[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.37' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.036836] ------------[ cut here ]------------ [ 27.041666] WARNING: CPU: 0 PID: 7986 at drivers/dma-buf/dma-buf.c:1039 dma_buf_vunmap+0x181/0x1f0 [ 27.050740] Kernel panic - not syncing: panic_on_warn set ... [ 27.050740] [ 27.058077] CPU: 0 PID: 7986 Comm: syz-executor364 Not tainted 4.14.281-syzkaller #0 [ 27.065933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.075261] Call Trace: [ 27.077919] dump_stack+0x1b2/0x281 [ 27.081523] panic+0x1f9/0x42d [ 27.084692] ? add_taint.cold+0x16/0x16 [ 27.088643] ? dma_buf_vunmap+0x181/0x1f0 [ 27.092767] ? dma_buf_vunmap+0x181/0x1f0 [ 27.096894] __warn.cold+0x20/0x44 [ 27.100416] ? ist_end_non_atomic+0x10/0x10 [ 27.104715] ? dma_buf_vunmap+0x181/0x1f0 [ 27.108843] report_bug+0x208/0x250 [ 27.112449] do_error_trap+0x195/0x2d0 [ 27.116344] ? math_error+0x2d0/0x2d0 [ 27.120122] ? is_bpf_text_address+0xb8/0x150 [ 27.124593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 27.129418] invalid_op+0x1b/0x40 [ 27.132848] RIP: 0010:dma_buf_vunmap+0x181/0x1f0 [ 27.137575] RSP: 0018:ffff8880958ffb70 EFLAGS: 00010297 [ 27.142916] RAX: ffff8880b37565c0 RBX: 0000000000000000 RCX: 0000000000000000 [ 27.150162] RDX: 0000000000000000 RSI: ffffc90005bda000 RDI: 0000000000000000 [ 27.157408] RBP: ffffc90005bda000 R08: 0000000000000000 R09: 0000000000040552 [ 27.164731] R10: ffff8880b3756e70 R11: ffff8880b37565c0 R12: ffffc90005bda000 [ 27.171979] R13: ffff8880ac39f528 R14: ffff8880b500b200 R15: 0000000000000000 [ 27.179237] vb2_vmalloc_detach_dmabuf+0x57/0x80 [ 27.183967] ? vb2_vmalloc_map_dmabuf+0x90/0x90 [ 27.188609] __vb2_plane_dmabuf_put+0x10b/0x2e0 [ 27.193257] __vb2_queue_free+0x5e4/0x7a0 [ 27.197387] vb2_core_queue_release+0x5b/0x70 [ 27.201856] _vb2_fop_release+0x1c1/0x280 [ 27.205980] ? _vb2_fop_release+0x280/0x280 [ 27.210277] ? dev_debug_store+0xe0/0xe0 [ 27.214318] v4l2_release+0xf4/0x190 [ 27.218009] __fput+0x25f/0x7a0 [ 27.221269] task_work_run+0x11f/0x190 [ 27.225133] do_exit+0xa44/0x2850 [ 27.228563] ? __do_page_fault+0x571/0xad0 [ 27.232779] ? mm_update_next_owner+0x5b0/0x5b0 [ 27.237422] ? lock_downgrade+0x740/0x740 [ 27.241552] do_group_exit+0x100/0x2e0 [ 27.245436] SyS_exit_group+0x19/0x20 [ 27.249210] ? do_group_exit+0x2e0/0x2e0 [ 27.253244] do_syscall_64+0x1d5/0x640 [ 27.257129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 27.262295] RIP: 0033:0x7f959acdf649 [ 27.265981] RSP: 002b:00007ffffa94b228 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 27.273663] RAX: ffffffffffffffda RBX: 00007f959ad53270 RCX: 00007f959acdf649 [ 27.280992] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 27.288237] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000000 [ 27.295479] R10: 0000000000000009 R11: 0000000000000246 R12: 00007f959ad53270 [ 27.302725] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 27.310274] Kernel Offset: disabled [ 27.314012] Rebooting in 86400 seconds..