[ 36.174357][ T27] audit: type=1800 audit(1555759142.436:27): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.219079][ T27] audit: type=1800 audit(1555759142.436:28): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.893346][ T27] audit: type=1800 audit(1555759143.196:29): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.913739][ T27] audit: type=1800 audit(1555759143.196:30): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 57.155902][ T7767] WARNING: CPU: 1 PID: 7767 at drivers/media/common/videobuf2/videobuf2-core.c:1864 __vb2_queue_cancel+0x8bb/0xc80 [ 57.168256][ T7767] Kernel panic - not syncing: panic_on_warn set ... [ 57.174836][ T7767] CPU: 1 PID: 7767 Comm: syz-executor018 Not tainted 5.1.0-rc5+ #77 [ 57.182794][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.192836][ T7767] Call Trace: [ 57.196117][ T7767] dump_stack+0x172/0x1f0 [ 57.200447][ T7767] ? __vb2_queue_cancel+0x830/0xc80 [ 57.205643][ T7767] panic+0x2cb/0x65c [ 57.209534][ T7767] ? __warn_printk+0xf3/0xf3 [ 57.214115][ T7767] ? __vb2_queue_cancel+0x8bb/0xc80 [ 57.219303][ T7767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.225590][ T7767] ? __warn.cold+0x5/0x45 [ 57.229921][ T7767] ? __warn+0xe8/0x1d0 [ 57.233997][ T7767] ? __vb2_queue_cancel+0x8bb/0xc80 [ 57.239192][ T7767] __warn.cold+0x20/0x45 [ 57.243420][ T7767] ? __vb2_queue_cancel+0x8bb/0xc80 [ 57.248655][ T7767] report_bug+0x263/0x2b0 [ 57.252992][ T7767] do_error_trap+0x11b/0x200 [ 57.257636][ T7767] do_invalid_op+0x37/0x50 [ 57.262055][ T7767] ? __vb2_queue_cancel+0x8bb/0xc80 [ 57.267858][ T7767] invalid_op+0x14/0x20 [ 57.272230][ T7767] RIP: 0010:__vb2_queue_cancel+0x8bb/0xc80 [ 57.281443][ T7767] Code: 16 fb ff ff 48 89 df e8 63 06 f4 fc e9 09 fb ff ff e8 39 f1 bb fc 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 25 f1 bb fc <0f> 0b 48 8b 45 d0 48 05 28 02 00 00 48 89 c2 48 89 45 88 48 b8 00 [ 57.301278][ T7767] RSP: 0018:ffff888093507ac8 EFLAGS: 00010293 [ 57.307350][ T7767] RAX: ffff8880a8d1a6c0 RBX: 0000000000000002 RCX: ffffffff84b493f1 [ 57.315320][ T7767] RDX: 0000000000000000 RSI: ffffffff84b49b8b RDI: 0000000000000005 [ 57.323352][ T7767] RBP: ffff888093507b40 R08: ffff8880a8d1a6c0 R09: ffffed10430b4cc6 [ 57.331328][ T7767] R10: ffffed10430b4cc5 R11: ffff8882185a662f R12: ffff8882185a662c [ 57.339335][ T7767] R13: ffff8882185a66c0 R14: ffff8882185a63e8 R15: ffff8882185a13e8 [ 57.347325][ T7767] ? __vb2_queue_cancel+0x121/0xc80 [ 57.352508][ T7767] ? __vb2_queue_cancel+0x8bb/0xc80 [ 57.357699][ T7767] ? __vb2_queue_cancel+0x8bb/0xc80 [ 57.363002][ T7767] ? refcount_dec_and_test_checked+0x1b/0x20 [ 57.368978][ T7767] vb2_core_streamoff+0x60/0x140 [ 57.374089][ T7767] __vb2_cleanup_fileio+0x78/0x170 [ 57.379205][ T7767] vb2_core_queue_release+0x20/0x80 [ 57.384430][ T7767] _vb2_fop_release+0x1cf/0x2a0 [ 57.389281][ T7767] vb2_fop_release+0x75/0xc0 [ 57.393879][ T7767] vivid_fop_release+0x18e/0x430 [ 57.398932][ T7767] ? vivid_remove+0x470/0x470 [ 57.403613][ T7767] v4l2_release+0x224/0x3a0 [ 57.408114][ T7767] ? dev_debug_store+0x110/0x110 [ 57.413047][ T7767] __fput+0x2e5/0x8d0 [ 57.417045][ T7767] ____fput+0x16/0x20 [ 57.421016][ T7767] task_work_run+0x14a/0x1c0 [ 57.425598][ T7767] do_exit+0x90a/0x2fa0 [ 57.429751][ T7767] ? __do_page_fault+0x623/0xda0 [ 57.434685][ T7767] ? mm_update_next_owner+0x640/0x640 [ 57.440170][ T7767] ? kasan_check_write+0x14/0x20 [ 57.445140][ T7767] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 57.450976][ T7767] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 57.456436][ T7767] do_group_exit+0x135/0x370 [ 57.461029][ T7767] __x64_sys_exit_group+0x44/0x50 [ 57.466040][ T7767] do_syscall_64+0x103/0x610 [ 57.470619][ T7767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.476491][ T7767] RIP: 0033:0x443b78 [ 57.480373][ T7767] Code: 00 00 be 3c 00 00 00 eb 19 66 0f 1f 84 00 00 00 00 00 48 89 d7 89 f0 0f 05 48 3d 00 f0 ff ff 77 21 f4 48 89 d7 44 89 c0 0f 05 <48> 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 0f 1f 84 00 00 00 [ 57.500089][ T7767] RSP: 002b:00007ffd1d52bcc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 57.508491][ T7767] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000443b78 [ 57.516538][ T7767] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 57.524502][ T7767] RBP: 00000000004c34f0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 57.532501][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.540465][ T7767] R13: 00000000006d5180 R14: 0000000000000000 R15: 0000000000000000 [ 57.549373][ T7767] Kernel Offset: disabled [ 57.553989][ T7767] Rebooting in 86400 seconds..