[[36minfo[39;49m] Using makefile-style concurrent boot in runlevel 2. [ 25.689960] audit: type=1800 audit(1541552847.370:21): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.458605] sshd (5688) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2018/11/07 01:07:51 parsed 1 programs 2018/11/07 01:07:53 executed programs: 0 [ 51.681184] IPVS: ftp: loaded support on port[0] = 21 [ 51.698202] IPVS: ftp: loaded support on port[0] = 21 [ 51.731908] IPVS: ftp: loaded support on port[0] = 21 [ 51.742821] IPVS: ftp: loaded support on port[0] = 21 [ 51.751034] IPVS: ftp: loaded support on port[0] = 21 [ 51.770097] IPVS: ftp: loaded support on port[0] = 21 [ 53.015453] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.026405] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.034873] device bridge_slave_0 entered promiscuous mode [ 53.106117] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.128081] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.135961] device bridge_slave_1 entered promiscuous mode [ 53.153766] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.160964] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.168921] device bridge_slave_0 entered promiscuous mode [ 53.180574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.188348] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.194711] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.204648] device bridge_slave_0 entered promiscuous mode [ 53.215856] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.223555] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.231249] device bridge_slave_0 entered promiscuous mode [ 53.238739] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.245098] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.253123] device bridge_slave_0 entered promiscuous mode [ 53.262523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.279865] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.286227] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.298866] device bridge_slave_1 entered promiscuous mode [ 53.309746] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.316107] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.326665] device bridge_slave_1 entered promiscuous mode [ 53.335603] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.343195] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.351808] device bridge_slave_1 entered promiscuous mode [ 53.368357] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.375178] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.389597] device bridge_slave_0 entered promiscuous mode [ 53.398101] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.404473] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.413229] device bridge_slave_1 entered promiscuous mode [ 53.423123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.436938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.449875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.477247] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.499194] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.506299] device bridge_slave_1 entered promiscuous mode [ 53.516229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.525311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.534645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.552893] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.578794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.603571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.623719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.652802] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.662975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.710555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.759054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.782100] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.803669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.832666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.840950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.856015] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.880978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.912703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.926262] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.951850] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.967350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.979821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.992000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.004910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.023843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.037110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.053225] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.076618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.098717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.117341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.144593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.169761] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.192957] team0: Port device team_slave_0 added [ 54.218409] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.225758] team0: Port device team_slave_0 added [ 54.256129] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.269414] team0: Port device team_slave_1 added [ 54.339182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.349673] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.357038] team0: Port device team_slave_1 added [ 54.382618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.395383] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.403838] team0: Port device team_slave_0 added [ 54.430430] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.442099] team0: Port device team_slave_0 added [ 54.450093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.464647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.481832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.496658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.513535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.521801] team0: Port device team_slave_1 added [ 54.531330] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.543143] team0: Port device team_slave_1 added [ 54.549359] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.556448] team0: Port device team_slave_0 added [ 54.570779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.586118] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.604699] team0: Port device team_slave_0 added [ 54.619236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.626941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.636033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.660743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.678446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.690655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.706690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.715339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.724030] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.731489] team0: Port device team_slave_1 added [ 54.741779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.754710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.768292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.777281] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.786186] team0: Port device team_slave_1 added [ 54.795413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.807128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.827366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.836275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.844830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.852886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.863309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.873689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.887173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.903834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.917331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.925587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.936575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.947703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.958401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.967714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.976162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.986139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.998424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.006084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.020571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.028775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.036429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.044319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.060774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.070794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.079716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.101109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.116380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.124676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.134845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.154769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.171685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.187331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.202384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.211407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.219732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.227517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.235619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.271185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.289684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.308460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.647188] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.653730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.660786] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.667160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.677550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.727865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.790529] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.796942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.803661] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.810058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.819810] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.910688] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.917091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.923814] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.930219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.941673] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.955187] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.961597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.968391] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.974765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.989727] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.079859] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.086273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.093002] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.099398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.108680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.165902] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.172341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.179063] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.185435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.194374] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.808571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.818953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.829539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.836660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.844464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.537121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.734174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.831536] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.855113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.878431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.926450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.019389] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.036093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.079127] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.085327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.093131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.121460] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.183922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.225031] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.265014] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.277887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.286644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.359261] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.386956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.406777] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.427386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.438424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.461565] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.468745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.477477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.532301] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.551470] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.558399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.565919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.691780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.710896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.719803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.740565] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.797977] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.826707] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.949537] 8021q: adding VLAN 0 to HW filter on device team0 2018/11/07 01:08:02 executed programs: 6 [ 64.292382] vivid-000: kernel_thread() failed [ 64.309510] ================================================================== [ 64.317008] BUG: KASAN: null-ptr-deref in kthread_stop+0x10d/0x900 [ 64.323330] Write of size 4 at addr 000000000000001c by task syz-executor0/7709 [ 64.330760] [ 64.332402] CPU: 0 PID: 7709 Comm: syz-executor0 Not tainted 4.20.0-rc1+ #101 [ 64.339678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.339687] Call Trace: [ 64.339708] dump_stack+0x244/0x39d [ 64.339730] ? dump_stack_print_info.cold.1+0x20/0x20 [ 64.339751] ? vprintk_func+0x85/0x181 [ 64.339772] kasan_report.cold.8+0x6d/0x309 [ 64.339787] ? kthread_stop+0x10d/0x900 [ 64.339811] check_memory_region+0x13e/0x1b0 [ 64.339830] kasan_check_write+0x14/0x20 [ 64.339850] kthread_stop+0x10d/0x900 [ 64.360674] ? kthread_unpark+0x160/0x160 [ 64.360700] ? __lock_is_held+0xb5/0x140 [ 64.360740] vivid_stop_generating_vid_cap+0x2bb/0x9ae [ 64.360769] ? vivid_start_generating_vid_cap+0x4c0/0x4c0 [ 64.404189] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 64.409295] ? _vb2_fop_release+0x3f/0x2b0 [ 64.413517] ? zap_class+0x640/0x640 [ 64.417222] ? mutex_trylock+0x2b0/0x2b0 [ 64.421289] ? migrate_swap_stop+0x8a0/0x8a0 [ 64.425702] ? __mutex_lock+0x85e/0x16f0 [ 64.429779] ? find_held_lock+0x36/0x1c0 [ 64.433862] vid_cap_stop_streaming+0x8d/0xe0 [ 64.438370] ? vid_cap_buf_queue+0x310/0x310 [ 64.442792] __vb2_queue_cancel+0x171/0xd20 [ 64.447116] ? lock_downgrade+0x900/0x900 [ 64.451253] ? debug_mutex_lock_common+0x130/0x130 [ 64.456173] ? vb2_buffer_done+0xb90/0xb90 [ 64.460397] ? kasan_check_read+0x11/0x20 [ 64.464543] ? do_raw_spin_unlock+0xa7/0x330 [ 64.468965] ? do_raw_spin_trylock+0x270/0x270 [ 64.473575] ? kasan_check_write+0x14/0x20 [ 64.477812] ? wake_up_q+0xb3/0x100 [ 64.481430] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 64.486362] ? kasan_check_read+0x11/0x20 [ 64.490511] ? wait_for_completion+0x8a0/0x8a0 [ 64.495082] ? trace_hardirqs_off_caller+0x310/0x310 [ 64.500187] ? vfs_lock_file+0xe0/0xe0 [ 64.504084] vb2_core_streamoff+0x60/0x140 [ 64.508308] __vb2_cleanup_fileio+0x73/0x160 [ 64.512715] vb2_core_queue_release+0x1e/0x80 [ 64.517200] _vb2_fop_release+0x1d2/0x2b0 [ 64.521338] vb2_fop_release+0x77/0xc0 [ 64.525219] vivid_fop_release+0x18e/0x440 [ 64.529454] ? vivid_remove+0x460/0x460 [ 64.533429] v4l2_release+0x224/0x3a0 [ 64.537228] ? dev_debug_store+0x140/0x140 [ 64.541475] __fput+0x385/0xa30 [ 64.544771] ? get_max_files+0x20/0x20 [ 64.548647] ? trace_hardirqs_on+0xbd/0x310 [ 64.552970] ? kasan_check_read+0x11/0x20 [ 64.557126] ? task_work_run+0x1af/0x2a0 [ 64.561176] ? trace_hardirqs_off_caller+0x310/0x310 [ 64.566268] ? filp_close+0x1cd/0x250 [ 64.570066] ____fput+0x15/0x20 [ 64.573343] task_work_run+0x1e8/0x2a0 [ 64.577235] ? task_work_cancel+0x240/0x240 [ 64.581558] ? copy_fd_bitmaps+0x210/0x210 [ 64.585794] ? do_syscall_64+0x9a/0x820 [ 64.589759] exit_to_usermode_loop+0x318/0x380 [ 64.594331] ? __bpf_trace_sys_exit+0x30/0x30 [ 64.598818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 64.604345] do_syscall_64+0x6be/0x820 [ 64.608227] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 64.613581] ? syscall_return_slowpath+0x5e0/0x5e0 [ 64.618498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 64.623330] ? trace_hardirqs_on_caller+0x310/0x310 [ 64.628345] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 64.633362] ? prepare_exit_to_usermode+0x291/0x3b0 [ 64.638385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 64.643236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.648426] RIP: 0033:0x411021 [ 64.651623] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 64.670512] RSP: 002b:00007ffc9a5ea6c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 64.678209] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411021 [ 64.685469] RDX: 0000000000000000 RSI: 0000000000730188 RDI: 0000000000000003 [ 64.692729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.699983] R10: 00007ffc9a5ea5e0 R11: 0000000000000293 R12: 0000000000000000 [ 64.707262] R13: 0000000000000001 R14: 000000000000001b R15: 0000000000000000 [ 64.714546] ================================================================== [ 64.721890] Disabling lock debugging due to kernel taint [ 64.728291] Kernel panic - not syncing: panic_on_warn set ... [ 64.734197] CPU: 1 PID: 7709 Comm: syz-executor0 Tainted: G B 4.20.0-rc1+ #101 [ 64.742842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.752179] Call Trace: [ 64.754756] dump_stack+0x244/0x39d [ 64.758370] ? dump_stack_print_info.cold.1+0x20/0x20 [ 64.763565] panic+0x2ad/0x55c [ 64.766740] ? add_taint.cold.5+0x16/0x16 [ 64.770872] ? preempt_schedule+0x4d/0x60 [ 64.775006] ? ___preempt_schedule+0x16/0x18 [ 64.779401] ? trace_hardirqs_on+0xb4/0x310 [ 64.783710] kasan_end_report+0x47/0x4f [ 64.787665] kasan_report.cold.8+0x76/0x309 [ 64.791970] ? kthread_stop+0x10d/0x900 [ 64.795937] check_memory_region+0x13e/0x1b0 [ 64.800332] kasan_check_write+0x14/0x20 [ 64.804377] kthread_stop+0x10d/0x900 [ 64.808175] ? kthread_unpark+0x160/0x160 [ 64.812314] ? __lock_is_held+0xb5/0x140 [ 64.816381] vivid_stop_generating_vid_cap+0x2bb/0x9ae [ 64.821643] ? vivid_start_generating_vid_cap+0x4c0/0x4c0 [ 64.827167] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 64.832260] ? _vb2_fop_release+0x3f/0x2b0 [ 64.836477] ? zap_class+0x640/0x640 [ 64.840179] ? mutex_trylock+0x2b0/0x2b0 [ 64.844238] ? migrate_swap_stop+0x8a0/0x8a0 [ 64.848627] ? __mutex_lock+0x85e/0x16f0 [ 64.852685] ? find_held_lock+0x36/0x1c0 [ 64.856735] vid_cap_stop_streaming+0x8d/0xe0 [ 64.861257] ? vid_cap_buf_queue+0x310/0x310 [ 64.865650] __vb2_queue_cancel+0x171/0xd20 [ 64.869958] ? lock_downgrade+0x900/0x900 [ 64.874090] ? debug_mutex_lock_common+0x130/0x130 [ 64.879004] ? vb2_buffer_done+0xb90/0xb90 [ 64.883227] ? kasan_check_read+0x11/0x20 [ 64.887359] ? do_raw_spin_unlock+0xa7/0x330 [ 64.891763] ? do_raw_spin_trylock+0x270/0x270 [ 64.896331] ? kasan_check_write+0x14/0x20 [ 64.900550] ? wake_up_q+0xb3/0x100 [ 64.904164] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 64.909076] ? kasan_check_read+0x11/0x20 [ 64.913206] ? wait_for_completion+0x8a0/0x8a0 [ 64.917773] ? trace_hardirqs_off_caller+0x310/0x310 [ 64.922862] ? vfs_lock_file+0xe0/0xe0 [ 64.926735] vb2_core_streamoff+0x60/0x140 [ 64.930955] __vb2_cleanup_fileio+0x73/0x160 [ 64.935344] vb2_core_queue_release+0x1e/0x80 [ 64.939825] _vb2_fop_release+0x1d2/0x2b0 [ 64.943960] vb2_fop_release+0x77/0xc0 [ 64.947833] vivid_fop_release+0x18e/0x440 [ 64.952051] ? vivid_remove+0x460/0x460 [ 64.956009] v4l2_release+0x224/0x3a0 [ 64.959794] ? dev_debug_store+0x140/0x140 [ 64.964018] __fput+0x385/0xa30 [ 64.967284] ? get_max_files+0x20/0x20 [ 64.971174] ? trace_hardirqs_on+0xbd/0x310 [ 64.975503] ? kasan_check_read+0x11/0x20 [ 64.979640] ? task_work_run+0x1af/0x2a0 [ 64.983690] ? trace_hardirqs_off_caller+0x310/0x310 [ 64.988794] ? filp_close+0x1cd/0x250 [ 64.992583] ____fput+0x15/0x20 [ 64.995845] task_work_run+0x1e8/0x2a0 [ 64.999719] ? task_work_cancel+0x240/0x240 [ 65.004027] ? copy_fd_bitmaps+0x210/0x210 [ 65.008263] ? do_syscall_64+0x9a/0x820 [ 65.012224] exit_to_usermode_loop+0x318/0x380 [ 65.016790] ? __bpf_trace_sys_exit+0x30/0x30 [ 65.021274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 65.026795] do_syscall_64+0x6be/0x820 [ 65.030666] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 65.036035] ? syscall_return_slowpath+0x5e0/0x5e0 [ 65.040951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 65.045777] ? trace_hardirqs_on_caller+0x310/0x310 [ 65.050775] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 65.055787] ? prepare_exit_to_usermode+0x291/0x3b0 [ 65.060787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 65.065618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.070804] RIP: 0033:0x411021 [ 65.073987] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 65.092885] RSP: 002b:00007ffc9a5ea6c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 65.100575] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411021 [ 65.107828] RDX: 0000000000000000 RSI: 0000000000730188 RDI: 0000000000000003 [ 65.115094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.122363] R10: 00007ffc9a5ea5e0 R11: 0000000000000293 R12: 0000000000000000 [ 65.129615] R13: 0000000000000001 R14: 000000000000001b R15: 0000000000000000 [ 65.137964] Kernel Offset: disabled [ 65.141593] Rebooting in 86400 seconds..