[ 61.482413][ T26] audit: type=1800 audit(1572998095.395:25): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.513027][ T26] audit: type=1800 audit(1572998095.405:26): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.555605][ T26] audit: type=1800 audit(1572998095.405:27): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 62.374271][ T8805] sshd (8805) used greatest stack depth: 22888 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 72.137528][ T8889] ------------[ cut here ]------------ [ 72.143202][ T8889] WARNING: CPU: 0 PID: 8889 at drivers/gpu/drm/vkms/vkms_gem.c:37 vkms_gem_free_object+0x92/0xb0 [ 72.154245][ T8889] Kernel panic - not syncing: panic_on_warn set ... [ 72.160927][ T8889] CPU: 0 PID: 8889 Comm: syz-executor080 Not tainted 5.4.0-rc6-next-20191105 #0 [ 72.169939][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.179972][ T8889] Call Trace: [ 72.183249][ T8889] dump_stack+0x197/0x210 [ 72.187567][ T8889] ? __vkms_gem_create+0xb0/0x100 [ 72.192575][ T8889] panic+0x2e3/0x75c [ 72.196446][ T8889] ? add_taint.cold+0x16/0x16 [ 72.201127][ T8889] ? printk+0xba/0xed [ 72.205086][ T8889] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 72.210528][ T8889] ? __warn.cold+0x14/0x35 [ 72.214918][ T8889] ? __warn+0xd9/0x1d0 [ 72.218963][ T8889] ? vkms_gem_free_object+0x92/0xb0 [ 72.224135][ T8889] __warn.cold+0x2f/0x35 [ 72.228353][ T8889] ? report_bug.cold+0x63/0xb2 [ 72.233094][ T8889] ? vkms_gem_free_object+0x92/0xb0 [ 72.238270][ T8889] report_bug+0x289/0x300 [ 72.242584][ T8889] do_error_trap+0x11b/0x200 [ 72.247151][ T8889] do_invalid_op+0x37/0x50 [ 72.251542][ T8889] ? vkms_gem_free_object+0x92/0xb0 [ 72.256721][ T8889] invalid_op+0x23/0x30 [ 72.260853][ T8889] RIP: 0010:vkms_gem_free_object+0x92/0xb0 [ 72.266637][ T8889] Code: e4 59 7a fd 49 8d bc 24 f8 01 00 00 e8 c7 74 5f fd 4c 89 e7 e8 7f 5b ad ff 4c 89 e7 e8 b7 27 b6 fd 41 5c 5d c3 e8 be 59 7a fd <0f> 0b eb a2 e8 b5 59 7a fd 0f 0b eb c8 e8 ec 73 b6 fd eb b6 e8 e5 [ 72.286231][ T8889] RSP: 0018:ffff888093cc79e8 EFLAGS: 00010293 [ 72.292735][ T8889] RAX: ffff88809897c6c0 RBX: ffffffff894f3380 RCX: ffffffff83a67626 [ 72.301038][ T8889] RDX: 0000000000000000 RSI: ffffffff83f90fe2 RDI: ffff8880a0aefa78 [ 72.308988][ T8889] RBP: ffff888093cc79f0 R08: ffff88809897c6c0 R09: ffffed1012798f36 [ 72.316937][ T8889] R10: ffffed1012798f35 R11: 0000000000000003 R12: ffff8880a0aef800 [ 72.324884][ T8889] R13: ffff8882193e0000 R14: ffffffff83f90f50 R15: ffff8882193e0020 [ 72.332841][ T8889] ? __vkms_gem_create+0x100/0x100 [ 72.337956][ T8889] ? drm_gem_object_put_unlocked+0x116/0x170 [ 72.343925][ T8889] ? vkms_gem_free_object+0x92/0xb0 [ 72.349126][ T8889] ? vkms_gem_free_object+0x92/0xb0 [ 72.354304][ T8889] drm_gem_object_free+0x100/0x220 [ 72.359396][ T8889] drm_gem_object_put_unlocked+0x127/0x170 [ 72.365180][ T8889] drm_gem_object_handle_put_unlocked+0x1ad/0x2d0 [ 72.371584][ T8889] drm_gem_object_release_handle+0x102/0x1c0 [ 72.377555][ T8889] idr_for_each+0x138/0x250 [ 72.382038][ T8889] ? drm_gem_object_handle_put_unlocked+0x2d0/0x2d0 [ 72.388780][ T8889] ? idr_find+0x60/0x60 [ 72.392926][ T8889] ? drm_file_free.part.0+0x5c9/0xc00 [ 72.398300][ T8889] drm_gem_release+0x27/0x40 [ 72.402870][ T8889] drm_file_free.part.0+0x7f4/0xc00 [ 72.408125][ T8889] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 72.414495][ T8889] drm_release+0x286/0x3f0 [ 72.418898][ T8889] ? ima_file_free+0xc9/0x430 [ 72.423612][ T8889] __fput+0x2ff/0x890 [ 72.427598][ T8889] ? drm_lastclose+0xa0/0xa0 [ 72.432177][ T8889] ____fput+0x16/0x20 [ 72.436213][ T8889] task_work_run+0x145/0x1c0 [ 72.440792][ T8889] do_exit+0x904/0x2e60 [ 72.444986][ T8889] ? mm_update_next_owner+0x640/0x640 [ 72.450342][ T8889] ? tomoyo_file_ioctl+0x23/0x30 [ 72.455258][ T8889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.461999][ T8889] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 72.467447][ T8889] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 72.472890][ T8889] do_group_exit+0x135/0x360 [ 72.477464][ T8889] __x64_sys_exit_group+0x44/0x50 [ 72.482470][ T8889] do_syscall_64+0xfa/0x760 [ 72.486953][ T8889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.492821][ T8889] RIP: 0033:0x442bb8 [ 72.496715][ T8889] Code: Bad RIP value. [ 72.500763][ T8889] RSP: 002b:00007ffe80d53378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 72.509156][ T8889] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000442bb8 [ 72.517106][ T8889] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 72.525066][ T8889] RBP: 00000000004c24c8 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 72.533012][ T8889] R10: 00000000004002e0 R11: 0000000000000246 R12: 0000000000000001 [ 72.540957][ T8889] R13: 00000000006d41a0 R14: 0000000000000000 R15: 0000000000000000 [ 72.550545][ T8889] Kernel Offset: disabled [ 72.554938][ T8889] Rebooting in 86400 seconds..