alloc+0x10fa/0x1bd0
[ 41.826080] ? qp_get_queue_headers+0x400/0x400
[ 41.830730] ? lock_downgrade+0x750/0x750
[ 41.834862] ? lock_acquire+0x170/0x3f0
[ 41.838846] ? __might_fault+0xef/0x1d0
[ 41.842811] vmci_qp_broker_alloc+0x48/0x60
[ 41.847218] vmci_host_do_alloc_queuepair.constprop.0+0x1b4/0x400
[ 41.853435] ? drv_cp_harray_to_user+0x190/0x190
[ 41.858176] ? lock_downgrade+0x750/0x750
[ 41.862302] ? lock_acquire+0x170/0x3f0
[ 41.866256] ? avc_has_extended_perms+0xe4/0x1020
[ 41.871080] ? check_preemption_disabled+0x41/0x2b0
[ 41.876078] vmci_host_unlocked_ioctl+0x1459/0x1e40
[ 41.881163] ? vmci_host_do_alloc_queuepair.constprop.0+0x400/0x400
[ 41.887548] ? check_preemption_disabled+0x41/0x2b0
[ 41.892543] ? avc_ss_reset+0x170/0x170
[ 41.896497] ? __kasan_slab_free+0x186/0x1f0
[ 41.900927] ? kmem_cache_free+0x7f/0x2b0
[ 41.905062] ? putname+0xe1/0x130
[ 41.908507] ? do_sys_open+0x2ba/0x520
[ 41.912391] ? do_syscall_64+0xf9/0x670
[ 41.916345] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 41.921703] ? mark_held_locks+0xf0/0xf0
[ 41.925762] ? find_held_lock+0x2d/0x110
[ 41.929809] ? debug_check_no_obj_freed+0x201/0x482
[ 41.934810] ? lock_downgrade+0x750/0x750
[ 41.938937] ? vmci_host_do_alloc_queuepair.constprop.0+0x400/0x400
[ 41.945322] do_vfs_ioctl+0xcdb/0x12e0
[ 41.949189] ? selinux_file_ioctl+0x44f/0x5e0
[ 41.953685] ? ioctl_preallocate+0x200/0x200
[ 41.958087] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0
[ 41.963519] ? lookup_open+0x17d8/0x19c0
[ 41.967560] ? putname+0xe1/0x130
[ 41.971010] ? rcu_read_lock_sched_held+0x174/0x1e0
[ 41.976003] ? putname+0xe1/0x130
[ 41.979454] ksys_ioctl+0x9b/0xc0
[ 41.982888] __x64_sys_ioctl+0x6f/0xb0
[ 41.986786] do_syscall_64+0xf9/0x670
[ 41.990577] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 41.995748] RIP: 0033:0x4402f9
[ 41.998922] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[ 42.017854] RSP: 002b:00007fff59b50978 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 42.025576] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402f9
[ 42.032835] RDX: 0000000020000080 RSI: 00000000000007a8 RDI: 0000000000000003
[ 42.040090] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
[ 42.047339] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401b00
[ 42.054589] R13: 0000000000401b90 R14: 0000000000000000 R15: 0000000000000000
[ 42.061842] Modules linked in:
[ 42.065992] ---[ end trace ef612ce3a4ae7dc1 ]---
[ 42.070876] RIP: 0010:qp_release_pages+0x5a/0x310
[ 42.075718] Code: 04 fd 31 ff 48 89 ee e8 94 5f 04 fd 48 85 ed 0f 85 09 01 00 00 e9 4e 02 00 00 e8 f1 5d 04 fd 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 46 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89
[ 42.094684] RSP: 0018:ffff88808a167788 EFLAGS: 00010202
[ 42.100088] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff846d759c
[ 42.107350] RDX: 0000000000000000 RSI: ffffffff846d746f RDI: 0000000000000008
[ 42.114664] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 42.122055] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88809e5a27c0
[ 42.129308] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.136637] FS: 0000000000ad2880(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000
[ 42.144894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.150819] CR2: 0000000020000000 CR3: 000000008d480000 CR4: 00000000001406e0
[ 42.158093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.165385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.172702] Kernel panic - not syncing: Fatal exception
[ 42.179453] Kernel Offset: disabled
[ 42.183071] Rebooting in 86400 seconds..