[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [ 27.302664] kauditd_printk_skb: 8 callbacks suppressed [ 27.302678] audit: type=1800 audit(1541221451.670:29): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 27.329935] audit: type=1800 audit(1541221451.670:30): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.488323] sshd (5674) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 45.733387] WARNING: CPU: 1 PID: 5699 at drivers/media/common/videobuf2/videobuf2-core.c:1831 __vb2_queue_cancel+0x910/0xd20 [ 45.744849] Kernel panic - not syncing: panic_on_warn set ... [ 45.751154] CPU: 1 PID: 5699 Comm: syz-executor969 Not tainted 4.19.0+ #316 [ 45.758248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.767584] Call Trace: [ 45.770162] dump_stack+0x244/0x39d [ 45.773784] ? dump_stack_print_info.cold.1+0x20/0x20 [ 45.778971] panic+0x2ad/0x55c [ 45.782274] ? add_taint.cold.5+0x16/0x16 [ 45.786422] ? __warn.cold.8+0x5/0x45 [ 45.790218] ? __warn+0xe8/0x1d0 [ 45.793580] ? __vb2_queue_cancel+0x910/0xd20 [ 45.798064] __warn.cold.8+0x20/0x45 [ 45.801766] ? rcu_softirq_qs+0x20/0x20 [ 45.805734] ? __vb2_queue_cancel+0x910/0xd20 [ 45.810222] report_bug+0x254/0x2d0 [ 45.813838] do_error_trap+0x11b/0x200 [ 45.817715] do_invalid_op+0x36/0x40 [ 45.821417] ? __vb2_queue_cancel+0x910/0xd20 [ 45.825908] invalid_op+0x14/0x20 [ 45.829419] RIP: 0010:__vb2_queue_cancel+0x910/0xd20 [ 45.834526] Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 d8 03 00 00 48 81 c4 b0 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 bb 32 fc <0f> 0b 48 8b 85 70 fe ff ff 48 05 28 02 00 00 48 89 85 38 fe ff ff [ 45.853429] RSP: 0018:ffff8801bfd47860 EFLAGS: 00010293 [ 45.858784] RAX: ffff8801d59d80c0 RBX: ffff8801bfd47a10 RCX: ffffffff854cb658 [ 45.866045] RDX: 0000000000000000 RSI: ffffffff854cbd50 RDI: 0000000000000005 [ 45.873301] RBP: ffff8801bfd47a38 R08: ffff8801d59d80c0 R09: ffffed00396c6cee [ 45.880567] R10: ffffed00396c6cee R11: ffff8801cb636777 R12: ffff8801cb636774 [ 45.887827] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8801cb631418 [ 45.895105] ? __vb2_queue_cancel+0x218/0xd20 [ 45.899638] ? __vb2_queue_cancel+0x910/0xd20 [ 45.904134] ? lock_downgrade+0x900/0x900 [ 45.908270] ? debug_mutex_lock_common+0x130/0x130 [ 45.913236] ? vb2_buffer_done+0xb90/0xb90 [ 45.917471] ? kasan_check_read+0x11/0x20 [ 45.921607] ? do_raw_spin_unlock+0xa7/0x330 [ 45.926003] ? do_raw_spin_trylock+0x270/0x270 [ 45.930580] ? kasan_check_write+0x14/0x20 [ 45.934805] ? wake_up_q+0xb3/0x100 [ 45.938431] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 45.943353] ? kasan_check_read+0x11/0x20 [ 45.947491] ? wait_for_completion+0x8a0/0x8a0 [ 45.952061] ? trace_hardirqs_off_caller+0x310/0x310 [ 45.957150] ? vfs_lock_file+0xe0/0xe0 [ 45.961034] vb2_core_streamoff+0x60/0x140 [ 45.965261] __vb2_cleanup_fileio+0x73/0x160 [ 45.969657] vb2_core_queue_release+0x1e/0x80 [ 45.974140] _vb2_fop_release+0x1d2/0x2b0 [ 45.978283] vb2_fop_release+0x77/0xc0 [ 45.982165] vivid_fop_release+0x18e/0x440 [ 45.986390] ? vivid_remove+0x460/0x460 [ 45.990355] v4l2_release+0x224/0x3a0 [ 45.994142] ? dev_debug_store+0x140/0x140 [ 45.998371] __fput+0x385/0xa30 [ 46.001642] ? get_max_files+0x20/0x20 [ 46.005524] ? trace_hardirqs_on+0xbd/0x310 [ 46.009839] ? kasan_check_read+0x11/0x20 [ 46.013986] ? task_work_run+0x1af/0x2a0 [ 46.018042] ? trace_hardirqs_off_caller+0x310/0x310 [ 46.023138] ? filp_close+0x1cd/0x250 [ 46.026931] ____fput+0x15/0x20 [ 46.030201] task_work_run+0x1e8/0x2a0 [ 46.034076] ? task_work_cancel+0x240/0x240 [ 46.038394] ? copy_fd_bitmaps+0x210/0x210 [ 46.042622] ? do_syscall_64+0x9a/0x820 [ 46.046586] exit_to_usermode_loop+0x318/0x380 [ 46.051162] ? __bpf_trace_sys_exit+0x30/0x30 [ 46.055654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.061258] do_syscall_64+0x6be/0x820 [ 46.065143] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 46.070502] ? syscall_return_slowpath+0x5e0/0x5e0 [ 46.075421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.080637] ? trace_hardirqs_on_caller+0x310/0x310 [ 46.085646] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 46.090659] ? prepare_exit_to_usermode+0x291/0x3b0 [ 46.095714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.100599] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.105785] RIP: 0033:0x400ef0 [ 46.109016] Code: 01 f0 ff ff 0f 83 b0 0a 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 57 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 84 0a 00 00 c3 48 83 ec 08 e8 3a 01 00 00 [ 46.127954] RSP: 002b:00007fff1e957288 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 46.135656] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000400ef0 [ 46.142909] RDX: 000000002000019d RSI: 0000000020000100 RDI: 0000000000000003 [ 46.150233] RBP: 0000000000000000 R08: 0000000002328880 R09: 00000000004002e0 [ 46.157496] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000401e00 [ 46.164753] R13: 0000000000401e90 R14: 0000000000000000 R15: 0000000000000000 [ 46.173064] Kernel Offset: disabled [ 46.176733] Rebooting in 86400 seconds..