[ 37.155571] audit: type=1800 audit(1546553330.844:26): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 37.183882] audit: type=1800 audit(1546553330.844:27): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.204819] audit: type=1800 audit(1546553330.844:28): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.762575] audit: type=1800 audit(1546553331.484:29): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 54.415922] WARNING: CPU: 0 PID: 7835 at drivers/media/common/videobuf2/videobuf2-core.c:1852 __vb2_queue_cancel+0x8f1/0xd30 [ 54.427510] Kernel panic - not syncing: panic_on_warn set ... [ 54.433390] CPU: 0 PID: 7835 Comm: syz-executor733 Not tainted 4.20.0+ #7 [ 54.440296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.449632] Call Trace: [ 54.452217] dump_stack+0x1db/0x2d0 [ 54.455829] ? dump_stack_print_info.cold+0x20/0x20 [ 54.460938] ? __vb2_queue_cancel+0x8e0/0xd30 [ 54.465446] panic+0x2cb/0x589 [ 54.468647] ? add_taint.cold+0x16/0x16 [ 54.472617] ? __vb2_queue_cancel+0x8f1/0xd30 [ 54.477101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.482626] ? __probe_kernel_read+0x1f4/0x250 [ 54.487199] ? __warn.cold+0x5/0x4b [ 54.490811] ? __warn+0xe8/0x1d0 [ 54.494164] ? __vb2_queue_cancel+0x8f1/0xd30 [ 54.498659] __warn.cold+0x20/0x4b [ 54.502195] ? __vb2_queue_cancel+0x8f1/0xd30 [ 54.506689] report_bug+0x263/0x2b0 [ 54.510313] do_error_trap+0x11b/0x200 [ 54.514196] do_invalid_op+0x37/0x50 [ 54.517906] ? __vb2_queue_cancel+0x8f1/0xd30 [ 54.522402] invalid_op+0x14/0x20 [ 54.525847] RIP: 0010:__vb2_queue_cancel+0x8f1/0xd30 [ 54.530939] Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 15 04 00 00 48 81 c4 18 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5f b5 3f fc <0f> 0b 49 8d 87 28 02 00 00 48 89 85 d0 fe ff ff 48 c1 e8 03 42 0f [ 54.549834] RSP: 0018:ffff888096a57908 EFLAGS: 00010293 [ 54.555197] RAX: ffff8880948f0040 RBX: ffff888096a57a20 RCX: ffffffff8541d9e2 [ 54.562464] RDX: 0000000000000000 RSI: ffffffff8541e111 RDI: 0000000000000005 [ 54.569730] RBP: ffff888096a57a48 R08: ffff8880948f0040 R09: ffffed1043098e8b [ 54.576996] R10: ffffed1043098e8a R11: ffff8882184c7457 R12: ffff8882184c7454 [ 54.584255] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8882184c7210 [ 54.591556] ? __vb2_queue_cancel+0x1c2/0xd30 [ 54.596057] ? __vb2_queue_cancel+0x8f1/0xd30 [ 54.600574] ? __vb2_queue_cancel+0x8f1/0xd30 [ 54.605079] ? kasan_check_read+0x11/0x20 [ 54.609307] ? do_raw_spin_unlock+0xa0/0x330 [ 54.613705] ? vb2_buffer_done+0xc90/0xc90 [ 54.617927] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 54.623032] ? kasan_check_write+0x14/0x20 [ 54.627262] ? wake_up_q+0xaa/0x100 [ 54.630878] ? __mutex_unlock_slowpath+0x420/0x870 [ 54.635807] vb2_core_streamoff+0x60/0x140 [ 54.640057] __vb2_cleanup_fileio+0x78/0x170 [ 54.644486] vb2_core_queue_release+0x20/0x80 [ 54.648987] _vb2_fop_release+0x1cf/0x2a0 [ 54.653135] vb2_fop_release+0x75/0xc0 [ 54.657017] vivid_fop_release+0x18e/0x430 [ 54.661248] ? vivid_remove+0x460/0x460 [ 54.665218] v4l2_release+0x224/0x3a0 [ 54.669013] __fput+0x3c5/0xb10 [ 54.672283] ? dev_debug_store+0x150/0x150 [ 54.676511] ? get_max_files+0x20/0x20 [ 54.680391] ? task_work_run+0x1bb/0x2b0 [ 54.684445] ? trace_hardirqs_off_caller+0x300/0x300 [ 54.689552] ? do_raw_spin_trylock+0x270/0x270 [ 54.694135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.699672] ____fput+0x16/0x20 [ 54.702950] task_work_run+0x1f4/0x2b0 [ 54.706825] ? task_work_cancel+0x2c0/0x2c0 [ 54.711138] ? __close_fd+0x25f/0x3d0 [ 54.714933] ? do_fast_syscall_32+0x13b/0xf98 [ 54.719415] exit_to_usermode_loop+0x32a/0x3b0 [ 54.723993] ? entry_SYSENTER_compat+0x70/0x7f [ 54.728568] ? syscall_trace_enter+0x12a0/0x12a0 [ 54.733318] ? __do_page_fault+0x3f1/0xd60 [ 54.737555] do_fast_syscall_32+0xc97/0xf98 [ 54.741878] ? do_int80_syscall_32+0x880/0x880 [ 54.746447] ? trace_hardirqs_off+0x310/0x310 [ 54.750953] ? syscall_return_slowpath+0x3b0/0x5f0 [ 54.755973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.761786] ? prepare_exit_to_usermode+0x232/0x3b0 [ 54.766802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.771642] entry_SYSENTER_compat+0x70/0x7f [ 54.776036] RIP: 0023:0xf7f07869 [ 54.779391] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 54.798365] RSP: 002b:00000000fff5e8bc EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 54.806065] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000020000240 [ 54.813376] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 000000002000020e [ 54.820639] RBP: 00000000fff5e918 R08: 0000000000000000 R09: 0000000000000000 [ 54.827901] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 54.835206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.844034] Kernel Offset: disabled [ 54.847731] Rebooting in 86400 seconds..