[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.673449][ T26] audit: type=1800 audit(1574307304.230:25): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.695016][ T26] audit: type=1800 audit(1574307304.230:26): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.715754][ T26] audit: type=1800 audit(1574307304.230:27): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.251' (ECDSA) to the list of known hosts. syzkaller login: [ 64.938481][ T8711] IPVS: ftp: loaded support on port[0] = 21 [ 65.000674][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 65.027747][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.035218][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.043053][ T8711] device bridge_slave_0 entered promiscuous mode [ 65.051473][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.058632][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.066273][ T8711] device bridge_slave_1 entered promiscuous mode [ 65.083098][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.093901][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.113119][ T8711] team0: Port device team_slave_0 added [ 65.120377][ T8711] team0: Port device team_slave_1 added [ 65.187544][ T8711] device hsr_slave_0 entered promiscuous mode [ 65.236041][ T8711] device hsr_slave_1 entered promiscuous mode [ 65.378663][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.385945][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.393968][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.401130][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.539538][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.580887][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.617187][ T2864] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.667935][ T2864] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.695810][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.731675][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.786784][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.815772][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.822900][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.876898][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.908084][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.915181][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.964167][ T8711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.002899][ T8711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.023489][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.047816][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.056506][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.074172][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.083550][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.091855][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.122671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.130250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.141197][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 67.438352][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a2253d36: rx timeout, send abort [ 67.447218][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a2253d36: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 67.462016][ C0] ------------[ cut here ]------------ [ 67.467607][ C0] WARNING: CPU: 0 PID: 9 at net/can/j1939/socket.c:180 j1939_sk_queue_activate_next+0x359/0x460 [ 67.477990][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 67.484613][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.0-rc8-syzkaller #0 [ 67.492648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.502701][ C0] Call Trace: [ 67.505975][ C0] dump_stack+0x197/0x210 [ 67.510282][ C0] ? j1939_sk_queue_activate_next+0x280/0x460 [ 67.516326][ C0] panic+0x2e3/0x75c [ 67.520238][ C0] ? add_taint.cold+0x16/0x16 [ 67.524917][ C0] ? printk+0xba/0xed [ 67.528899][ C0] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 67.534347][ C0] ? __warn.cold+0x14/0x35 [ 67.538747][ C0] ? __warn+0xd9/0x1d0 [ 67.542800][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 67.548847][ C0] __warn.cold+0x2f/0x35 [ 67.553068][ C0] ? report_bug.cold+0x63/0xad [ 67.557821][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 67.563865][ C0] report_bug+0x289/0x300 [ 67.568175][ C0] do_error_trap+0x11b/0x200 [ 67.572742][ C0] do_invalid_op+0x37/0x50 [ 67.577133][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 67.583184][ C0] invalid_op+0x23/0x30 [ 67.587334][ C0] RIP: 0010:j1939_sk_queue_activate_next+0x359/0x460 [ 67.593981][ C0] Code: e8 1c 83 c0 0a 89 45 cc eb 9f 48 c7 c7 b4 aa c6 89 e8 3b 15 2f fb e9 6a fd ff ff e8 31 15 2f fb e9 19 fe ff ff e8 d7 a9 f3 fa <0f> 0b 48 8b 45 c0 48 8d b8 b0 00 00 00 48 89 f8 48 c1 e8 03 42 0f [ 67.613571][ C0] RSP: 0018:ffff8880a98af918 EFLAGS: 00010206 [ 67.619613][ C0] RAX: ffff8880a98a2240 RBX: ffff8880a9283000 RCX: ffffffff867fac38 [ 67.627559][ C0] RDX: 0000000000000100 RSI: ffffffff867facd9 RDI: 0000000000000005 [ 67.635519][ C0] RBP: ffff8880a98af970 R08: ffff8880a98a2240 R09: fffffbfff14f014c [ 67.643466][ C0] R10: fffffbfff14f014b R11: ffffffff8a780a5f R12: ffff8880a9283510 [ 67.651412][ C0] R13: ffff8880a42c6800 R14: ffff8880a9283548 R15: dffffc0000000000 [ 67.659373][ C0] ? j1939_sk_queue_activate_next+0x2b8/0x460 [ 67.665418][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 67.671475][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 67.677515][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 67.682896][ C0] j1939_session_deactivate_activate_next+0x3d/0x50 [ 67.689485][ C0] j1939_xtp_rx_abort_one.cold+0x21a/0x35e [ 67.695275][ C0] ? j1939_ecu_get_by_addr_locked+0x63/0xf0 [ 67.701152][ C0] j1939_tp_recv+0x783/0x9b0 [ 67.705726][ C0] j1939_can_recv+0x502/0x610 [ 67.710403][ C0] can_rcv_filter+0x292/0x8e0 [ 67.715082][ C0] can_receive+0x2e7/0x530 [ 67.719488][ C0] can_rcv+0x133/0x1b0 [ 67.723539][ C0] ? can_receive+0x530/0x530 [ 67.728111][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 67.733982][ C0] ? __netif_receive_skb_core+0x3450/0x3450 [ 67.739874][ C0] ? lock_acquire+0x190/0x410 [ 67.744537][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.750759][ C0] __netif_receive_skb+0x2c/0x1d0 [ 67.755775][ C0] process_backlog+0x206/0x750 [ 67.760513][ C0] ? net_rx_action+0x27b/0x1120 [ 67.765348][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 67.770615][ C0] net_rx_action+0x508/0x1120 [ 67.775272][ C0] ? napi_busy_loop+0x970/0x970 [ 67.780099][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 67.785624][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 67.791580][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.797798][ C0] __do_softirq+0x262/0x98c [ 67.802282][ C0] ? takeover_tasklets+0x820/0x820 [ 67.807377][ C0] run_ksoftirqd+0x8e/0x110 [ 67.811858][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 67.816791][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 67.823005][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 67.829223][ C0] ? __kthread_parkme+0x108/0x1c0 [ 67.834232][ C0] ? __kasan_check_read+0x11/0x20 [ 67.839255][ C0] kthread+0x361/0x430 [ 67.843320][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 67.849553][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 67.855263][ C0] ret_from_fork+0x24/0x30 [ 67.861007][ C0] Kernel Offset: disabled [ 67.865413][ C0] Rebooting in 86400 seconds..