[info] Using makefile-style concurrent boot in runlevel 2. [ 25.026573] audit: type=1800 audit(1541558282.131:21): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 25.052326] audit: type=1800 audit(1541558282.131:22): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. 2018/11/07 02:38:32 parsed 1 programs 2018/11/07 02:38:33 executed programs: 0 syzkaller login: [ 56.365409] IPVS: ftp: loaded support on port[0] = 21 [ 56.617044] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.624180] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.631624] device bridge_slave_0 entered promiscuous mode [ 56.652362] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.659007] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.666301] device bridge_slave_1 entered promiscuous mode [ 56.684204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.702358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.754419] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.775441] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.855921] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.863514] team0: Port device team_slave_0 added [ 56.880551] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.887993] team0: Port device team_slave_1 added [ 56.905612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.929720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.949547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.970236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.118080] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.124519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.131677] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.138052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.666422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.718334] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.771571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.778200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.786008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.832202] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.179766] vivid-000: kernel_thread() failed [ 61.209256] ================================================================== [ 61.216699] BUG: KASAN: null-ptr-deref in kthread_stop+0x10d/0x900 [ 61.223000] Write of size 4 at addr 000000000000001c by task syz-executor0/6765 [ 61.230424] [ 61.232039] CPU: 0 PID: 6765 Comm: syz-executor0 Not tainted 4.20.0-rc1+ #101 [ 61.239289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.248622] Call Trace: [ 61.251193] dump_stack+0x244/0x39d [ 61.254807] ? dump_stack_print_info.cold.1+0x20/0x20 [ 61.259982] ? vprintk_func+0x85/0x181 [ 61.263854] kasan_report.cold.8+0x6d/0x309 [ 61.268159] ? kthread_stop+0x10d/0x900 [ 61.272124] check_memory_region+0x13e/0x1b0 [ 61.276516] kasan_check_write+0x14/0x20 [ 61.280556] kthread_stop+0x10d/0x900 [ 61.284341] ? kthread_unpark+0x160/0x160 [ 61.288477] ? __lock_is_held+0xb5/0x140 [ 61.292533] vivid_stop_generating_vid_cap+0x2bb/0x9ae [ 61.297795] ? vivid_start_generating_vid_cap+0x4c0/0x4c0 [ 61.303334] ? _vb2_fop_release+0x3f/0x2b0 [ 61.307558] ? mutex_trylock+0x2b0/0x2b0 [ 61.311599] ? vivid_fop_release+0x66/0x440 [ 61.315901] ? __mutex_lock+0x85e/0x16f0 [ 61.319951] vid_cap_stop_streaming+0x8d/0xe0 [ 61.324474] ? vid_cap_buf_queue+0x310/0x310 [ 61.328867] __vb2_queue_cancel+0x171/0xd20 [ 61.333177] ? lock_downgrade+0x900/0x900 [ 61.337313] ? vb2_buffer_done+0xb90/0xb90 [ 61.341531] ? find_held_lock+0x36/0x1c0 [ 61.345578] ? mark_held_locks+0xc7/0x130 [ 61.349722] ? kasan_check_write+0x14/0x20 [ 61.353944] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 61.358855] ? kasan_check_read+0x11/0x20 [ 61.362988] ? wait_for_completion+0x8a0/0x8a0 [ 61.367551] ? trace_hardirqs_off_caller+0x310/0x310 [ 61.372640] ? vfs_lock_file+0xe0/0xe0 [ 61.376513] vb2_core_streamoff+0x60/0x140 [ 61.380730] __vb2_cleanup_fileio+0x73/0x160 [ 61.385126] vb2_core_queue_release+0x1e/0x80 [ 61.389606] _vb2_fop_release+0x1d2/0x2b0 [ 61.393741] vb2_fop_release+0x77/0xc0 [ 61.397611] vivid_fop_release+0x18e/0x440 [ 61.401864] ? vivid_remove+0x460/0x460 [ 61.405824] v4l2_release+0x224/0x3a0 [ 61.409606] ? dev_debug_store+0x140/0x140 [ 61.413825] __fput+0x385/0xa30 [ 61.417097] ? get_max_files+0x20/0x20 [ 61.420967] ? trace_hardirqs_on+0xbd/0x310 [ 61.425268] ? kasan_check_read+0x11/0x20 [ 61.429401] ? task_work_run+0x1af/0x2a0 [ 61.433444] ? trace_hardirqs_off_caller+0x310/0x310 [ 61.438529] ? filp_close+0x1cd/0x250 [ 61.442313] ____fput+0x15/0x20 [ 61.445574] task_work_run+0x1e8/0x2a0 [ 61.449444] ? task_work_cancel+0x240/0x240 [ 61.453748] ? copy_fd_bitmaps+0x210/0x210 [ 61.457967] ? do_syscall_64+0x9a/0x820 [ 61.461926] exit_to_usermode_loop+0x318/0x380 [ 61.466490] ? __bpf_trace_sys_exit+0x30/0x30 [ 61.470971] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.476489] do_syscall_64+0x6be/0x820 [ 61.480366] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 61.485730] ? syscall_return_slowpath+0x5e0/0x5e0 [ 61.490643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.495472] ? trace_hardirqs_on_caller+0x310/0x310 [ 61.500478] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 61.505479] ? prepare_exit_to_usermode+0x291/0x3b0 [ 61.510481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.515316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.520489] RIP: 0033:0x411021 [ 61.523667] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 61.542548] RSP: 002b:00007ffd577e78b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 61.550237] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411021 [ 61.557493] RDX: 0000000000000000 RSI: 0000000000730468 RDI: 0000000000000004 [ 61.564808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.572070] R10: 00007ffd577e77d0 R11: 0000000000000293 R12: 0000000000000000 [ 61.579337] R13: 0000000000000001 R14: 00000000000000b0 R15: 0000000000000000 [ 61.586606] ================================================================== [ 61.593943] Disabling lock debugging due to kernel taint [ 61.600415] Kernel panic - not syncing: panic_on_warn set ... [ 61.606307] CPU: 0 PID: 6765 Comm: syz-executor0 Tainted: G B 4.20.0-rc1+ #101 [ 61.614946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.624275] Call Trace: [ 61.626849] dump_stack+0x244/0x39d [ 61.630460] ? dump_stack_print_info.cold.1+0x20/0x20 [ 61.635635] panic+0x2ad/0x55c [ 61.638806] ? add_taint.cold.5+0x16/0x16 [ 61.642953] ? preempt_schedule+0x4d/0x60 [ 61.647085] ? ___preempt_schedule+0x16/0x18 [ 61.651484] ? trace_hardirqs_on+0xb4/0x310 [ 61.655795] kasan_end_report+0x47/0x4f [ 61.659793] kasan_report.cold.8+0x76/0x309 [ 61.664135] ? kthread_stop+0x10d/0x900 [ 61.668096] check_memory_region+0x13e/0x1b0 [ 61.672488] kasan_check_write+0x14/0x20 [ 61.676530] kthread_stop+0x10d/0x900 [ 61.680310] ? kthread_unpark+0x160/0x160 [ 61.684442] ? __lock_is_held+0xb5/0x140 [ 61.688504] vivid_stop_generating_vid_cap+0x2bb/0x9ae [ 61.693799] ? vivid_start_generating_vid_cap+0x4c0/0x4c0 [ 61.699320] ? _vb2_fop_release+0x3f/0x2b0 [ 61.703562] ? mutex_trylock+0x2b0/0x2b0 [ 61.707609] ? vivid_fop_release+0x66/0x440 [ 61.712034] ? __mutex_lock+0x85e/0x16f0 [ 61.716098] vid_cap_stop_streaming+0x8d/0xe0 [ 61.720574] ? vid_cap_buf_queue+0x310/0x310 [ 61.724962] __vb2_queue_cancel+0x171/0xd20 [ 61.729270] ? lock_downgrade+0x900/0x900 [ 61.733402] ? vb2_buffer_done+0xb90/0xb90 [ 61.737617] ? find_held_lock+0x36/0x1c0 [ 61.741663] ? mark_held_locks+0xc7/0x130 [ 61.745800] ? kasan_check_write+0x14/0x20 [ 61.750020] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 61.754957] ? kasan_check_read+0x11/0x20 [ 61.759103] ? wait_for_completion+0x8a0/0x8a0 [ 61.763668] ? trace_hardirqs_off_caller+0x310/0x310 [ 61.768752] ? vfs_lock_file+0xe0/0xe0 [ 61.772622] vb2_core_streamoff+0x60/0x140 [ 61.776841] __vb2_cleanup_fileio+0x73/0x160 [ 61.781231] vb2_core_queue_release+0x1e/0x80 [ 61.785708] _vb2_fop_release+0x1d2/0x2b0 [ 61.789839] vb2_fop_release+0x77/0xc0 [ 61.793713] vivid_fop_release+0x18e/0x440 [ 61.797933] ? vivid_remove+0x460/0x460 [ 61.801895] v4l2_release+0x224/0x3a0 [ 61.805676] ? dev_debug_store+0x140/0x140 [ 61.809898] __fput+0x385/0xa30 [ 61.813183] ? get_max_files+0x20/0x20 [ 61.817062] ? trace_hardirqs_on+0xbd/0x310 [ 61.821365] ? kasan_check_read+0x11/0x20 [ 61.825497] ? task_work_run+0x1af/0x2a0 [ 61.829538] ? trace_hardirqs_off_caller+0x310/0x310 [ 61.834622] ? filp_close+0x1cd/0x250 [ 61.838403] ____fput+0x15/0x20 [ 61.841667] task_work_run+0x1e8/0x2a0 [ 61.845539] ? task_work_cancel+0x240/0x240 [ 61.849854] ? copy_fd_bitmaps+0x210/0x210 [ 61.854069] ? do_syscall_64+0x9a/0x820 [ 61.858025] exit_to_usermode_loop+0x318/0x380 [ 61.862599] ? __bpf_trace_sys_exit+0x30/0x30 [ 61.867083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.872601] do_syscall_64+0x6be/0x820 [ 61.876476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 61.881822] ? syscall_return_slowpath+0x5e0/0x5e0 [ 61.886732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.891555] ? trace_hardirqs_on_caller+0x310/0x310 [ 61.896552] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 61.901568] ? prepare_exit_to_usermode+0x291/0x3b0 [ 61.906567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.911394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.916566] RIP: 0033:0x411021 [ 61.919744] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 61.938625] RSP: 002b:00007ffd577e78b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 61.946316] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411021 [ 61.953568] RDX: 0000000000000000 RSI: 0000000000730468 RDI: 0000000000000004 [ 61.960823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.968119] R10: 00007ffd577e77d0 R11: 0000000000000293 R12: 0000000000000000 [ 61.975371] R13: 0000000000000001 R14: 00000000000000b0 R15: 0000000000000000 [ 61.983800] Kernel Offset: disabled [ 61.987427] Rebooting in 86400 seconds..