[ 35.774002] audit: type=1800 audit(1552004104.312:27): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 35.793236] audit: type=1800 audit(1552004104.312:28): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.470906] audit: type=1800 audit(1552004105.062:29): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.490123] audit: type=1800 audit(1552004105.072:30): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.200' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 46.459612] WARNING: CPU: 0 PID: 7656 at kernel/workqueue.c:3020 __flush_work+0x74c/0x8a0 [ 46.468057] Kernel panic - not syncing: panic_on_warn set ... [ 46.473953] CPU: 0 PID: 7656 Comm: syz-executor111 Not tainted 5.0.0+ #11 [ 46.480893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.490241] Call Trace: [ 46.492822] dump_stack+0x172/0x1f0 [ 46.496442] ? __flush_work+0x6d0/0x8a0 [ 46.500424] panic+0x2cb/0x65c [ 46.503605] ? __warn_printk+0xf3/0xf3 [ 46.507764] ? __flush_work+0x74c/0x8a0 [ 46.511729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.517265] ? __warn.cold+0x5/0x45 [ 46.520910] ? __warn+0xe8/0x1d0 [ 46.524298] ? __flush_work+0x74c/0x8a0 [ 46.528271] __warn.cold+0x20/0x45 [ 46.531816] ? __flush_work+0x74c/0x8a0 [ 46.535798] report_bug+0x263/0x2b0 [ 46.539420] do_error_trap+0x11b/0x200 [ 46.543313] do_invalid_op+0x37/0x50 [ 46.547040] ? __flush_work+0x74c/0x8a0 [ 46.551009] invalid_op+0x14/0x20 [ 46.554466] RIP: 0010:__flush_work+0x74c/0x8a0 [ 46.559038] Code: 74 58 e8 77 12 26 00 fb 66 0f 1f 44 00 00 45 31 e4 e9 86 fd ff ff e8 63 12 26 00 0f 0b 45 31 e4 e9 77 fd ff ff e8 54 12 26 00 <0f> 0b 45 31 e4 e9 68 fd ff ff e8 45 12 26 00 4c 89 ff 45 31 e4 e8 [ 46.577937] RSP: 0018:ffff888092177608 EFLAGS: 00010293 [ 46.583291] RAX: ffff888091128180 RBX: ffff8880a3db1480 RCX: ffffffff814a14cb [ 46.590573] RDX: 0000000000000000 RSI: ffffffff814a1b7c RDI: 0000000000000001 [ 46.597855] RBP: ffff888092177778 R08: ffff888091128180 R09: ffffed101242eedd [ 46.605132] R10: ffffed101242eedc R11: 0000000000000003 R12: dffffc0000000000 [ 46.612395] R13: ffff888092177750 R14: 0000000000000000 R15: 0000000000000001 [ 46.619673] ? __flush_work+0x9b/0x8a0 [ 46.623549] ? __flush_work+0x74c/0x8a0 [ 46.627528] ? __flush_work+0x74c/0x8a0 [ 46.631497] ? insert_work+0x3a0/0x3a0 [ 46.635376] ? mark_held_locks+0xa4/0xf0 [ 46.639432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.644969] ? refcount_sub_and_test_checked+0x154/0x200 [ 46.650412] ? refcount_dec_not_one+0x1f0/0x1f0 [ 46.655080] ? __drm_atomic_helper_crtc_destroy_state+0xf3/0x340 [ 46.661230] flush_work+0x18/0x20 [ 46.664676] vkms_atomic_crtc_destroy_state+0x2d/0x40 [ 46.669859] drm_atomic_state_default_clear+0x37c/0xd60 [ 46.675227] drm_atomic_state_clear+0x9d/0xc0 [ 46.679726] __drm_atomic_state_free+0x3c/0xf0 [ 46.684297] drm_atomic_helper_set_config+0xe5/0x160 [ 46.689405] drm_mode_setcrtc+0x613/0x1490 [ 46.693633] ? drm_mode_getcrtc+0x870/0x870 [ 46.697955] ? drm_dev_exit+0x22/0x60 [ 46.701756] ? find_held_lock+0x35/0x130 [ 46.705840] ? drm_dev_exit+0x22/0x60 [ 46.709642] ? drm_lease_owner+0x45/0x60 [ 46.713687] ? drm_is_current_master+0x5c/0x140 [ 46.718346] drm_ioctl_kernel+0x23b/0x2e0 [ 46.722477] ? drm_mode_getcrtc+0x870/0x870 [ 46.726785] ? drm_setversion+0x8c0/0x8c0 [ 46.730955] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 46.736478] ? _copy_from_user+0xdd/0x150 [ 46.740614] drm_ioctl+0x545/0xa50 [ 46.744147] ? drm_mode_getcrtc+0x870/0x870 [ 46.748483] ? drm_version+0x3d0/0x3d0 [ 46.752450] ? smack_log+0x415/0x540 [ 46.756161] ? debug_check_no_obj_freed+0x200/0x464 [ 46.761176] ? smk_tskacc+0x2ba/0x390 [ 46.764964] ? drm_version+0x3d0/0x3d0 [ 46.768841] do_vfs_ioctl+0xd6e/0x1390 [ 46.772742] ? smk_curacc+0x7f/0xa0 [ 46.776355] ? ioctl_preallocate+0x210/0x210 [ 46.780747] ? smack_file_ioctl+0x196/0x300 [ 46.785078] ? smack_file_lock+0x240/0x240 [ 46.789302] ? rcu_read_lock_sched_held+0x110/0x130 [ 46.794326] ? kmem_cache_free+0x1d1/0x260 [ 46.798554] ? do_sys_open+0x31d/0x5d0 [ 46.802436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.807971] ? security_file_ioctl+0x93/0xc0 [ 46.812368] ksys_ioctl+0xab/0xd0 [ 46.815827] __x64_sys_ioctl+0x73/0xb0 [ 46.819708] do_syscall_64+0x103/0x610 [ 46.823591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.828785] RIP: 0033:0x443de9 [ 46.831962] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.850853] RSP: 002b:00007fffacf96cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.858555] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443de9 [ 46.865813] RDX: 0000000020000180 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 46.873074] RBP: 00000000006ce018 R08: 0000000000000000 R09: 00000000004002e0 [ 46.880336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401af0 [ 46.887599] R13: 0000000000401b80 R14: 0000000000000000 R15: 0000000000000000 [ 46.895680] Kernel Offset: disabled [ 46.899371] Rebooting in 86400 seconds..