INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. 2019/06/10 06:34:43 parsed 1 programs 2019/06/10 06:34:45 executed programs: 0 syzkaller login: [ 62.460570][ T1769] cgroup1: Unknown subsys name 'perf_event' [ 62.467748][ T1769] cgroup1: Unknown subsys name 'net_cls' [ 62.478690][ T1774] cgroup1: Unknown subsys name 'perf_event' [ 62.484961][ T1774] cgroup1: Unknown subsys name 'net_cls' [ 62.488048][ T1778] cgroup1: Unknown subsys name 'perf_event' [ 62.492799][ T1776] cgroup1: Unknown subsys name 'perf_event' [ 62.497862][ T1779] cgroup1: Unknown subsys name 'perf_event' [ 62.505332][ T1776] cgroup1: Unknown subsys name 'net_cls' [ 62.511424][ T1778] cgroup1: Unknown subsys name 'net_cls' [ 62.518176][ T1779] cgroup1: Unknown subsys name 'net_cls' [ 62.529746][ T1785] cgroup1: Unknown subsys name 'perf_event' [ 62.536453][ T1785] cgroup1: Unknown subsys name 'net_cls' [ 65.637140][ T12] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.647065][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.686850][ T107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.736845][ T2753] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.766898][ T2768] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.787040][ T2773] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.876836][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 65.886843][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 65.926923][ T107] usb 5-1: Using ep0 maxpacket: 8 [ 65.976979][ T2753] usb 2-1: Using ep0 maxpacket: 8 [ 65.997052][ T12] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 66.005315][ T12] usb 3-1: config 0 has no interface number 0 [ 66.011859][ T2768] usb 1-1: Using ep0 maxpacket: 8 [ 66.017184][ T12] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 66.026889][ T21] usb 6-1: config 0 has an invalid interface number: 109 but max is 0 [ 66.027511][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.035665][ T21] usb 6-1: config 0 has no interface number 0 [ 66.043873][ T2773] usb 4-1: Using ep0 maxpacket: 8 [ 66.050525][ T21] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 66.061122][ T12] usb 3-1: config 0 descriptor?? [ 66.064024][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.069356][ T107] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 66.081588][ T21] usb 6-1: config 0 descriptor?? [ 66.085358][ T107] usb 5-1: config 0 has no interface number 0 [ 66.089180][ T107] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 66.108319][ T107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.116348][ T2753] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 66.124751][ T2753] usb 2-1: config 0 has no interface number 0 [ 66.132860][ T12] radio-si470x 3-1:0.109: could not find interrupt in endpoint [ 66.139187][ T21] radio-si470x 6-1:0.109: could not find interrupt in endpoint [ 66.147298][ T12] radio-si470x: probe of 3-1:0.109 failed with error -5 [ 66.156183][ T2753] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 66.165300][ T2753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.170206][ T21] radio-si470x: probe of 6-1:0.109 failed with error -5 [ 66.173690][ T2768] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 66.188669][ T2768] usb 1-1: config 0 has no interface number 0 [ 66.194898][ T2773] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 66.203265][ T2773] usb 4-1: config 0 has no interface number 0 [ 66.209794][ T107] usb 5-1: config 0 descriptor?? [ 66.215097][ T2773] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 66.224206][ T2773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.232321][ T2768] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 66.241522][ T2768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.251342][ T107] radio-si470x 5-1:0.109: could not find interrupt in endpoint [ 66.259647][ T107] radio-si470x: probe of 5-1:0.109 failed with error -5 [ 66.267091][ T2753] usb 2-1: config 0 descriptor?? [ 66.272934][ T2773] usb 4-1: config 0 descriptor?? [ 66.278965][ T2768] usb 1-1: config 0 descriptor?? [ 66.309700][ T2753] radio-si470x 2-1:0.109: could not find interrupt in endpoint [ 66.319637][ T2773] radio-si470x 4-1:0.109: could not find interrupt in endpoint [ 66.327436][ T12] radio-raremono 3-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 66.338140][ T2768] radio-si470x 1-1:0.109: could not find interrupt in endpoint [ 66.339700][ T21] radio-raremono 6-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 66.345791][ T2768] radio-si470x: probe of 1-1:0.109 failed with error -5 [ 66.361202][ T2773] radio-si470x: probe of 4-1:0.109 failed with error -5 [ 66.368518][ T12] radio-raremono 3-1:0.109: raremono_cmd_main failed (-71) [ 66.375859][ T2753] radio-si470x: probe of 2-1:0.109 failed with error -5 [ 66.384559][ T12] radio-raremono 3-1:0.109: V4L2 device registered as radio0 [ 66.393807][ T12] usb 3-1: USB disconnect, device number 2 [ 66.399929][ T21] radio-raremono 6-1:0.109: raremono_cmd_main failed (-71) [ 66.401031][ T12] radio-raremono 3-1:0.109: Thanko's Raremono disconnected [ 66.411398][ T21] radio-raremono 6-1:0.109: V4L2 device registered as radio1 [ 66.436990][ T107] radio-raremono 5-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 66.445303][ T21] usb 6-1: USB disconnect, device number 2 [ 66.451733][ T21] radio-raremono 6-1:0.109: Thanko's Raremono disconnected [ 66.487673][ T107] radio-raremono 5-1:0.109: raremono_cmd_main failed (-71) [ 66.496037][ T107] radio-raremono 5-1:0.109: V4L2 device registered as radio0 [ 66.503842][ T2768] radio-raremono 1-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 66.512143][ T2753] radio-raremono 2-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 66.521392][ T107] usb 5-1: USB disconnect, device number 2 [ 66.527405][ T2773] radio-raremono 4-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 66.535970][ T107] radio-raremono 5-1:0.109: Thanko's Raremono disconnected [ 66.567078][ T2773] radio-raremono 4-1:0.109: raremono_cmd_main failed (-71) [ 66.574702][ T2753] radio-raremono 2-1:0.109: raremono_cmd_main failed (-71) [ 66.582195][ T2768] radio-raremono 1-1:0.109: raremono_cmd_main failed (-71) [ 66.590704][ T2773] radio-raremono 4-1:0.109: V4L2 device registered as radio0 [ 66.598386][ T2768] radio-raremono 1-1:0.109: V4L2 device registered as radio1 [ 66.607034][ T2753] radio-raremono 2-1:0.109: V4L2 device registered as radio2 [ 66.616203][ T2768] usb 1-1: USB disconnect, device number 2 [ 66.625040][ T2768] radio-raremono 1-1:0.109: Thanko's Raremono disconnected [ 66.632584][ T2773] usb 4-1: USB disconnect, device number 2 [ 66.639022][ T2753] usb 2-1: USB disconnect, device number 2 [ 66.645055][ T2753] radio-raremono 2-1:0.109: Thanko's Raremono disconnected [ 66.653218][ T2773] radio-raremono 4-1:0.109: Thanko's Raremono disconnected [ 67.176925][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.184744][ T2752] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.236831][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.317003][ T2753] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.326868][ T2792] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.334450][ T2793] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.426853][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 67.432081][ T2752] usb 3-1: Using ep0 maxpacket: 8 [ 67.486913][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 67.547196][ T21] usb 6-1: config 0 has an invalid interface number: 109 but max is 0 [ 67.555479][ T21] usb 6-1: config 0 has no interface number 0 [ 67.561707][ T2752] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 67.570042][ T2752] usb 3-1: config 0 has no interface number 0 [ 67.576210][ T21] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 67.576826][ T2753] usb 1-1: Using ep0 maxpacket: 8 [ 67.585323][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.598458][ T2793] usb 4-1: Using ep0 maxpacket: 8 [ 67.603537][ T2792] usb 2-1: Using ep0 maxpacket: 8 [ 67.608700][ T17] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 67.616940][ T17] usb 5-1: config 0 has no interface number 0 [ 67.623086][ T2752] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 67.632167][ T2752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.640441][ T17] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 67.649743][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.658797][ T21] usb 6-1: config 0 descriptor?? [ 67.667020][ T2752] usb 3-1: config 0 descriptor?? [ 67.673221][ T17] usb 5-1: config 0 descriptor?? [ 67.698999][ T21] radio-si470x 6-1:0.109: could not find interrupt in endpoint [ 67.706689][ T21] radio-si470x: probe of 6-1:0.109 failed with error -5 [ 67.715777][ T2752] radio-si470x 3-1:0.109: could not find interrupt in endpoint [ 67.717004][ T2753] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 67.723834][ T2793] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 67.731653][ T2753] usb 1-1: config 0 has no interface number 0 [ 67.742043][ T2753] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 67.746059][ T2793] usb 4-1: config 0 has no interface number 0 [ 67.746126][ T2792] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 67.755208][ T2753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.763622][ T2753] usb 1-1: config 0 descriptor?? [ 67.769549][ T2792] usb 2-1: config 0 has no interface number 0 [ 67.771498][ T17] radio-si470x 5-1:0.109: could not find interrupt in endpoint [ 67.796385][ T2752] radio-si470x: probe of 3-1:0.109 failed with error -5 [ 67.803677][ T2793] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 67.812794][ T2793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.820906][ T17] radio-si470x: probe of 5-1:0.109 failed with error -5 [ 67.827986][ T2792] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e1.7f [ 67.837110][ T2792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.842783][ T2753] radio-si470x 1-1:0.109: could not find interrupt in endpoint [ 67.846422][ T2793] usb 4-1: config 0 descriptor?? [ 67.859026][ T2792] usb 2-1: config 0 descriptor?? [ 67.868720][ T2753] radio-si470x: probe of 1-1:0.109 failed with error -5 [ 67.896986][ T21] radio-raremono 6-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 67.905233][ T2752] radio-raremono 3-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 67.915501][ T2792] radio-si470x 2-1:0.109: could not find interrupt in endpoint [ 67.925166][ T2793] radio-si470x 4-1:0.109: could not find interrupt in endpoint [ 67.933771][ T2792] radio-si470x: probe of 2-1:0.109 failed with error -5 [ 67.942464][ T2793] radio-si470x: probe of 4-1:0.109 failed with error -5 2019/06/10 06:34:51 executed programs: 6 [ 67.949796][ T2752] radio-raremono 3-1:0.109: raremono_cmd_main failed (-71) [ 67.957190][ T21] radio-raremono 6-1:0.109: raremono_cmd_main failed (-71) [ 67.966928][ T17] radio-raremono 5-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 67.981807][ T2752] radio-raremono 3-1:0.109: V4L2 device registered as radio1 [ 67.990986][ T21] radio-raremono 6-1:0.109: V4L2 device registered as radio0 [ 67.998841][ T17] radio-raremono 5-1:0.109: raremono_cmd_main failed (-71) [ 68.022954][ T17] radio-raremono 5-1:0.109: V4L2 device registered as radio2 [ 68.037087][ T2753] radio-raremono 1-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 68.045702][ T21] usb 6-1: USB disconnect, device number 3 [ 68.057438][ T17] usb 5-1: USB disconnect, device number 3 [ 68.071961][ T21] radio-raremono 6-1:0.109: Thanko's Raremono disconnected [ 68.082883][ T2752] usb 3-1: USB disconnect, device number 3 [ 68.090320][ T2753] radio-raremono 1-1:0.109: raremono_cmd_main failed (-71) [ 68.091204][ T17] radio-raremono 5-1:0.109: Thanko's Raremono disconnected [ 68.105310][ T2793] radio-raremono 4-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 68.113910][ T2792] radio-raremono 2-1:0.109: Thanko's Raremono connected: (10C4:818A) [ 68.123867][ T2752] radio-raremono 3-1:0.109: Thanko's Raremono disconnected [ 68.157136][ T2793] radio-raremono 4-1:0.109: raremono_cmd_main failed (-71) [ 68.163584][ T2753] radio-raremono 1-1:0.109: V4L2 device registered as radio0 [ 68.164502][ T2792] radio-raremono 2-1:0.109: raremono_cmd_main failed (-71) [ 68.180170][ T2820] ================================================================== [ 68.188476][ T2820] BUG: KASAN: use-after-free in v4l2_release+0x319/0x390 [ 68.195506][ T2820] Read of size 8 at addr ffff8881d178b4e0 by task v4l_id/2820 [ 68.202996][ T2820] [ 68.205342][ T2820] CPU: 1 PID: 2820 Comm: v4l_id Not tainted 5.2.0-rc1+ #10 [ 68.212540][ T2820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.212557][ T2820] Call Trace: [ 68.212578][ T2820] dump_stack+0xca/0x13e [ 68.230284][ T2820] ? v4l2_release+0x319/0x390 [ 68.234981][ T2820] ? v4l2_release+0x319/0x390 [ 68.239732][ T2820] print_address_description+0x67/0x231 [ 68.240138][ T2753] usb 1-1: USB disconnect, device number 3 [ 68.245314][ T2820] ? v4l2_release+0x319/0x390 [ 68.245325][ T2820] ? v4l2_release+0x319/0x390 [ 68.245339][ T2820] __kasan_report.cold+0x1a/0x32 [ 68.245351][ T2820] ? v4l2_release+0x319/0x390 [ 68.245363][ T2820] kasan_report+0xe/0x20 [ 68.245374][ T2820] v4l2_release+0x319/0x390 [ 68.245385][ T2820] ? dev_debug_store+0x100/0x100 [ 68.245404][ T2820] __fput+0x2d7/0x790 [ 68.251642][ T2753] radio-raremono 1-1:0.109: Thanko's Raremono disconnected [ 68.255907][ T2820] task_work_run+0x13f/0x1c0 [ 68.255920][ T2820] exit_to_usermode_loop+0x1c5/0x1f0 [ 68.255931][ T2820] do_syscall_64+0x43f/0x560 [ 68.255945][ T2820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.255957][ T2820] RIP: 0033:0x7ff074f182b0 [ 68.255972][ T2820] Code: 40 75 0b 31 c0 48 83 c4 08 e9 0c ff ff ff 48 8d 3d c5 32 08 00 e8 c0 07 02 00 83 3d 45 a3 2b 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ce 8a 01 00 48 89 04 24 [ 68.255978][ T2820] RSP: 002b:00007fffc4bda6c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.351778][ T2820] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007ff074f182b0 [ 68.359754][ T2820] RDX: 00007ff0751cedf0 RSI: 0000000000000001 RDI: 0000000000000003 [ 68.367736][ T2820] RBP: 0000000000000000 R08: 00007ff0751cedf0 R09: 000000000000000a [ 68.376085][ T2820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000400884 [ 68.384064][ T2820] R13: 00007fffc4bda820 R14: 0000000000000000 R15: 0000000000000000 [ 68.392325][ T2820] [ 68.394666][ T2820] Allocated by task 17: [ 68.398925][ T2820] save_stack+0x1b/0x80 [ 68.403276][ T2820] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 68.409131][ T2820] __kmalloc_node_track_caller+0xee/0x370 [ 68.414873][ T2820] devm_kmalloc+0x87/0x190 [ 68.419279][ T2820] usb_raremono_probe+0x2f/0x231 [ 68.424465][ T2820] usb_probe_interface+0x305/0x7a0 [ 68.429590][ T2820] really_probe+0x281/0x660 [ 68.434260][ T2820] driver_probe_device+0x104/0x210 [ 68.439370][ T2820] __device_attach_driver+0x1c2/0x220 [ 68.444743][ T2820] bus_for_each_drv+0x15c/0x1e0 [ 68.449594][ T2820] __device_attach+0x217/0x360 [ 68.454629][ T2820] bus_probe_device+0x1e4/0x290 [ 68.459501][ T2820] device_add+0xae6/0x16f0 [ 68.463920][ T2820] usb_set_configuration+0xdf6/0x1670 [ 68.469442][ T2820] generic_probe+0x9d/0xd5 [ 68.474030][ T2820] usb_probe_device+0x99/0x100 [ 68.478799][ T2820] really_probe+0x281/0x660 [ 68.483508][ T2820] driver_probe_device+0x104/0x210 [ 68.488648][ T2820] __device_attach_driver+0x1c2/0x220 [ 68.494367][ T2820] bus_for_each_drv+0x15c/0x1e0 [ 68.499224][ T2820] __device_attach+0x217/0x360 [ 68.504079][ T2820] bus_probe_device+0x1e4/0x290 [ 68.508942][ T2820] device_add+0xae6/0x16f0 [ 68.513627][ T2820] usb_new_device.cold+0x8c1/0x1016 [ 68.518834][ T2820] hub_event+0x1ada/0x3590 [ 68.523299][ T2820] process_one_work+0x905/0x1570 [ 68.528505][ T2820] worker_thread+0x96/0xe20 [ 68.533038][ T2820] kthread+0x30b/0x410 [ 68.537113][ T2820] ret_from_fork+0x24/0x30 [ 68.541515][ T2820] [ 68.543838][ T2820] Freed by task 17: [ 68.547721][ T2820] save_stack+0x1b/0x80 [ 68.552067][ T2820] __kasan_slab_free+0x130/0x180 [ 68.557008][ T2820] kfree+0xd7/0x280 [ 68.560806][ T2820] release_nodes+0x4a1/0x910 [ 68.565491][ T2820] devres_release_all+0x74/0xc3 [ 68.570355][ T2820] device_release_driver_internal+0x21b/0x4c0 [ 68.576628][ T2820] bus_remove_device+0x2dc/0x4a0 [ 68.581606][ T2820] device_del+0x460/0xb80 [ 68.585930][ T2820] usb_disable_device+0x211/0x690 [ 68.591044][ T2820] usb_disconnect+0x284/0x830 [ 68.595942][ T2820] hub_event+0x1409/0x3590 [ 68.600523][ T2820] process_one_work+0x905/0x1570 [ 68.605478][ T2820] worker_thread+0x7ab/0xe20 [ 68.610514][ T2820] kthread+0x30b/0x410 [ 68.615844][ T2820] ret_from_fork+0x24/0x30 [ 68.620531][ T2820] [ 68.622932][ T2820] The buggy address belongs to the object at ffff8881d178b300 [ 68.622932][ T2820] which belongs to the cache kmalloc-4k of size 4096 [ 68.637448][ T2820] The buggy address is located 480 bytes inside of [ 68.637448][ T2820] 4096-byte region [ffff8881d178b300, ffff8881d178c300) [ 68.650890][ T2820] The buggy address belongs to the page: [ 68.656618][ T2820] page:ffffea000745e200 refcount:1 mapcount:0 mapping:ffff8881dac02600 index:0x0 compound_mapcount: 0 [ 68.667552][ T2820] flags: 0x200000000010200(slab|head) [ 68.672941][ T2820] raw: 0200000000010200 dead000000000100 dead000000000200 ffff8881dac02600 [ 68.681802][ T2820] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 68.691472][ T2820] page dumped because: kasan: bad access detected [ 68.698340][ T2820] [ 68.700802][ T2820] Memory state around the buggy address: [ 68.707004][ T2820] ffff8881d178b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.715735][ T2820] ffff8881d178b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.724114][ T2820] >ffff8881d178b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.744221][ T2820] ^ [ 68.751409][ T2820] ffff8881d178b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.759549][ T2820] ffff8881d178b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.767593][ T2820] ================================================================== [ 68.775648][ T2820] Disabling lock debugging due to kernel taint [ 68.781998][ T2820] Kernel panic - not syncing: panic_on_warn set ... [ 68.788596][ T2820] CPU: 1 PID: 2820 Comm: v4l_id Tainted: G B 5.2.0-rc1+ #10 [ 68.797194][ T2820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.807251][ T2820] Call Trace: [ 68.810529][ T2820] dump_stack+0xca/0x13e [ 68.814760][ T2820] panic+0x292/0x6c9 [ 68.818636][ T2820] ? __warn_printk+0xf3/0xf3 [ 68.823221][ T2820] ? v4l2_release+0x319/0x390 [ 68.827920][ T2820] ? trace_hardirqs_on+0x55/0x1c0 [ 68.832955][ T2820] ? v4l2_release+0x319/0x390 [ 68.837626][ T2820] ? dev_debug_store+0x100/0x100 [ 68.842563][ T2820] end_report+0x43/0x49 [ 68.846698][ T2820] ? v4l2_release+0x319/0x390 [ 68.851355][ T2820] __kasan_report.cold+0xd/0x32 [ 68.856186][ T2820] ? v4l2_release+0x319/0x390 [ 68.860854][ T2820] kasan_report+0xe/0x20 [ 68.865112][ T2820] v4l2_release+0x319/0x390 [ 68.869600][ T2820] ? dev_debug_store+0x100/0x100 [ 68.874532][ T2820] __fput+0x2d7/0x790 [ 68.878513][ T2820] task_work_run+0x13f/0x1c0 [ 68.883101][ T2820] exit_to_usermode_loop+0x1c5/0x1f0 [ 68.888387][ T2820] do_syscall_64+0x43f/0x560 [ 68.892980][ T2820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.898939][ T2820] RIP: 0033:0x7ff074f182b0 [ 68.903422][ T2820] Code: 40 75 0b 31 c0 48 83 c4 08 e9 0c ff ff ff 48 8d 3d c5 32 08 00 e8 c0 07 02 00 83 3d 45 a3 2b 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ce 8a 01 00 48 89 04 24 [ 68.923007][ T2820] RSP: 002b:00007fffc4bda6c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 68.931406][ T2820] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007ff074f182b0 [ 68.939370][ T2820] RDX: 00007ff0751cedf0 RSI: 0000000000000001 RDI: 0000000000000003 [ 68.947325][ T2820] RBP: 0000000000000000 R08: 00007ff0751cedf0 R09: 000000000000000a [ 68.955299][ T2820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000400884 [ 68.963262][ T2820] R13: 00007fffc4bda820 R14: 0000000000000000 R15: 0000000000000000 [ 68.971549][ T2820] Kernel Offset: disabled [ 68.975872][ T2820] Rebooting in 86400 seconds..