[[36minfo[39;49m] Using makefile-style concurrent boot in runlevel 2. [ 25.799042] audit: type=1800 audit(1541828590.958:21): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.70' (ECDSA) to the list of known hosts. 2018/11/10 05:43:27 parsed 1 programs 2018/11/10 05:43:28 executed programs: 0 syzkaller login: [ 43.692811] IPVS: ftp: loaded support on port[0] = 21 [ 43.937529] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.944229] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.951297] device bridge_slave_0 entered promiscuous mode [ 43.970456] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.976923] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.983875] device bridge_slave_1 entered promiscuous mode [ 44.001206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.019345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.070450] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.090594] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.164299] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.171526] team0: Port device team_slave_0 added [ 44.188883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.196397] team0: Port device team_slave_1 added [ 44.212874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.231953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.250354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.269054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.414744] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.421226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.428044] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.434414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.955583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.007682] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.059609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.066039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.073075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.125669] 8021q: adding VLAN 0 to HW filter on device team0 2018/11/10 05:43:33 executed programs: 18 2018/11/10 05:43:39 executed programs: 44 2018/11/10 05:43:44 executed programs: 72 2018/11/10 05:43:49 executed programs: 103 2018/11/10 05:43:54 executed programs: 130 2018/11/10 05:43:59 executed programs: 157 [ 79.183108] vivid-000: kernel_thread() failed [ 79.228637] ================================================================== [ 79.236266] BUG: KASAN: null-ptr-deref in kthread_stop+0x10d/0x900 [ 79.242580] Write of size 4 at addr 000000000000001c by task syz-executor0/6689 [ 79.250010] [ 79.251626] CPU: 0 PID: 6689 Comm: syz-executor0 Not tainted 4.20.0-rc1+ #328 [ 79.258886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.268231] Call Trace: [ 79.270923] dump_stack+0x244/0x39d [ 79.274552] ? dump_stack_print_info.cold.1+0x20/0x20 [ 79.279735] ? vprintk_func+0x85/0x181 [ 79.283624] kasan_report.cold.8+0x6d/0x309 [ 79.287949] ? kthread_stop+0x10d/0x900 [ 79.291941] check_memory_region+0x13e/0x1b0 [ 79.296345] kasan_check_write+0x14/0x20 [ 79.300399] kthread_stop+0x10d/0x900 [ 79.304202] ? kthread_unpark+0x160/0x160 [ 79.308352] ? __lock_is_held+0xb5/0x140 [ 79.312418] vivid_stop_generating_vid_cap+0x2bb/0x9ae [ 79.317744] ? vivid_start_generating_vid_cap+0x4c0/0x4c0 [ 79.323293] ? _vb2_fop_release+0x3f/0x2b0 [ 79.327680] ? mutex_trylock+0x2b0/0x2b0 [ 79.331731] ? vivid_fop_release+0x66/0x440 [ 79.336044] ? __mutex_lock+0x85e/0x16f0 [ 79.340107] vid_cap_stop_streaming+0x8d/0xe0 [ 79.344593] ? vid_cap_buf_queue+0x310/0x310 [ 79.349000] __vb2_queue_cancel+0x171/0xd20 [ 79.353322] ? lock_downgrade+0x900/0x900 [ 79.357459] ? vb2_buffer_done+0xb90/0xb90 [ 79.361680] ? find_held_lock+0x36/0x1c0 [ 79.365734] ? mark_held_locks+0xc7/0x130 [ 79.369896] ? kasan_check_write+0x14/0x20 [ 79.374132] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 79.379066] ? kasan_check_read+0x11/0x20 [ 79.383220] ? wait_for_completion+0x8a0/0x8a0 [ 79.387800] ? trace_hardirqs_off_caller+0x310/0x310 [ 79.392916] ? vfs_lock_file+0xe0/0xe0 [ 79.396803] vb2_core_streamoff+0x60/0x140 [ 79.401029] __vb2_cleanup_fileio+0x73/0x160 [ 79.405436] vb2_core_queue_release+0x1e/0x80 [ 79.409933] _vb2_fop_release+0x1d2/0x2b0 [ 79.414126] vb2_fop_release+0x77/0xc0 [ 79.418022] vivid_fop_release+0x18e/0x440 [ 79.422251] ? vivid_remove+0x460/0x460 [ 79.426217] v4l2_release+0x224/0x3a0 [ 79.430019] ? dev_debug_store+0x140/0x140 [ 79.434253] __fput+0x385/0xa30 [ 79.437523] ? get_max_files+0x20/0x20 [ 79.441403] ? trace_hardirqs_on+0xbd/0x310 [ 79.445713] ? kasan_check_read+0x11/0x20 [ 79.449854] ? task_work_run+0x1af/0x2a0 [ 79.453921] ? trace_hardirqs_off_caller+0x310/0x310 [ 79.459027] ? filp_close+0x1cd/0x250 [ 79.462826] ____fput+0x15/0x20 [ 79.466103] task_work_run+0x1e8/0x2a0 [ 79.469986] ? task_work_cancel+0x240/0x240 [ 79.474302] ? copy_fd_bitmaps+0x210/0x210 [ 79.478528] ? do_syscall_64+0x9a/0x820 [ 79.482492] exit_to_usermode_loop+0x318/0x380 [ 79.487120] ? __bpf_trace_sys_exit+0x30/0x30 [ 79.491617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 79.497234] do_syscall_64+0x6be/0x820 [ 79.501120] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 79.506474] ? syscall_return_slowpath+0x5e0/0x5e0 [ 79.511389] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 79.516222] ? trace_hardirqs_on_caller+0x310/0x310 [ 79.521227] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 79.526228] ? prepare_exit_to_usermode+0x291/0x3b0 [ 79.531236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 79.536072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 79.541248] RIP: 0033:0x411021 [ 79.544432] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 79.563340] RSP: 002b:00007ffde2cc17e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 79.571053] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411021 [ 79.578366] RDX: 0000000000000000 RSI: 0000000000730230 RDI: 0000000000000003 [ 79.585652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.592925] R10: 00007ffde2cc1700 R11: 0000000000000293 R12: 0000000000000000 [ 79.600198] R13: 0000000000000001 R14: 00000000000000b6 R15: 0000000000000000 [ 79.607474] ================================================================== [ 79.614827] Disabling lock debugging due to kernel taint [ 79.620958] Kernel panic - not syncing: panic_on_warn set ... [ 79.626867] CPU: 0 PID: 6689 Comm: syz-executor0 Tainted: G B 4.20.0-rc1+ #328 [ 79.635528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.644936] Call Trace: [ 79.647531] dump_stack+0x244/0x39d [ 79.651148] ? dump_stack_print_info.cold.1+0x20/0x20 [ 79.656336] panic+0x2ad/0x55c [ 79.659519] ? add_taint.cold.5+0x16/0x16 [ 79.663714] ? preempt_schedule+0x4d/0x60 [ 79.667860] ? ___preempt_schedule+0x16/0x18 [ 79.672267] ? trace_hardirqs_on+0xb4/0x310 [ 79.676588] kasan_end_report+0x47/0x4f [ 79.680559] kasan_report.cold.8+0x76/0x309 [ 79.684880] ? kthread_stop+0x10d/0x900 [ 79.688855] check_memory_region+0x13e/0x1b0 [ 79.693267] kasan_check_write+0x14/0x20 [ 79.697327] kthread_stop+0x10d/0x900 [ 79.701117] ? kthread_unpark+0x160/0x160 [ 79.705254] ? __lock_is_held+0xb5/0x140 [ 79.709312] vivid_stop_generating_vid_cap+0x2bb/0x9ae [ 79.714581] ? vivid_start_generating_vid_cap+0x4c0/0x4c0 [ 79.720105] ? _vb2_fop_release+0x3f/0x2b0 [ 79.724332] ? mutex_trylock+0x2b0/0x2b0 [ 79.728381] ? vivid_fop_release+0x66/0x440 [ 79.732768] ? __mutex_lock+0x85e/0x16f0 [ 79.736830] vid_cap_stop_streaming+0x8d/0xe0 [ 79.741311] ? vid_cap_buf_queue+0x310/0x310 [ 79.745703] __vb2_queue_cancel+0x171/0xd20 [ 79.750023] ? lock_downgrade+0x900/0x900 [ 79.754172] ? vb2_buffer_done+0xb90/0xb90 [ 79.758407] ? find_held_lock+0x36/0x1c0 [ 79.762543] ? mark_held_locks+0xc7/0x130 [ 79.766698] ? kasan_check_write+0x14/0x20 [ 79.770932] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 79.775857] ? kasan_check_read+0x11/0x20 [ 79.780364] ? wait_for_completion+0x8a0/0x8a0 [ 79.784931] ? trace_hardirqs_off_caller+0x310/0x310 [ 79.790021] ? vfs_lock_file+0xe0/0xe0 [ 79.793901] vb2_core_streamoff+0x60/0x140 [ 79.798128] __vb2_cleanup_fileio+0x73/0x160 [ 79.802519] vb2_core_queue_release+0x1e/0x80 [ 79.807003] _vb2_fop_release+0x1d2/0x2b0 [ 79.811240] vb2_fop_release+0x77/0xc0 [ 79.815126] vivid_fop_release+0x18e/0x440 [ 79.819344] ? vivid_remove+0x460/0x460 [ 79.823300] v4l2_release+0x224/0x3a0 [ 79.827085] ? dev_debug_store+0x140/0x140 [ 79.831304] __fput+0x385/0xa30 [ 79.834569] ? get_max_files+0x20/0x20 [ 79.838439] ? trace_hardirqs_on+0xbd/0x310 [ 79.842799] ? kasan_check_read+0x11/0x20 [ 79.846942] ? task_work_run+0x1af/0x2a0 [ 79.851108] ? trace_hardirqs_off_caller+0x310/0x310 [ 79.856204] ? filp_close+0x1cd/0x250 [ 79.860221] ____fput+0x15/0x20 [ 79.863552] task_work_run+0x1e8/0x2a0 [ 79.867471] ? task_work_cancel+0x240/0x240 [ 79.871785] ? copy_fd_bitmaps+0x210/0x210 [ 79.876003] ? do_syscall_64+0x9a/0x820 [ 79.879966] exit_to_usermode_loop+0x318/0x380 [ 79.884532] ? __bpf_trace_sys_exit+0x30/0x30 [ 79.889015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 79.894538] do_syscall_64+0x6be/0x820 [ 79.898413] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 79.903763] ? syscall_return_slowpath+0x5e0/0x5e0 [ 79.908674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 79.913521] ? trace_hardirqs_on_caller+0x310/0x310 [ 79.918525] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 79.923529] ? prepare_exit_to_usermode+0x291/0x3b0 [ 79.928532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 79.933366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 79.938542] RIP: 0033:0x411021 [ 79.941723] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 79.960744] RSP: 002b:00007ffde2cc17e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 79.968442] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411021 [ 79.975695] RDX: 0000000000000000 RSI: 0000000000730230 RDI: 0000000000000003 [ 79.982951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.990212] R10: 00007ffde2cc1700 R11: 0000000000000293 R12: 0000000000000000 [ 79.997529] R13: 0000000000000001 R14: 00000000000000b6 R15: 0000000000000000 [ 80.005789] Kernel Offset: disabled [ 80.009475] Rebooting in 86400 seconds..