[info] Using makefile-style concurrent boot in runlevel 2. [ 25.704807] audit: type=1800 audit(1541266172.588:21): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 44.066214] sshd (5680) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.0.83' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 50.523983] WARNING: CPU: 0 PID: 5703 at drivers/media/common/videobuf2/videobuf2-core.c:1831 __vb2_queue_cancel+0x910/0xd20 [ 50.535468] Kernel panic - not syncing: panic_on_warn set ... [ 50.541357] CPU: 0 PID: 5703 Comm: syz-executor126 Not tainted 4.19.0+ #317 [ 50.548457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.557798] Call Trace: [ 50.560391] dump_stack+0x244/0x39d [ 50.564022] ? dump_stack_print_info.cold.1+0x20/0x20 [ 50.569211] panic+0x2ad/0x55c [ 50.572410] ? add_taint.cold.5+0x16/0x16 [ 50.576587] ? __warn.cold.8+0x5/0x45 [ 50.580389] ? __warn+0xe8/0x1d0 [ 50.583755] ? __vb2_queue_cancel+0x910/0xd20 [ 50.588263] __warn.cold.8+0x20/0x45 [ 50.591961] ? rcu_softirq_qs+0x20/0x20 [ 50.595923] ? __vb2_queue_cancel+0x910/0xd20 [ 50.600407] report_bug+0x254/0x2d0 [ 50.604035] do_error_trap+0x11b/0x200 [ 50.607911] do_invalid_op+0x36/0x40 [ 50.611625] ? __vb2_queue_cancel+0x910/0xd20 [ 50.616135] invalid_op+0x14/0x20 [ 50.619598] RIP: 0010:__vb2_queue_cancel+0x910/0xd20 [ 50.624688] Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 d8 03 00 00 48 81 c4 b0 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 c9 32 fc <0f> 0b 48 8b 85 70 fe ff ff 48 05 28 02 00 00 48 89 85 38 fe ff ff [ 50.643582] RSP: 0018:ffff8801d48af860 EFLAGS: 00010293 [ 50.648931] RAX: ffff8801d4af6200 RBX: ffff8801d48afa10 RCX: ffffffff854ca708 [ 50.656189] RDX: 0000000000000000 RSI: ffffffff854cae00 RDI: 0000000000000005 [ 50.663456] RBP: ffff8801d48afa38 R08: ffff8801d4af6200 R09: ffffed00396a6cee [ 50.670732] R10: ffffed00396a6cee R11: ffff8801cb536777 R12: ffff8801cb536774 [ 50.677999] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8801cb531418 [ 50.685282] ? __vb2_queue_cancel+0x218/0xd20 [ 50.689769] ? __vb2_queue_cancel+0x910/0xd20 [ 50.694257] ? lock_downgrade+0x900/0x900 [ 50.698404] ? debug_mutex_lock_common+0x130/0x130 [ 50.703331] ? vb2_buffer_done+0xb90/0xb90 [ 50.707554] ? kasan_check_read+0x11/0x20 [ 50.711698] ? do_raw_spin_unlock+0xa7/0x330 [ 50.716106] ? do_raw_spin_trylock+0x270/0x270 [ 50.720698] ? kasan_check_write+0x14/0x20 [ 50.724921] ? wake_up_q+0xb3/0x100 [ 50.728538] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 50.733472] ? kasan_check_read+0x11/0x20 [ 50.737608] ? wait_for_completion+0x8a0/0x8a0 [ 50.742180] ? trace_hardirqs_off_caller+0x310/0x310 [ 50.747286] ? vfs_lock_file+0xe0/0xe0 [ 50.751164] vb2_core_streamoff+0x60/0x140 [ 50.755406] __vb2_cleanup_fileio+0x73/0x160 [ 50.759811] vb2_core_queue_release+0x1e/0x80 [ 50.764296] _vb2_fop_release+0x1d2/0x2b0 [ 50.768440] vb2_fop_release+0x77/0xc0 [ 50.772320] vivid_fop_release+0x18e/0x440 [ 50.776544] ? vivid_remove+0x460/0x460 [ 50.780506] v4l2_release+0x224/0x3a0 [ 50.784294] ? dev_debug_store+0x140/0x140 [ 50.788538] __fput+0x385/0xa30 [ 50.791842] ? get_max_files+0x20/0x20 [ 50.795744] ? trace_hardirqs_on+0xbd/0x310 [ 50.800054] ? kasan_check_read+0x11/0x20 [ 50.804237] ? task_work_run+0x1af/0x2a0 [ 50.808301] ? trace_hardirqs_off_caller+0x310/0x310 [ 50.813390] ? filp_close+0x1cd/0x250 [ 50.817186] ____fput+0x15/0x20 [ 50.820455] task_work_run+0x1e8/0x2a0 [ 50.824335] ? task_work_cancel+0x240/0x240 [ 50.828646] ? copy_fd_bitmaps+0x210/0x210 [ 50.832884] ? do_syscall_64+0x9a/0x820 [ 50.836862] exit_to_usermode_loop+0x318/0x380 [ 50.841460] ? __bpf_trace_sys_exit+0x30/0x30 [ 50.845979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.851532] do_syscall_64+0x6be/0x820 [ 50.855438] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 50.860790] ? syscall_return_slowpath+0x5e0/0x5e0 [ 50.865710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.870550] ? trace_hardirqs_on_caller+0x310/0x310 [ 50.875555] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 50.880561] ? prepare_exit_to_usermode+0x291/0x3b0 [ 50.885566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.890404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.895591] RIP: 0033:0x400ef0 [ 50.898777] Code: 01 f0 ff ff 0f 83 b0 0a 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 57 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 84 0a 00 00 c3 48 83 ec 08 e8 3a 01 00 00 [ 50.917663] RSP: 002b:00007ffe8f352c08 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.925356] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000400ef0 [ 50.932639] RDX: 000000002000019d RSI: 0000000020000100 RDI: 0000000000000003 [ 50.939895] RBP: 0000000000000000 R08: 0000000001d77880 R09: 00000000004002e0 [ 50.947153] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401e00 [ 50.954430] R13: 0000000000401e90 R14: 0000000000000000 R15: 0000000000000000 [ 50.962689] Kernel Offset: disabled [ 50.966374] Rebooting in 86400 seconds..