[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.478999] kauditd_printk_skb: 7 callbacks suppressed [ 28.479011] audit: type=1800 audit(1541252560.573:29): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.504871] audit: type=1800 audit(1541252560.573:30): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 40.194815] WARNING: CPU: 1 PID: 5725 at drivers/media/common/videobuf2/videobuf2-core.c:1831 __vb2_queue_cancel+0x910/0xd20 [ 40.206309] Kernel panic - not syncing: panic_on_warn set ... [ 40.212267] CPU: 1 PID: 5725 Comm: syz-executor833 Not tainted 4.19.0+ #95 [ 40.219274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.228626] Call Trace: [ 40.231248] dump_stack+0x244/0x39d [ 40.234903] ? dump_stack_print_info.cold.1+0x20/0x20 [ 40.240149] panic+0x2ad/0x55c [ 40.243410] ? add_taint.cold.5+0x16/0x16 [ 40.247573] ? __warn.cold.8+0x5/0x45 [ 40.251385] ? __warn+0xe8/0x1d0 [ 40.254752] ? __vb2_queue_cancel+0x910/0xd20 [ 40.259320] __warn.cold.8+0x20/0x45 [ 40.263087] ? rcu_softirq_qs+0x20/0x20 [ 40.267063] ? __vb2_queue_cancel+0x910/0xd20 [ 40.271559] report_bug+0x254/0x2d0 [ 40.275254] do_error_trap+0x11b/0x200 [ 40.279149] do_invalid_op+0x36/0x40 [ 40.282861] ? __vb2_queue_cancel+0x910/0xd20 [ 40.287358] invalid_op+0x14/0x20 [ 40.290841] RIP: 0010:__vb2_queue_cancel+0x910/0xd20 [ 40.295942] Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 d8 03 00 00 48 81 c4 b0 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 c9 32 fc <0f> 0b 48 8b 85 70 fe ff ff 48 05 28 02 00 00 48 89 85 38 fe ff ff [ 40.314898] RSP: 0018:ffff8801c29af860 EFLAGS: 00010293 [ 40.320331] RAX: ffff8801d2c100c0 RBX: ffff8801c29afa10 RCX: ffffffff854ca708 [ 40.327644] RDX: 0000000000000000 RSI: ffffffff854cae00 RDI: 0000000000000005 [ 40.334969] RBP: ffff8801c29afa38 R08: ffff8801d2c100c0 R09: ffffed003964ecee [ 40.342292] R10: ffffed003964ecee R11: ffff8801cb276777 R12: ffff8801cb276774 [ 40.349647] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8801cb271418 [ 40.356936] ? __vb2_queue_cancel+0x218/0xd20 [ 40.361447] ? __vb2_queue_cancel+0x910/0xd20 [ 40.365964] ? lock_downgrade+0x900/0x900 [ 40.370556] ? debug_mutex_lock_common+0x130/0x130 [ 40.375503] ? vb2_buffer_done+0xb90/0xb90 [ 40.379750] ? kasan_check_read+0x11/0x20 [ 40.383899] ? do_raw_spin_unlock+0xa7/0x330 [ 40.388318] ? do_raw_spin_trylock+0x270/0x270 [ 40.392931] ? kasan_check_write+0x14/0x20 [ 40.397182] ? wake_up_q+0xb3/0x100 [ 40.400834] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 40.405778] ? kasan_check_read+0x11/0x20 [ 40.409981] ? wait_for_completion+0x8a0/0x8a0 [ 40.414564] ? trace_hardirqs_off_caller+0x310/0x310 [ 40.419680] ? vfs_lock_file+0xe0/0xe0 [ 40.423598] vb2_core_streamoff+0x60/0x140 [ 40.427846] __vb2_cleanup_fileio+0x73/0x160 [ 40.432320] vb2_core_queue_release+0x1e/0x80 [ 40.437021] _vb2_fop_release+0x1d2/0x2b0 [ 40.441187] vb2_fop_release+0x77/0xc0 [ 40.446325] vivid_fop_release+0x18e/0x440 [ 40.450621] ? vivid_remove+0x460/0x460 [ 40.454604] v4l2_release+0x224/0x3a0 [ 40.458416] ? dev_debug_store+0x140/0x140 [ 40.462665] __fput+0x385/0xa30 [ 40.465973] ? get_max_files+0x20/0x20 [ 40.469874] ? trace_hardirqs_on+0xbd/0x310 [ 40.474231] ? kasan_check_read+0x11/0x20 [ 40.478393] ? task_work_run+0x1af/0x2a0 [ 40.482466] ? trace_hardirqs_off_caller+0x310/0x310 [ 40.487636] ? filp_close+0x1cd/0x250 [ 40.491440] ____fput+0x15/0x20 [ 40.494726] task_work_run+0x1e8/0x2a0 [ 40.498701] ? task_work_cancel+0x240/0x240 [ 40.503109] ? copy_fd_bitmaps+0x210/0x210 [ 40.507345] ? do_syscall_64+0x9a/0x820 [ 40.511379] exit_to_usermode_loop+0x318/0x380 [ 40.515961] ? __bpf_trace_sys_exit+0x30/0x30 [ 40.520460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.526139] do_syscall_64+0x6be/0x820 [ 40.530035] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 40.535414] ? syscall_return_slowpath+0x5e0/0x5e0 [ 40.540345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.545224] ? trace_hardirqs_on_caller+0x310/0x310 [ 40.550373] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 40.555392] ? prepare_exit_to_usermode+0x291/0x3b0 [ 40.560872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.565728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.570924] RIP: 0033:0x400ef0 [ 40.574120] Code: 01 f0 ff ff 0f 83 b0 0a 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 57 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 84 0a 00 00 c3 48 83 ec 08 e8 3a 01 00 00 [ 40.593027] RSP: 002b:00007ffd69f3c5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 40.600740] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000400ef0 [ 40.608027] RDX: 0000000020000024 RSI: 0000000020000000 RDI: 0000000000000003 [ 40.615367] RBP: 0000000000000000 R08: 00000000023ee880 R09: 00000000004002e0 [ 40.622681] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401e00 [ 40.629960] R13: 0000000000401e90 R14: 0000000000000000 R15: 0000000000000000 [ 40.638497] Kernel Offset: disabled [ 40.642253] Rebooting in 86400 seconds..