[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 30.140626] kauditd_printk_skb: 9 callbacks suppressed [ 30.140638] audit: type=1800 audit(1541751518.195:33): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 30.170874] audit: type=1800 audit(1541751518.195:34): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.172950] audit: type=1400 audit(1541751528.235:35): avc: denied { map } for pid=5818 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.208743] sshd (5816) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. [ 46.811561] audit: type=1400 audit(1541751534.865:36): avc: denied { map } for pid=5831 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/11/09 08:18:55 parsed 1 programs [ 47.360816] audit: type=1400 audit(1541751535.415:37): avc: denied { map } for pid=5831 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=70 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/11/09 08:18:57 executed programs: 0 [ 49.158872] IPVS: ftp: loaded support on port[0] = 21 [ 49.175684] IPVS: ftp: loaded support on port[0] = 21 [ 49.179578] IPVS: ftp: loaded support on port[0] = 21 [ 49.212484] IPVS: ftp: loaded support on port[0] = 21 [ 49.214741] IPVS: ftp: loaded support on port[0] = 21 [ 49.223774] IPVS: ftp: loaded support on port[0] = 21 [ 50.238274] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.256586] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.268266] device bridge_slave_0 entered promiscuous mode [ 50.365702] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.373402] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.380907] device bridge_slave_1 entered promiscuous mode [ 50.390165] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.402198] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.409665] device bridge_slave_0 entered promiscuous mode [ 50.418190] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.430912] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.438530] device bridge_slave_0 entered promiscuous mode [ 50.455819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.469842] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.486840] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.494616] device bridge_slave_0 entered promiscuous mode [ 50.504403] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.511610] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.519847] device bridge_slave_0 entered promiscuous mode [ 50.527919] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.534880] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.542068] device bridge_slave_1 entered promiscuous mode [ 50.550237] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.557736] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.565155] device bridge_slave_0 entered promiscuous mode [ 50.573246] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.579944] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.587352] device bridge_slave_1 entered promiscuous mode [ 50.593798] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.600155] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.608517] device bridge_slave_1 entered promiscuous mode [ 50.616605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.624833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.636772] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.646257] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.654450] device bridge_slave_1 entered promiscuous mode [ 50.662098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.671224] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.678477] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.686138] device bridge_slave_1 entered promiscuous mode [ 50.694410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.704683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.712923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.731293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.748375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.765264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.799691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.841447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.905927] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.942788] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.968054] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.003898] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.028431] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.043411] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.076520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.095380] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.120801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.130512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.139791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.162147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.170438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.188184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.197539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.208998] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.225294] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.236857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.256982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.297134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.491080] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.513522] team0: Port device team_slave_0 added [ 51.522073] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.529566] team0: Port device team_slave_0 added [ 51.541302] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.551128] team0: Port device team_slave_0 added [ 51.598397] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.623339] team0: Port device team_slave_1 added [ 51.632657] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.640267] team0: Port device team_slave_1 added [ 51.649519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.659083] team0: Port device team_slave_0 added [ 51.669211] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.677705] team0: Port device team_slave_0 added [ 51.684507] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.692616] team0: Port device team_slave_1 added [ 51.700214] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.709355] team0: Port device team_slave_0 added [ 51.723789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.745900] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.755433] team0: Port device team_slave_1 added [ 51.767787] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.777709] team0: Port device team_slave_1 added [ 51.786378] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.802647] team0: Port device team_slave_1 added [ 51.814214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.823759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.838518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.862337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.876094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.883404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.891363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.902342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.911604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.922005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.931280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.944097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.962317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.969935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.984489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.992617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.000262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.008064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.015820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.026700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.037919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.047926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.056814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.066738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.075134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.089267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.096965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.108190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.122336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.134345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.142578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.150617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.159161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.167502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.176305] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.184448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.196588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.206496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.217445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.231869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.239838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.254115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.265868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.274374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.282439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.290219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.298188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.305873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.313629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.326058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.335495] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.345739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.369429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.378448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.402669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.410649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.422837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.430761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.448507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.473198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.481244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.082053] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.088651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.095694] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.102238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.117588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.126284] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.132728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.139402] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.145843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.154913] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.163402] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.169781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.176506] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.182920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.192409] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.258915] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.265360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.272118] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.278499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.292967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.306526] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.312961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.319626] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.326092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.336146] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.421370] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.427806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.434546] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.440930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.454890] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.872673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.880213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.890551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.898207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.906831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.914879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.960191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.102500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.125870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.198692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.285967] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.307804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.330526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.348764] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.394786] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.533653] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.545552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.553650] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.559897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.572436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.610434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.664534] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.670719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.679694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.762422] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.770811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.784962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.822417] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.828590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.835911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.849845] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.865387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.871629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.882931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.950951] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.960388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.980535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.002402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.105911] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.123213] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.137550] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.274355] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.363540] audit: type=1400 audit(1541751546.425:38): avc: denied { associate } for pid=5856 comm="syz-executor5" name="syz5" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2018/11/09 08:19:06 executed programs: 6 [ 62.393877] vivid-000: kernel_thread() failed [ 62.407371] ================================================================== [ 62.414854] BUG: KASAN: null-ptr-deref in kthread_stop+0x10d/0x900 [ 62.414869] Write of size 4 at addr 000000000000001c by task syz-executor3/8101 [ 62.414873] [ 62.414889] CPU: 1 PID: 8101 Comm: syz-executor3 Not tainted 4.20.0-rc1+ #106 [ 62.414898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.414904] Call Trace: [ 62.414922] dump_stack+0x244/0x39d [ 62.414943] ? dump_stack_print_info.cold.1+0x20/0x20 [ 62.414962] ? vprintk_func+0x85/0x181 [ 62.428814] kasan_report.cold.8+0x6d/0x309 [ 62.428831] ? kthread_stop+0x10d/0x900 [ 62.428853] check_memory_region+0x13e/0x1b0 [ 62.428875] kasan_check_write+0x14/0x20 [ 62.479121] kthread_stop+0x10d/0x900 [ 62.482942] ? kthread_unpark+0x160/0x160 [ 62.487114] ? __lock_is_held+0xb5/0x140 [ 62.491190] vivid_stop_generating_vid_cap+0x2bb/0x9ae [ 62.496472] ? vivid_start_generating_vid_cap+0x4c0/0x4c0 [ 62.502020] ? _vb2_fop_release+0x3f/0x2b0 [ 62.506305] ? mutex_trylock+0x2b0/0x2b0 [ 62.510391] ? vivid_fop_release+0x66/0x440 [ 62.514727] ? __mutex_lock+0x85e/0x16f0 [ 62.518819] vid_cap_stop_streaming+0x8d/0xe0 [ 62.518837] ? vid_cap_buf_queue+0x310/0x310 [ 62.518853] __vb2_queue_cancel+0x171/0xd20 [ 62.518874] ? lock_downgrade+0x900/0x900 [ 62.518898] ? vb2_buffer_done+0xb90/0xb90 [ 62.532588] ? find_held_lock+0x36/0x1c0 [ 62.545012] ? mark_held_locks+0xc7/0x130 [ 62.549194] ? kasan_check_write+0x14/0x20 [ 62.553445] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 62.558391] ? kasan_check_read+0x11/0x20 [ 62.562560] ? wait_for_completion+0x8a0/0x8a0 [ 62.567158] ? trace_hardirqs_off_caller+0x310/0x310 [ 62.572273] ? ep_modify+0xc10/0xc10 [ 62.576004] vb2_core_streamoff+0x60/0x140 [ 62.580266] __vb2_cleanup_fileio+0x73/0x160 [ 62.584679] vb2_core_queue_release+0x1e/0x80 [ 62.589172] _vb2_fop_release+0x1d2/0x2b0 [ 62.593324] vb2_fop_release+0x77/0xc0 [ 62.597228] vivid_fop_release+0x18e/0x440 [ 62.601480] ? vivid_remove+0x460/0x460 [ 62.605464] v4l2_release+0x224/0x3a0 [ 62.609285] ? dev_debug_store+0x140/0x140 [ 62.613534] __fput+0x385/0xa30 [ 62.616842] ? get_max_files+0x20/0x20 [ 62.620739] ? trace_hardirqs_on+0xbd/0x310 [ 62.625071] ? kasan_check_read+0x11/0x20 [ 62.629226] ? task_work_run+0x1af/0x2a0 [ 62.633290] ? trace_hardirqs_off_caller+0x310/0x310 [ 62.638408] ? fput+0x130/0x1a0 [ 62.641704] ____fput+0x15/0x20 [ 62.644996] task_work_run+0x1e8/0x2a0 [ 62.648893] ? task_work_cancel+0x240/0x240 [ 62.653215] ? do_syscall_64+0x9a/0x820 [ 62.657217] exit_to_usermode_loop+0x318/0x380 [ 62.661816] ? __bpf_trace_sys_exit+0x30/0x30 [ 62.666337] do_syscall_64+0x6be/0x820 [ 62.670228] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 62.675593] ? syscall_return_slowpath+0x5e0/0x5e0 [ 62.680520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 62.685386] ? trace_hardirqs_on_caller+0x310/0x310 [ 62.690413] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 62.695442] ? prepare_exit_to_usermode+0x291/0x3b0 [ 62.700492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 62.705346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 62.710532] RIP: 0033:0x457569 [ 62.713744] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.732652] RSP: 002b:00007f89eee8dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 62.740361] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000457569 [ 62.747625] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 62.754900] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 62.762170] R10: 0000000020000280 R11: 0000000000000246 R12: 00007f89eee8e6d4 [ 62.769428] R13: 00000000004bdb6c R14: 00000000004cc9b0 R15: 00000000ffffffff [ 62.776702] ================================================================== [ 62.784051] Disabling lock debugging due to kernel taint [ 62.792493] Kernel panic - not syncing: panic_on_warn set ... [ 62.798391] CPU: 0 PID: 8101 Comm: syz-executor3 Tainted: G B 4.20.0-rc1+ #106 [ 62.807039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.816399] Call Trace: [ 62.818976] dump_stack+0x244/0x39d [ 62.822603] ? dump_stack_print_info.cold.1+0x20/0x20 [ 62.827785] panic+0x2ad/0x55c [ 62.830964] ? add_taint.cold.5+0x16/0x16 [ 62.835097] ? preempt_schedule+0x4d/0x60 [ 62.839232] ? ___preempt_schedule+0x16/0x18 [ 62.843629] ? trace_hardirqs_on+0xb4/0x310 [ 62.847940] kasan_end_report+0x47/0x4f [ 62.851900] kasan_report.cold.8+0x76/0x309 [ 62.856205] ? kthread_stop+0x10d/0x900 [ 62.860177] check_memory_region+0x13e/0x1b0 [ 62.864577] kasan_check_write+0x14/0x20 [ 62.868638] kthread_stop+0x10d/0x900 [ 62.872426] ? kthread_unpark+0x160/0x160 [ 62.876570] ? __lock_is_held+0xb5/0x140 [ 62.880636] vivid_stop_generating_vid_cap+0x2bb/0x9ae [ 62.885900] ? vivid_start_generating_vid_cap+0x4c0/0x4c0 [ 62.891422] ? _vb2_fop_release+0x3f/0x2b0 [ 62.895645] ? mutex_trylock+0x2b0/0x2b0 [ 62.899689] ? vivid_fop_release+0x66/0x440 [ 62.904001] ? __mutex_lock+0x85e/0x16f0 [ 62.908068] vid_cap_stop_streaming+0x8d/0xe0 [ 62.912554] ? vid_cap_buf_queue+0x310/0x310 [ 62.916947] __vb2_queue_cancel+0x171/0xd20 [ 62.921252] ? lock_downgrade+0x900/0x900 [ 62.925401] ? vb2_buffer_done+0xb90/0xb90 [ 62.929618] ? find_held_lock+0x36/0x1c0 [ 62.933668] ? mark_held_locks+0xc7/0x130 [ 62.937806] ? kasan_check_write+0x14/0x20 [ 62.942035] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 62.946955] ? kasan_check_read+0x11/0x20 [ 62.951087] ? wait_for_completion+0x8a0/0x8a0 [ 62.955662] ? trace_hardirqs_off_caller+0x310/0x310 [ 62.960750] ? ep_modify+0xc10/0xc10 [ 62.964451] vb2_core_streamoff+0x60/0x140 [ 62.968683] __vb2_cleanup_fileio+0x73/0x160 [ 62.973095] vb2_core_queue_release+0x1e/0x80 [ 62.977582] _vb2_fop_release+0x1d2/0x2b0 [ 62.981718] vb2_fop_release+0x77/0xc0 [ 62.985604] vivid_fop_release+0x18e/0x440 [ 62.989825] ? vivid_remove+0x460/0x460 [ 62.993784] v4l2_release+0x224/0x3a0 [ 62.997576] ? dev_debug_store+0x140/0x140 [ 63.001801] __fput+0x385/0xa30 [ 63.005080] ? get_max_files+0x20/0x20 [ 63.008953] ? trace_hardirqs_on+0xbd/0x310 [ 63.013277] ? kasan_check_read+0x11/0x20 [ 63.017427] ? task_work_run+0x1af/0x2a0 [ 63.021475] ? trace_hardirqs_off_caller+0x310/0x310 [ 63.026562] ? fput+0x130/0x1a0 [ 63.029831] ____fput+0x15/0x20 [ 63.033097] task_work_run+0x1e8/0x2a0 [ 63.036975] ? task_work_cancel+0x240/0x240 [ 63.041288] ? do_syscall_64+0x9a/0x820 [ 63.045247] exit_to_usermode_loop+0x318/0x380 [ 63.049821] ? __bpf_trace_sys_exit+0x30/0x30 [ 63.054303] do_syscall_64+0x6be/0x820 [ 63.058179] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 63.063528] ? syscall_return_slowpath+0x5e0/0x5e0 [ 63.068448] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 63.073277] ? trace_hardirqs_on_caller+0x310/0x310 [ 63.078287] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 63.083308] ? prepare_exit_to_usermode+0x291/0x3b0 [ 63.088312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 63.093145] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.098330] RIP: 0033:0x457569 [ 63.101523] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.120410] RSP: 002b:00007f89eee8dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 63.128099] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000457569 [ 63.135351] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 63.142605] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 63.149859] R10: 0000000020000280 R11: 0000000000000246 R12: 00007f89eee8e6d4 [ 63.157110] R13: 00000000004bdb6c R14: 00000000004cc9b0 R15: 00000000ffffffff [ 63.165248] Kernel Offset: disabled [ 63.168870] Rebooting in 86400 seconds..