[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.175234] kauditd_printk_skb: 8 callbacks suppressed [ 28.175265] audit: type=1800 audit(1541243720.640:29): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.208510] audit: type=1800 audit(1541243720.640:30): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.18' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 56.310444] WARNING: CPU: 1 PID: 5743 at drivers/media/common/videobuf2/videobuf2-core.c:1831 __vb2_queue_cancel+0x910/0xd20 [ 56.321900] Kernel panic - not syncing: panic_on_warn set ... [ 56.327798] CPU: 1 PID: 5743 Comm: syz-executor462 Not tainted 4.19.0+ #95 [ 56.334821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.344157] Call Trace: [ 56.346732] dump_stack+0x244/0x39d [ 56.350390] ? dump_stack_print_info.cold.1+0x20/0x20 [ 56.355591] panic+0x2ad/0x55c [ 56.358769] ? add_taint.cold.5+0x16/0x16 [ 56.362930] ? __warn.cold.8+0x5/0x45 [ 56.366734] ? __warn+0xe8/0x1d0 [ 56.370108] ? __vb2_queue_cancel+0x910/0xd20 [ 56.374617] __warn.cold.8+0x20/0x45 [ 56.378346] ? rcu_softirq_qs+0x20/0x20 [ 56.382346] ? __vb2_queue_cancel+0x910/0xd20 [ 56.386835] report_bug+0x254/0x2d0 [ 56.390451] do_error_trap+0x11b/0x200 [ 56.394341] do_invalid_op+0x36/0x40 [ 56.398061] ? __vb2_queue_cancel+0x910/0xd20 [ 56.402567] invalid_op+0x14/0x20 [ 56.406024] RIP: 0010:__vb2_queue_cancel+0x910/0xd20 [ 56.411126] Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 d8 03 00 00 48 81 c4 b0 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 c9 32 fc <0f> 0b 48 8b 85 70 fe ff ff 48 05 28 02 00 00 48 89 85 38 fe ff ff [ 56.430028] RSP: 0018:ffff8801d2997860 EFLAGS: 00010293 [ 56.435376] RAX: ffff8801d2bfe2c0 RBX: ffff8801d2997a10 RCX: ffffffff854ca708 [ 56.442642] RDX: 0000000000000000 RSI: ffffffff854cae00 RDI: 0000000000000005 [ 56.449904] RBP: ffff8801d2997a38 R08: ffff8801d2bfe2c0 R09: ffffed00395c0cee [ 56.457164] R10: ffffed00395c0cee R11: ffff8801cae06777 R12: ffff8801cae06774 [ 56.464425] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8801cae01418 [ 56.471698] ? __vb2_queue_cancel+0x218/0xd20 [ 56.476188] ? __vb2_queue_cancel+0x910/0xd20 [ 56.480697] ? lock_downgrade+0x900/0x900 [ 56.484834] ? debug_mutex_lock_common+0x130/0x130 [ 56.489786] ? vb2_buffer_done+0xb90/0xb90 [ 56.494022] ? kasan_check_read+0x11/0x20 [ 56.498155] ? do_raw_spin_unlock+0xa7/0x330 [ 56.502563] ? do_raw_spin_trylock+0x270/0x270 [ 56.507143] ? kasan_check_write+0x14/0x20 [ 56.511365] ? wake_up_q+0xb3/0x100 [ 56.514988] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 56.519904] ? kasan_check_read+0x11/0x20 [ 56.524038] ? wait_for_completion+0x8a0/0x8a0 [ 56.528607] ? trace_hardirqs_off_caller+0x310/0x310 [ 56.533699] ? vfs_lock_file+0xe0/0xe0 [ 56.537598] vb2_core_streamoff+0x60/0x140 [ 56.541838] __vb2_cleanup_fileio+0x73/0x160 [ 56.546262] vb2_core_queue_release+0x1e/0x80 [ 56.550785] _vb2_fop_release+0x1d2/0x2b0 [ 56.554936] vb2_fop_release+0x77/0xc0 [ 56.558812] vivid_fop_release+0x18e/0x440 [ 56.563033] ? vivid_remove+0x460/0x460 [ 56.566996] v4l2_release+0x224/0x3a0 [ 56.570787] ? dev_debug_store+0x140/0x140 [ 56.575012] __fput+0x385/0xa30 [ 56.578289] ? get_max_files+0x20/0x20 [ 56.582166] ? trace_hardirqs_on+0xbd/0x310 [ 56.586474] ? kasan_check_read+0x11/0x20 [ 56.590633] ? task_work_run+0x1af/0x2a0 [ 56.594684] ? trace_hardirqs_off_caller+0x310/0x310 [ 56.599789] ? filp_close+0x1cd/0x250 [ 56.603608] ____fput+0x15/0x20 [ 56.606875] task_work_run+0x1e8/0x2a0 [ 56.610772] ? task_work_cancel+0x240/0x240 [ 56.615115] ? copy_fd_bitmaps+0x210/0x210 [ 56.619350] ? do_syscall_64+0x9a/0x820 [ 56.623336] exit_to_usermode_loop+0x318/0x380 [ 56.627926] ? __bpf_trace_sys_exit+0x30/0x30 [ 56.632430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.637956] do_syscall_64+0x6be/0x820 [ 56.641834] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 56.647183] ? syscall_return_slowpath+0x5e0/0x5e0 [ 56.652097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.656938] ? trace_hardirqs_on_caller+0x310/0x310 [ 56.661955] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 56.666958] ? prepare_exit_to_usermode+0x291/0x3b0 [ 56.671999] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.676834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.682008] RIP: 0033:0x400ef0 [ 56.685199] Code: 01 f0 ff ff 0f 83 b0 0a 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 57 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 84 0a 00 00 c3 48 83 ec 08 e8 3a 01 00 00 [ 56.704103] RSP: 002b:00007ffd15fc8fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 56.711796] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000400ef0 [ 56.719078] RDX: 0000000013bf860f RSI: 0000000020000000 RDI: 0000000000000003 [ 56.726348] RBP: 0000000000000000 R08: 0000000001740880 R09: 00000000004002e0 [ 56.733619] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401e00 [ 56.740874] R13: 0000000000401e90 R14: 0000000000000000 R15: 0000000000000000 [ 56.749192] Kernel Offset: disabled [ 56.752876] Rebooting in 86400 seconds..