[ 63.543899][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 63.543997][ T43] audit: type=1400 audit(1788899253.477:208): avc: denied { transition } for pid=5976 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.544057][ T43] audit: type=1400 audit(1788899253.477:209): avc: denied { noatsecure } for pid=5976 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.544879][ T43] audit: type=1400 audit(1788899253.477:210): avc: denied { rlimitinh } for pid=5976 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.544926][ T43] audit: type=1400 audit(1788899253.477:211): avc: denied { siginh } for pid=5976 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.065484][ T43] audit: type=1400 audit(1788899256.997:212): avc: denied { write } for pid=5982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.118169][ T43] audit: type=1400 audit(1788899257.047:213): avc: denied { write } for pid=5985 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.196487][ T43] audit: type=1400 audit(1788899257.127:214): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.241762][ T43] audit: type=1400 audit(1788899257.177:215): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:33908' (ED25519) to the list of known hosts. [ 67.705900][ T43] audit: type=1400 audit(1788899257.637:216): avc: denied { read write } for pid=6001 comm="syz-executor306" name="media0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.708216][ T43] audit: type=1400 audit(1788899257.637:217): avc: denied { open } for pid=6001 comm="syz-executor306" path="/dev/media0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.715657][ T6001] vivid-000: unregistering video7 [ 67.717101][ T6001] vivid-000: unregistering video8 [ 67.718297][ T6001] vivid-000: unregistering vbi0 [ 67.720204][ T6001] vivid-000: unregistering vbi1 [ 67.720963][ T6001] vivid-000: unregistering swradio0 [ 67.721640][ T6001] vivid-000: unregistering radio0 [ 67.722445][ T6001] vivid-000: unregistering radio1 [ 67.723730][ T6001] vivid-000: unregistering video9 [ 67.724377][ T6001] vivid-000: unregistering video10 [ 67.724904][ T6001] vivid-000: unregistering v4l-touch0 [ 67.748716][ T6001] vivid-001: unregistering video11 [ 67.753687][ T6001] vivid-001: unregistering video12 [ 67.773935][ T6001] vivid-001: unregistering vbi2 [ 67.796135][ T6001] vivid-001: unregistering vbi3 [ 67.808903][ T6001] vivid-001: unregistering swradio1 [ 67.817901][ T6001] vivid-001: unregistering radio2 [ 67.826692][ T6001] vivid-001: unregistering radio3 [ 67.830012][ T6001] vivid-001: unregistering video13 [ 67.831654][ T6001] vivid-001: unregistering video14 [ 67.835221][ T6001] vivid-001: unregistering v4l-touch1 [ 67.860111][ T6001] vivid-002: unregistering video15 [ 67.860687][ T6001] vivid-002: unregistering video16 [ 67.861244][ T6001] vivid-002: unregistering vbi4 [ 67.862620][ T6001] vivid-002: unregistering vbi5 [ 67.863207][ T6001] vivid-002: unregistering swradio2 [ 67.863796][ T6001] vivid-002: unregistering radio4 [ 67.864363][ T6001] vivid-002: unregistering radio5 [ 67.865478][ T6001] vivid-002: unregistering video17 [ 67.866181][ T6001] vivid-002: unregistering video18 [ 67.866681][ T6001] vivid-002: unregistering v4l-touch2 [ 67.907159][ T6001] vivid-003: unregistering video19 [ 67.925983][ T6001] vivid-003: unregistering video20 [ 67.932376][ T6001] vivid-003: unregistering vbi6 [ 67.933768][ T6001] vivid-003: unregistering vbi7 [ 67.934569][ T6001] vivid-003: unregistering swradio3 [ 67.937324][ T6001] vivid-003: unregistering radio6 [ 67.938498][ T6001] vivid-003: unregistering radio7 [ 67.942422][ T6001] vivid-003: unregistering video21 [ 67.943388][ T6001] vivid-003: unregistering video22 [ 67.948870][ T6001] vivid-003: unregistering v4l-touch3 [ 68.000175][ T6001] vivid-004: unregistering video23 [ 68.002465][ T6001] vivid-004: unregistering video24 [ 68.003309][ T6001] vivid-004: unregistering vbi8 [ 68.004685][ T6001] vivid-004: unregistering vbi9 [ 68.005132][ T6001] vivid-004: unregistering swradio4 [ 68.005608][ T6001] vivid-004: unregistering radio8 [ 68.006092][ T6001] vivid-004: unregistering radio9 [ 68.006537][ T6001] vivid-004: unregistering video25 [ 68.024551][ T6001] vivid-004: unregistering video26 [ 68.040223][ T6001] vivid-004: unregistering v4l-touch4 [ 68.097103][ T6001] vivid-005: unregistering video27 [ 68.098016][ T6001] vivid-005: unregistering video28 [ 68.098904][ T6001] vivid-005: unregistering vbi10 [ 68.107955][ T6001] vivid-005: unregistering vbi11 [ 68.110386][ T6001] vivid-005: unregistering swradio5 [ 68.124233][ T6001] vivid-005: unregistering radio10 [ 68.133844][ T6001] vivid-005: unregistering radio11 [ 68.140777][ T6001] vivid-005: unregistering video29 [ 68.142473][ T6001] vivid-005: unregistering video30 [ 68.145186][ T6001] vivid-005: unregistering v4l-touch5 [ 68.167270][ T6001] vivid-006: unregistering video31 [ 68.168756][ T6001] vivid-006: unregistering video32 [ 68.170262][ T6001] vivid-006: unregistering vbi12 [ 68.173730][ T6001] vivid-006: unregistering vbi13 [ 68.177059][ T6001] vivid-006: unregistering swradio6 [ 68.190481][ T6001] vivid-006: unregistering radio12 [ 68.196103][ T6001] vivid-006: unregistering radio13 [ 68.196950][ T6001] vivid-006: unregistering video33 [ 68.199585][ T6001] vivid-006: unregistering video34 [ 68.204231][ T6001] vivid-006: unregistering v4l-touch6 [ 68.237146][ T6001] vivid-007: unregistering video35 [ 68.238064][ T6001] vivid-007: unregistering video36 [ 68.240345][ T6001] vivid-007: unregistering vbi14 [ 68.242109][ T6001] vivid-007: unregistering vbi15 [ 68.245961][ T6001] vivid-007: unregistering swradio7 [ 68.260839][ T6001] vivid-007: unregistering radio14 [ 68.272012][ T6001] vivid-007: unregistering radio15 [ 68.280911][ T6001] vivid-007: unregistering video37 [ 68.289769][ T6001] vivid-007: unregistering video38 [ 68.294949][ T6001] vivid-007: unregistering v4l-touch7 [ 68.327291][ T6001] vivid-008: unregistering video39 [ 68.331088][ T6001] vivid-008: unregistering video40 [ 68.331996][ T6001] vivid-008: unregistering vbi16 [ 68.338279][ T6001] vivid-008: unregistering vbi17 [ 68.342453][ T6001] vivid-008: unregistering swradio8 [ 68.354882][ T6001] vivid-008: unregistering radio16 [ 68.369072][ T6001] vivid-008: unregistering radio17 [ 68.369997][ T6001] vivid-008: unregistering video41 [ 68.373080][ T6001] vivid-008: unregistering video42 [ 68.380164][ T6001] vivid-008: unregistering v4l-touch8 [ 68.411620][ T6001] vivid-009: unregistering video43 [ 68.412151][ T6001] vivid-009: unregistering video44 [ 68.412591][ T6001] vivid-009: unregistering vbi18 [ 68.413922][ T6001] vivid-009: unregistering vbi19 [ 68.414365][ T6001] vivid-009: unregistering swradio9 [ 68.414833][ T6001] vivid-009: unregistering radio18 [ 68.415341][ T6001] vivid-009: unregistering radio19 [ 68.426868][ T6001] vivid-009: unregistering video45 [ 68.442287][ T6001] vivid-009: unregistering video46 [ 68.460088][ T6001] vivid-009: unregistering v4l-touch9 [ 68.513822][ T6001] vivid-010: unregistering video47 [ 68.514534][ T6001] vivid-010: unregistering video48 [ 68.515053][ T6001] vivid-010: unregistering vbi20 [ 68.516435][ T6001] vivid-010: unregistering vbi21 [ 68.527779][ T6001] vivid-010: unregistering swradio10 [ 68.536830][ T6001] vivid-010: unregistering radio20 [ 68.540733][ T6001] vivid-010: unregistering radio21 [ 68.543111][ T6001] vivid-010: unregistering video49 [ 68.546075][ T6001] vivid-010: unregistering video50 [ 68.547115][ T6001] vivid-010: unregistering v4l-touch10 [ 68.576735][ T6001] vivid-011: unregistering video51 [ 68.577331][ T6001] vivid-011: unregistering video52 [ 68.577881][ T6001] vivid-011: unregistering vbi22 [ 68.583389][ T6001] vivid-011: unregistering vbi23 [ 68.589247][ T6001] vivid-011: unregistering swradio11 [ 68.595751][ T6001] vivid-011: unregistering radio22 [ 68.596522][ T6001] vivid-011: unregistering radio23 [ 68.597095][ T6001] vivid-011: unregistering video53 [ 68.597291][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 68.597529][ T43] audit: type=1400 audit(1788899258.527:224): avc: denied { write } for pid=6026 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.601486][ T6001] vivid-011: unregistering video54 [ 68.607356][ T6001] vivid-011: unregistering v4l-touch11 [ 68.640279][ T6001] vivid-012: unregistering video55 [ 68.641827][ T6001] vivid-012: unregistering video56 [ 68.642762][ T6001] vivid-012: unregistering vbi24 [ 68.645407][ T6001] vivid-012: unregistering vbi25 [ 68.646635][ T6001] vivid-012: unregistering swradio12 [ 68.648578][ T6001] vivid-012: unregistering radio24 [ 68.659972][ T6001] vivid-012: unregistering radio25 [ 68.670035][ T6001] vivid-012: unregistering video57 [ 68.674468][ T6001] vivid-012: unregistering video58 [ 68.684463][ T6001] vivid-012: unregistering v4l-touch12 [ 68.689818][ T43] audit: type=1400 audit(1788899258.617:225): avc: denied { write } for pid=6029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.719723][ T6001] vivid-013: unregistering video59 [ 68.720532][ T6001] vivid-013: unregistering video60 [ 68.721382][ T6001] vivid-013: unregistering vbi26 [ 68.723740][ T6001] vivid-013: unregistering vbi27 [ 68.724288][ T6001] vivid-013: unregistering swradio13 [ 68.724834][ T6001] vivid-013: unregistering radio26 [ 68.725272][ T6001] vivid-013: unregistering radio27 [ 68.725707][ T6001] vivid-013: unregistering video61 [ 68.726176][ T6001] vivid-013: unregistering video62 [ 68.726620][ T6001] vivid-013: unregistering v4l-touch13 [ 68.753625][ T43] audit: type=1400 audit(1788899258.687:226): avc: denied { write } for pid=6032 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.778398][ T6001] vivid-014: unregistering video63 [ 68.780523][ T6001] vivid-014: unregistering video64 [ 68.784046][ T6001] vivid-014: unregistering vbi28 [ 68.794072][ T6001] vivid-014: unregistering vbi29 [ 68.804010][ T6001] vivid-014: unregistering swradio14 [ 68.807244][ T6001] vivid-014: unregistering radio28 [ 68.813571][ T6001] vivid-014: unregistering radio29 [ 68.814525][ T6001] vivid-014: unregistering video65 [ 68.817603][ T6001] vivid-014: unregistering video66 [ 68.820781][ T6001] vivid-014: unregistering v4l-touch14 [ 68.858485][ T43] audit: type=1400 audit(1788899258.787:227): avc: denied { write } for pid=6035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.862082][ T6001] vivid-015: unregistering video67 [ 68.862981][ T6001] vivid-015: unregistering video68 [ 68.863878][ T6001] vivid-015: unregistering vbi30 [ 68.866436][ T6001] vivid-015: unregistering vbi31 [ 68.870849][ T6001] vivid-015: unregistering swradio15 [ 68.885504][ T6001] vivid-015: unregistering radio30 [ 68.898192][ T6001] vivid-015: unregistering radio31 [ 68.901087][ T6001] vivid-015: unregistering video69 [ 68.903940][ T6001] vivid-015: unregistering video70 [ 68.906514][ T6001] vivid-015: unregistering v4l-touch15 [ 68.922218][ T43] audit: type=1400 audit(1788899258.857:228): avc: denied { write } for pid=6038 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.935090][ T6001] vivid-016: unregistering video71 [ 68.937931][ T6001] vivid-016: unregistering video72 [ 68.938597][ T6001] vivid-016: unregistering vbi32 [ 68.940092][ T6001] vivid-016: unregistering vbi33 [ 68.940542][ T6001] vivid-016: unregistering swradio16 [ 68.941011][ T6001] vivid-016: unregistering radio32 [ 68.944626][ T6001] vivid-016: unregistering radio33 [ 68.948014][ T6001] vivid-016: unregistering video73 [ 68.958889][ T6001] vivid-016: unregistering video74 [ 68.969138][ T6001] vivid-016: unregistering v4l-touch16 [ 69.017106][ T6001] vivid-017: unregistering video75 [ 69.017751][ T6001] vivid-017: unregistering video76 [ 69.018989][ T6001] vivid-017: unregistering vbi34 [ 69.023991][ T6001] vivid-017: unregistering vbi35 [ 69.030933][ T6001] vivid-017: unregistering swradio17 [ 69.037235][ T6001] vivid-017: unregistering radio34 [ 69.044848][ T6001] vivid-017: unregistering radio35 [ 69.048396][ T6001] vivid-017: unregistering video77 [ 69.051049][ T6001] vivid-017: unregistering video78 [ 69.054007][ T6001] vivid-017: unregistering v4l-touch17 [ 69.077728][ T6001] vivid-018: unregistering video79 [ 69.078669][ T6001] vivid-018: unregistering video80 [ 69.080288][ T6001] vivid-018: unregistering vbi36 [ 69.082419][ T6001] vivid-018: unregistering vbi37 [ 69.085004][ T6001] vivid-018: unregistering swradio18 [ 69.095253][ T6001] vivid-018: unregistering radio36 [ 69.101062][ T6001] vivid-018: unregistering radio37 [ 69.107632][ T6001] vivid-018: unregistering video81 [ 69.108258][ T6001] vivid-018: unregistering video82 [ 69.108984][ T6001] vivid-018: unregistering v4l-touch18 [ 69.148590][ T6001] vivid-019: unregistering video83 [ 69.149611][ T6001] vivid-019: unregistering video84 [ 69.150763][ T6001] vivid-019: unregistering vbi38 [ 69.154775][ T6001] vivid-019: unregistering vbi39 [ 69.161343][ T6001] vivid-019: unregistering swradio19 [ 69.162124][ T6001] vivid-019: unregistering radio38 [ 69.163869][ T6001] vivid-019: unregistering radio39 [ 69.166306][ T6001] vivid-019: unregistering video85 [ 69.168725][ T6001] vivid-019: unregistering video86 [ 69.172765][ T6001] vivid-019: unregistering v4l-touch19 [ 69.190029][ T6001] vivid-020: unregistering video87 [ 69.190840][ T6001] vivid-020: unregistering video88 [ 69.191696][ T6001] vivid-020: unregistering vbi40 [ 69.193812][ T6001] vivid-020: unregistering vbi41 [ 69.194623][ T6001] vivid-020: unregistering swradio20 [ 69.195552][ T6001] vivid-020: unregistering radio40 [ 69.196381][ T6001] vivid-020: unregistering radio41 [ 69.197385][ T6001] vivid-020: unregistering video89 [ 69.197983][ T6001] vivid-020: unregistering video90 [ 69.198482][ T6001] vivid-020: unregistering v4l-touch20 [ 69.238315][ T6001] vivid-021: unregistering video91 [ 69.241072][ T6001] vivid-021: unregistering video92 [ 69.242078][ T6001] vivid-021: unregistering vbi42 [ 69.245063][ T6001] vivid-021: unregistering vbi43 [ 69.245925][ T6001] vivid-021: unregistering swradio21 [ 69.246862][ T6001] vivid-021: unregistering radio42 [ 69.247806][ T6001] vivid-021: unregistering radio43 [ 69.248687][ T6001] vivid-021: unregistering video93 [ 69.251825][ T6001] vivid-021: unregistering video94 [ 69.261021][ T6001] vivid-021: unregistering v4l-touch21 [ 69.279878][ T6001] vivid-022: unregistering video95 [ 69.280522][ T6001] vivid-022: unregistering video96 [ 69.283875][ T6001] vivid-022: unregistering vbi44 [ 69.285498][ T6001] vivid-022: unregistering vbi45 [ 69.288350][ T6001] vivid-022: unregistering swradio22 [ 69.289292][ T6001] vivid-022: unregistering radio44 [ 69.293127][ T6001] vivid-022: unregistering radio45 [ 69.294199][ T6001] vivid-022: unregistering video97 [ 69.294963][ T6001] vivid-022: unregistering video98 [ 69.295568][ T6001] vivid-022: unregistering v4l-touch22 [ 69.315212][ T6001] vivid-023: unregistering video99 [ 69.315831][ T6001] vivid-023: unregistering video100 [ 69.316376][ T6001] vivid-023: unregistering vbi46 [ 69.317794][ T6001] vivid-023: unregistering vbi47 [ 69.318341][ T6001] vivid-023: unregistering swradio23 [ 69.321505][ T6001] vivid-023: unregistering radio46 [ 69.322079][ T6001] vivid-023: unregistering radio47 [ 69.322891][ T6001] vivid-023: unregistering video101 [ 69.323573][ T6001] vivid-023: unregistering video102 [ 69.326482][ T6001] vivid-023: unregistering v4l-touch23 [ 69.34817 ** replaying previous printk message ** [ 69.348174][ T6001] ================================================================== [ 69.348196][ T6001] BUG: KASAN: use-after-free in media_request_release+0x18f/0x1b0 [ 69.348216][ T6001] Read of size 8 at addr ffff8881023203d0 by task syz-executor306/6001 [ 69.348224][ T6001] [ 69.348230][ T6001] CPU: 3 UID: 0 PID: 6001 Comm: syz-executor306 Not tainted syzkaller #0 PREEMPT(full) [ 69.348242][ T6001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.348248][ T6001] Call Trace: [ 69.348252][ T6001] [ 69.348256][ T6001] dump_stack_lvl+0x100/0x190 [ 69.348272][ T6001] print_report+0x13d/0x4b0 [ 69.348288][ T6001] ? __virt_addr_valid+0x239/0x430 [ 69.348299][ T6001] ? media_request_release+0x18f/0x1b0 [ 69.348316][ T6001] kasan_report+0xdf/0x1c0 [ 69.348329][ T6001] ? media_request_release+0x18f/0x1b0 [ 69.348344][ T6001] media_request_release+0x18f/0x1b0 [ 69.348357][ T6001] media_request_close+0x7e/0xc0 [ 69.348372][ T6001] ? __pfx_media_request_close+0x10/0x10 [ 69.348389][ T6001] __fput+0x3ff/0xb50 [ 69.348408][ T6001] fput_close_sync+0x118/0x250 [ 69.348428][ T6001] ? __pfx_fput_close_sync+0x10/0x10 [ 69.348451][ T6001] __x64_sys_close+0x8b/0x120 [ 69.348472][ T6001] do_syscall_64+0x123/0x790 [ 69.348493][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.348510][ T6001] RIP: 0033:0x7f3182812d77 [ 69.348523][ T6001] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 69.348539][ T6001] RSP: 002b:00007ffefac6c400 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 69.348556][ T6001] RAX: ffffffffffffffda RBX: 000055555acd3400 RCX: 00007f3182812d77 [ 69.348567][ T6001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 69.348577][ T6001] RBP: 000055555acd5770 R08: 0000000000000000 R09: 0000000000000000 [ 69.348587][ T6001] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffefac6c660 [ 69.348597][ T6001] R13: 00007f3182848025 R14: 0000000000000003 R15: 0000000000000000 [ 69.348613][ T6001] [ 69.348619][ T6001] [ 69.348623][ T6001] The buggy address belongs to the physical page: [ 69.348629][ T6001] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102320 [ 69.348643][ T6001] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 69.348656][ T6001] page_type: f0(buddy) [ 69.348670][ T6001] raw: 057ff00000000000 ffffea000416f008 ffffea00041fd808 0000000000000000 [ 69.348684][ T6001] raw: 0000000000000000 0000000000000005 00000000f0000000 0000000000000000 [ 69.348693][ T6001] page dumped because: kasan: bad access detected [ 69.348700][ T6001] page_owner tracks the page as freed [ 69.348705][ T6001] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 9464778785 [ 69.348729][ T6001] post_alloc_hook+0xfd/0x120 [ 69.348751][ T6001] get_page_from_freelist+0x110d/0x35d0 [ 69.348774][ T6001] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 69.348796][ T6001] alloc_pages_mpol+0x201/0x550 [ 69.348815][ T6001] ___kmalloc_large_node+0xe8/0x130 [ 69.348833][ T6001] __kmalloc_large_noprof+0x1c/0x70 [ 69.348866][ T6001] vivid_probe+0x1f8/0x10d0 [ 69.348879][ T6001] platform_probe+0x106/0x1d0 [ 69.348897][ T6001] really_probe+0x241/0xa60 [ 69.348909][ T6001] __driver_probe_device+0x210/0x460 [ 69.348921][ T6001] driver_probe_device+0x4a/0x140 [ 69.348933][ T6001] __driver_attach+0x21f/0x5b0 [ 69.348944][ T6001] bus_for_each_dev+0x13e/0x1d0 [ 69.348961][ T6001] bus_add_driver+0x305/0x5b0 [ 69.348979][ T6001] driver_register+0x1e2/0x360 [ 69.348992][ T6001] vivid_init+0x527/0x6a0 [ 69.349027][ T6001] page last free pid 6001 tgid 6001 ts 67739601094 stack trace: [ 69.349038][ T6001] __free_pages_ok+0x73b/0x1050 [ 69.349058][ T6001] v4l2_device_put+0xa3/0xd0 [ 69.349078][ T6001] vivid_remove+0x3fd/0x560 [ 69.349097][ T6001] platform_remove+0x5f/0x80 [ 69.349112][ T6001] device_remove+0xcb/0x180 [ 69.349123][ T6001] device_release_driver_internal+0x44e/0x620 [ 69.349137][ T6001] unbind_store+0xf8/0x110 [ 69.349154][ T6001] drv_attr_store+0x74/0xb0 [ 69.349169][ T6001] sysfs_kf_write+0xf2/0x150 [ 69.349183][ T6001] kernfs_fop_write_iter+0x3e0/0x5f0 [ 69.349195][ T6001] vfs_write+0x6af/0x1050 [ 69.349205][ T6001] ksys_write+0x12a/0x250 [ 69.349216][ T6001] do_syscall_64+0x123/0x790 [ 69.349231][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.349244][ T6001] [ 69.349246][ T6001] Memory state around the buggy address: [ 69.349253][ T6001] ffff888102320280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.349262][ T6001] ffff888102320300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.349270][ T6001] >ffff888102320380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.349277][ T6001] ^ [ 69.349283][ T6001] ffff888102320400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.349292][ T6001] ffff888102320480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.349299][ T6001] ================================================================== [ 69.349861][ T6001] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.518456][ T6001] CPU: 3 UID: 0 PID: 6001 Comm: syz-executor306 Not tainted syzkaller #0 PREEMPT(full) [ 69.521955][ T6001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.525574][ T6001] Call Trace: [ 69.526804][ T6001] [ 69.527908][ T6001] dump_stack_lvl+0x100/0x190 [ 69.529616][ T6001] vpanic+0x553/0x970 [ 69.531064][ T6001] ? __pfx_vpanic+0x10/0x10 [ 69.532690][ T6001] ? rcu_is_watching+0x13/0xc0 [ 69.534409][ T6001] ? media_request_release+0x18f/0x1b0 [ 69.536292][ T6001] panic+0xd1/0xe0 [ 69.537572][ T6001] ? __pfx_panic+0x10/0x10 [ 69.539087][ T6001] ? media_request_release+0x18f/0x1b0 [ 69.541012][ T6001] ? preempt_schedule_common+0x3c/0xb0 [ 69.543002][ T6001] check_panic_on_warn.cold+0x19/0x34 [ 69.544931][ T6001] end_report.part.0+0x3a/0x90 [ 69.546667][ T6001] kasan_report.cold+0xe/0x18 [ 69.548499][ T6001] ? media_request_release+0x18f/0x1b0 [ 69.550501][ T6001] media_request_release+0x18f/0x1b0 [ 69.552257][ T6001] media_request_close+0x7e/0xc0 [ 69.553811][ T6001] ? __pfx_media_request_close+0x10/0x10 [ 69.555573][ T6001] __fput+0x3ff/0xb50 [ 69.556828][ T6001] fput_close_sync+0x118/0x250 [ 69.558335][ T6001] ? __pfx_fput_close_sync+0x10/0x10 [ 69.559997][ T6001] __x64_sys_close+0x8b/0x120 [ 69.561448][ T6001] do_syscall_64+0x123/0x790 [ 69.562835][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.564585][ T6001] RIP: 0033:0x7f3182812d77 [ 69.565947][ T6001] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 69.571605][ T6001] RSP: 002b:00007ffefac6c400 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 69.574157][ T6001] RAX: ffffffffffffffda RBX: 000055555acd3400 RCX: 00007f3182812d77 [ 69.576611][ T6001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 69.578918][ T6001] RBP: 000055555acd5770 R08: 0000000000000000 R09: 0000000000000000 [ 69.581367][ T6001] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffefac6c660 [ 69.583751][ T6001] R13: 00007f3182848025 R14: 0000000000000003 R15: 0000000000000000 [ 69.586191][ T6001] [ 69.587909][ T6001] Kernel Offset: disabled [ 69.589210][ T6001] Rebooting in 86400 seconds..