[ 35.751107] audit: type=1800 audit(1552004672.873:27): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 35.773256] audit: type=1800 audit(1552004672.873:28): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.684497] audit: type=1800 audit(1552004673.863:29): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.704627] audit: type=1800 audit(1552004673.863:30): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 48.015743] WARNING: CPU: 0 PID: 7692 at kernel/workqueue.c:3020 __flush_work+0x74c/0x8a0 [ 48.024205] Kernel panic - not syncing: panic_on_warn set ... [ 48.030101] CPU: 0 PID: 7692 Comm: syz-executor231 Not tainted 5.0.0+ #11 [ 48.037027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.046399] Call Trace: [ 48.048989] dump_stack+0x172/0x1f0 [ 48.052613] ? __flush_work+0x6d0/0x8a0 [ 48.056576] panic+0x2cb/0x65c [ 48.059754] ? __warn_printk+0xf3/0xf3 [ 48.063633] ? __flush_work+0x74c/0x8a0 [ 48.067593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.073124] ? __warn.cold+0x5/0x45 [ 48.076738] ? __warn+0xe8/0x1d0 [ 48.080102] ? __flush_work+0x74c/0x8a0 [ 48.084075] __warn.cold+0x20/0x45 [ 48.087604] ? __flush_work+0x74c/0x8a0 [ 48.091591] report_bug+0x263/0x2b0 [ 48.095217] do_error_trap+0x11b/0x200 [ 48.099091] do_invalid_op+0x37/0x50 [ 48.102792] ? __flush_work+0x74c/0x8a0 [ 48.106758] invalid_op+0x14/0x20 [ 48.110212] RIP: 0010:__flush_work+0x74c/0x8a0 [ 48.114783] Code: 74 58 e8 77 12 26 00 fb 66 0f 1f 44 00 00 45 31 e4 e9 86 fd ff ff e8 63 12 26 00 0f 0b 45 31 e4 e9 77 fd ff ff e8 54 12 26 00 <0f> 0b 45 31 e4 e9 68 fd ff ff e8 45 12 26 00 4c 89 ff 45 31 e4 e8 [ 48.133681] RSP: 0018:ffff888092817608 EFLAGS: 00010293 [ 48.139034] RAX: ffff88809337e340 RBX: ffff88821915ab80 RCX: ffffffff814a14cb [ 48.146296] RDX: 0000000000000000 RSI: ffffffff814a1b7c RDI: 0000000000000001 [ 48.153557] RBP: ffff888092817778 R08: ffff88809337e340 R09: ffffed1012502edd [ 48.160818] R10: ffffed1012502edc R11: 0000000000000003 R12: dffffc0000000000 [ 48.168079] R13: ffff888092817750 R14: 0000000000000000 R15: 0000000000000001 [ 48.175357] ? __flush_work+0x9b/0x8a0 [ 48.179229] ? __flush_work+0x74c/0x8a0 [ 48.183196] ? __flush_work+0x74c/0x8a0 [ 48.187161] ? insert_work+0x3a0/0x3a0 [ 48.191038] ? mark_held_locks+0xa4/0xf0 [ 48.195087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.200612] ? refcount_sub_and_test_checked+0x154/0x200 [ 48.206048] ? refcount_dec_not_one+0x1f0/0x1f0 [ 48.210714] ? __drm_atomic_helper_crtc_destroy_state+0xf3/0x340 [ 48.216854] flush_work+0x18/0x20 [ 48.220298] vkms_atomic_crtc_destroy_state+0x2d/0x40 [ 48.225479] drm_atomic_state_default_clear+0x37c/0xd60 [ 48.230847] drm_atomic_state_clear+0x9d/0xc0 [ 48.235342] __drm_atomic_state_free+0x3c/0xf0 [ 48.239911] drm_atomic_helper_set_config+0xe5/0x160 [ 48.245008] drm_mode_setcrtc+0x613/0x1490 [ 48.249236] ? drm_mode_getcrtc+0x870/0x870 [ 48.253544] ? drm_dev_exit+0x22/0x60 [ 48.257331] ? find_held_lock+0x35/0x130 [ 48.261393] ? drm_dev_exit+0x22/0x60 [ 48.265186] ? drm_lease_owner+0x45/0x60 [ 48.269242] ? drm_is_current_master+0x5c/0x140 [ 48.273900] drm_ioctl_kernel+0x23b/0x2e0 [ 48.278034] ? drm_mode_getcrtc+0x870/0x870 [ 48.282342] ? drm_setversion+0x8c0/0x8c0 [ 48.286479] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 48.292004] ? _copy_from_user+0xdd/0x150 [ 48.296138] drm_ioctl+0x545/0xa50 [ 48.299662] ? drm_mode_getcrtc+0x870/0x870 [ 48.303974] ? drm_version+0x3d0/0x3d0 [ 48.307851] ? debug_check_no_obj_freed+0x200/0x464 [ 48.312860] ? trace_hardirqs_off+0x62/0x220 [ 48.317253] ? drm_version+0x3d0/0x3d0 [ 48.321128] do_vfs_ioctl+0xd6e/0x1390 [ 48.325000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.330525] ? ioctl_preallocate+0x210/0x210 [ 48.334914] ? putname+0xef/0x130 [ 48.338346] ? putname+0xef/0x130 [ 48.341789] ? rcu_read_lock_sched_held+0x110/0x130 [ 48.346791] ? kmem_cache_free+0x225/0x260 [ 48.351013] ? putname+0xf4/0x130 [ 48.354451] ? do_sys_open+0x31d/0x5d0 [ 48.358370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.363900] ? security_file_ioctl+0x93/0xc0 [ 48.368297] ksys_ioctl+0xab/0xd0 [ 48.371737] __x64_sys_ioctl+0x73/0xb0 [ 48.375611] do_syscall_64+0x103/0x610 [ 48.379487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.384663] RIP: 0033:0x443de9 [ 48.387842] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.408737] RSP: 002b:00007ffc1277bed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.416440] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443de9 [ 48.423697] RDX: 0000000020000180 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 48.430971] RBP: 00000000006ce018 R08: 0000000000000000 R09: 00000000004002e0 [ 48.438232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401af0 [ 48.447079] R13: 0000000000401b80 R14: 0000000000000000 R15: 0000000000000000 [ 48.455297] Kernel Offset: disabled [ 48.458988] Rebooting in 86400 seconds..