[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 30.043980] kauditd_printk_skb: 9 callbacks suppressed [ 30.043992] audit: type=1800 audit(1541390538.059:33): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 30.072720] audit: type=1800 audit(1541390538.059:34): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.715903] audit: type=1400 audit(1541390553.729:35): avc: denied { map } for pid=5797 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 65.463199] audit: type=1400 audit(1541390573.479:36): avc: denied { map } for pid=5809 comm="syz-executor467" path="/root/syz-executor467935185" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 65.494729] WARNING: CPU: 1 PID: 5816 at drivers/media/common/videobuf2/videobuf2-core.c:1831 __vb2_queue_cancel+0x910/0xd20 [ 65.506163] Kernel panic - not syncing: panic_on_warn set ... [ 65.512122] CPU: 1 PID: 5816 Comm: syz-executor467 Not tainted 4.19.0+ #99 [ 65.519112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.528616] Call Trace: [ 65.531195] dump_stack+0x244/0x39d [ 65.534812] ? dump_stack_print_info.cold.1+0x20/0x20 [ 65.539995] panic+0x2ad/0x55c [ 65.543175] ? add_taint.cold.5+0x16/0x16 [ 65.547307] ? __warn.cold.8+0x5/0x45 [ 65.551092] ? __warn+0xe8/0x1d0 [ 65.554448] ? __vb2_queue_cancel+0x910/0xd20 [ 65.558928] __warn.cold.8+0x20/0x45 [ 65.562627] ? rcu_softirq_qs+0x20/0x20 [ 65.566588] ? __vb2_queue_cancel+0x910/0xd20 [ 65.571138] report_bug+0x254/0x2d0 [ 65.574761] do_error_trap+0x11b/0x200 [ 65.578793] do_invalid_op+0x36/0x40 [ 65.582513] ? __vb2_queue_cancel+0x910/0xd20 [ 65.586995] invalid_op+0x14/0x20 [ 65.590432] RIP: 0010:__vb2_queue_cancel+0x910/0xd20 [ 65.595523] Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 d8 03 00 00 48 81 c4 b0 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 c9 32 fc <0f> 0b 48 8b 85 70 fe ff ff 48 05 28 02 00 00 48 89 85 38 fe ff ff [ 65.614461] RSP: 0018:ffff8801b9477860 EFLAGS: 00010293 [ 65.619826] RAX: ffff8801c1732200 RBX: ffff8801b9477a10 RCX: ffffffff854cba88 [ 65.627082] RDX: 0000000000000000 RSI: ffffffff854cc180 RDI: 0000000000000005 [ 65.634347] RBP: ffff8801b9477a38 R08: ffff8801c1732200 R09: ffffed00396cecee [ 65.641612] R10: ffffed00396cecee R11: ffff8801cb676777 R12: ffff8801cb676774 [ 65.648867] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8801cb671418 [ 65.656144] ? __vb2_queue_cancel+0x218/0xd20 [ 65.660630] ? __vb2_queue_cancel+0x910/0xd20 [ 65.665120] ? lock_downgrade+0x900/0x900 [ 65.669257] ? debug_mutex_lock_common+0x130/0x130 [ 65.674175] ? vb2_buffer_done+0xb90/0xb90 [ 65.678402] ? kasan_check_read+0x11/0x20 [ 65.682540] ? do_raw_spin_unlock+0xa7/0x330 [ 65.686948] ? do_raw_spin_trylock+0x270/0x270 [ 65.691523] ? kasan_check_write+0x14/0x20 [ 65.695904] ? wake_up_q+0xb3/0x100 [ 65.699525] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 65.704445] ? kasan_check_read+0x11/0x20 [ 65.708602] ? wait_for_completion+0x8a0/0x8a0 [ 65.713191] ? trace_hardirqs_off_caller+0x310/0x310 [ 65.718285] ? vfs_lock_file+0xe0/0xe0 [ 65.722162] vb2_core_streamoff+0x60/0x140 [ 65.726386] __vb2_cleanup_fileio+0x73/0x160 [ 65.730780] vb2_core_queue_release+0x1e/0x80 [ 65.735261] _vb2_fop_release+0x1d2/0x2b0 [ 65.739398] vb2_fop_release+0x77/0xc0 [ 65.743272] vivid_fop_release+0x18e/0x440 [ 65.747496] ? vivid_remove+0x460/0x460 [ 65.751474] v4l2_release+0x224/0x3a0 [ 65.755289] ? dev_debug_store+0x140/0x140 [ 65.759521] __fput+0x385/0xa30 [ 65.762809] ? get_max_files+0x20/0x20 [ 65.766695] ? trace_hardirqs_on+0xbd/0x310 [ 65.771011] ? kasan_check_read+0x11/0x20 [ 65.775150] ? task_work_run+0x1af/0x2a0 [ 65.779216] ? trace_hardirqs_off_caller+0x310/0x310 [ 65.784319] ? filp_close+0x1cd/0x250 [ 65.788114] ____fput+0x15/0x20 [ 65.791386] task_work_run+0x1e8/0x2a0 [ 65.795278] ? task_work_cancel+0x240/0x240 [ 65.799591] ? copy_fd_bitmaps+0x210/0x210 [ 65.803822] ? do_syscall_64+0x9a/0x820 [ 65.807784] exit_to_usermode_loop+0x318/0x380 [ 65.812370] ? __bpf_trace_sys_exit+0x30/0x30 [ 65.816855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 65.822445] do_syscall_64+0x6be/0x820 [ 65.826352] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 65.831719] ? syscall_return_slowpath+0x5e0/0x5e0 [ 65.836640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 65.841484] ? trace_hardirqs_on_caller+0x310/0x310 [ 65.846493] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 65.851497] ? prepare_exit_to_usermode+0x291/0x3b0 [ 65.856504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 65.861339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.866516] RIP: 0033:0x400ef0 [ 65.869696] Code: 01 f0 ff ff 0f 83 b0 0a 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 57 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 84 0a 00 00 c3 48 83 ec 08 e8 3a 01 00 00 [ 65.888734] RSP: 002b:00007fff1982a618 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 65.896438] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000400ef0 [ 65.903701] RDX: 000000002000019d RSI: 0000000020000100 RDI: 0000000000000003 [ 65.910961] RBP: 0000000000000000 R08: 0000000001006880 R09: 00000000004002e0 [ 65.918221] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401e00 [ 65.925927] R13: 0000000000401e90 R14: 0000000000000000 R15: 0000000000000000 [ 65.934495] Kernel Offset: disabled [ 65.938191] Rebooting in 86400 seconds..