[ 35.585384] audit: type=1800 audit(1551543661.808:27): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 35.607141] audit: type=1800 audit(1551543661.808:28): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.375653] audit: type=1800 audit(1551543662.658:29): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.399007] audit: type=1800 audit(1551543662.658:30): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. 2019/03/02 16:22:14 parsed 1 programs 2019/03/02 16:22:17 executed programs: 0 syzkaller login: [ 111.242390] IPVS: ftp: loaded support on port[0] = 21 [ 111.253217] IPVS: ftp: loaded support on port[0] = 21 [ 111.267072] IPVS: ftp: loaded support on port[0] = 21 [ 111.284070] IPVS: ftp: loaded support on port[0] = 21 [ 111.303304] IPVS: ftp: loaded support on port[0] = 21 [ 111.305936] IPVS: ftp: loaded support on port[0] = 21 [ 111.565756] chnl_net:caif_netlink_parms(): no params data found [ 111.581337] chnl_net:caif_netlink_parms(): no params data found [ 111.599867] chnl_net:caif_netlink_parms(): no params data found [ 111.696204] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.703435] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.710378] device bridge_slave_0 entered promiscuous mode [ 111.753326] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.759687] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.766685] device bridge_slave_0 entered promiscuous mode [ 111.773860] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.780218] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.787451] device bridge_slave_1 entered promiscuous mode [ 111.794163] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.800499] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.807536] device bridge_slave_1 entered promiscuous mode [ 111.813970] chnl_net:caif_netlink_parms(): no params data found [ 111.887436] chnl_net:caif_netlink_parms(): no params data found [ 111.895040] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.901754] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.908793] device bridge_slave_0 entered promiscuous mode [ 111.920598] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.927048] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.934320] device bridge_slave_1 entered promiscuous mode [ 111.962564] chnl_net:caif_netlink_parms(): no params data found [ 111.979397] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.995507] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.009880] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.024132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.048094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.062281] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.094695] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.101082] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.110819] device bridge_slave_0 entered promiscuous mode [ 112.132527] team0: Port device team_slave_0 added [ 112.154155] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.160538] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.167517] device bridge_slave_1 entered promiscuous mode [ 112.184979] team0: Port device team_slave_0 added [ 112.194716] team0: Port device team_slave_0 added [ 112.200740] team0: Port device team_slave_1 added [ 112.211426] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.219007] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.226049] device bridge_slave_0 entered promiscuous mode [ 112.238012] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.245414] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.252590] device bridge_slave_1 entered promiscuous mode [ 112.259681] team0: Port device team_slave_1 added [ 112.266556] team0: Port device team_slave_1 added [ 112.283712] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.290110] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.297218] device bridge_slave_0 entered promiscuous mode [ 112.305385] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.314852] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.375034] device hsr_slave_0 entered promiscuous mode [ 112.412627] device hsr_slave_1 entered promiscuous mode [ 112.472763] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.479160] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.487078] device bridge_slave_1 entered promiscuous mode [ 112.506027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.553721] device hsr_slave_0 entered promiscuous mode [ 112.602644] device hsr_slave_1 entered promiscuous mode [ 112.652044] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.658586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.665697] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.672099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.698397] team0: Port device team_slave_0 added [ 112.704754] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.715810] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.722746] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.747676] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.764171] team0: Port device team_slave_1 added [ 112.805043] device hsr_slave_0 entered promiscuous mode [ 112.852467] device hsr_slave_1 entered promiscuous mode [ 112.906363] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.937159] team0: Port device team_slave_0 added [ 112.946527] team0: Port device team_slave_1 added [ 112.985003] device hsr_slave_0 entered promiscuous mode [ 113.022571] device hsr_slave_1 entered promiscuous mode [ 113.063970] team0: Port device team_slave_0 added [ 113.088437] team0: Port device team_slave_1 added [ 113.175034] device hsr_slave_0 entered promiscuous mode [ 113.242407] device hsr_slave_1 entered promiscuous mode [ 113.322779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.383688] device hsr_slave_0 entered promiscuous mode [ 113.433500] device hsr_slave_1 entered promiscuous mode [ 113.488860] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.517225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.524817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.551861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.559889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.567898] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.574299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.581613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.590198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.597803] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.604171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.610932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.619107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.626889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.634757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.642408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.649995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.658522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.684551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.718246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.726129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.736560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.747413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.765613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.777343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.786841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.798185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.806621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.838857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.847436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.858985] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.871321] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.881247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.887883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.895589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.903604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.910490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.926467] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.937177] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.949659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.957903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.967842] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.974251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.981065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.988355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.995486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.003620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.011132] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.017520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.025044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.032954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.040508] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.046905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.094558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.103201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.110542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.119140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.127419] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.133829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.141430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.150492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.158556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.166576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.178020] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.184451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.191446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.199510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.207453] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.213839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.220666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.228540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.236241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.244155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.251692] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.258076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.265071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.273318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.280863] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.287433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.294274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.301987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.311036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.319057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.326984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.334683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.342377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.350020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.357969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.365192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.372466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.390333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.401948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.440143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.447093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.459261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.468745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.477118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.484759] hrtimer: interrupt took 34746 ns [ 114.485676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.502684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.510498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.524102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.565130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.588126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.600667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.608239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.616431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.624995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.633209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.641627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.649887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.658133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.666446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.674598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.682780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.690694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.700570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.709100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.717536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.733084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.740820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.748865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.761582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.769479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.777409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.800681] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.829328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.841875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.850155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.861923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.871490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.886545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.908496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.938996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.948519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.968394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.977869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.998689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.009693] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.016102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.040078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.053911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.061626] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.068022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.083182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.142869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.152593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.194030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.235327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.278562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.336801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.366595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.385179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.413138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.420600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.428697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.447640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.459522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.521670] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/03/02 16:22:22 executed programs: 28 2019/03/02 16:22:27 executed programs: 144 [ 121.833859] ================================================================== [ 121.841398] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 121.848064] Read of size 8 at addr ffff888085f06c00 by task ksoftirqd/0/9 [ 121.854977] [ 121.856602] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.0.0-rc8+ #1 [ 121.863175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.872524] Call Trace: [ 121.875124] dump_stack+0x172/0x1f0 [ 121.878763] ? ccid_hc_tx_delete+0xde/0x100 [ 121.883089] print_address_description.cold+0x7c/0x20d [ 121.888362] ? ccid_hc_tx_delete+0xde/0x100 [ 121.892682] ? ccid_hc_tx_delete+0xde/0x100 [ 121.897008] kasan_report.cold+0x1b/0x40 [ 121.901070] ? ccid_hc_tx_delete+0xde/0x100 [ 121.905412] __asan_report_load8_noabort+0x14/0x20 [ 121.910343] ccid_hc_tx_delete+0xde/0x100 [ 121.914495] dccp_sk_destruct+0x3f/0x90 [ 121.918471] ? dccp_init_sock+0x3f0/0x3f0 [ 121.922619] __sk_destruct+0x55/0x6d0 [ 121.926421] ? sock_no_getname+0x10/0x10 [ 121.930487] rcu_process_callbacks+0x928/0x1390 [ 121.935165] ? rcu_check_gp_start_stall+0x240/0x240 [ 121.940192] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 121.945645] __do_softirq+0x266/0x95a [ 121.949453] ? pci_mmcfg_check_reserved+0x170/0x170 [ 121.954478] ? takeover_tasklets+0x7b0/0x7b0 [ 121.958886] run_ksoftirqd+0x8e/0x110 [ 121.962686] smpboot_thread_fn+0x6ab/0xa10 [ 121.966926] ? sort_range+0x30/0x30 [ 121.970552] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 121.976088] ? __kthread_parkme+0xfb/0x1b0 [ 121.980328] kthread+0x357/0x430 [ 121.983691] ? sort_range+0x30/0x30 [ 121.987323] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 121.992868] ret_from_fork+0x3a/0x50 [ 121.996599] [ 121.998220] Allocated by task 8380: [ 122.001850] save_stack+0x45/0xd0 [ 122.005317] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 122.010247] kasan_slab_alloc+0xf/0x20 [ 122.014137] kmem_cache_alloc+0x11a/0x6f0 [ 122.018288] ccid_new+0x256/0x3f0 [ 122.021743] dccp_hdlr_ccid+0x27/0x150 [ 122.025626] __dccp_feat_activate+0x17a/0x270 [ 122.030118] dccp_feat_activate_values+0x33a/0x766 [ 122.035042] dccp_rcv_state_process+0x116f/0x1931 [ 122.039895] dccp_v6_do_rcv+0x269/0xbf0 [ 122.043870] __release_sock+0x12e/0x3a0 [ 122.047839] release_sock+0x59/0x1c0 [ 122.051567] __inet_stream_connect+0x59f/0xea0 [ 122.056156] inet_stream_connect+0x58/0xa0 [ 122.060390] __sys_connect+0x266/0x330 [ 122.064275] __ia32_sys_connect+0x72/0xb0 [ 122.068436] do_fast_syscall_32+0x281/0xc98 [ 122.072757] entry_SYSENTER_compat+0x70/0x7f [ 122.077154] [ 122.078777] Freed by task 8387: [ 122.082091] save_stack+0x45/0xd0 [ 122.085842] __kasan_slab_free+0x102/0x150 [ 122.090082] kasan_slab_free+0xe/0x10 [ 122.093930] kmem_cache_free+0x86/0x260 [ 122.097915] ccid_hc_tx_delete+0xc1/0x100 [ 122.102089] dccp_hdlr_ccid+0x7d/0x150 [ 122.105991] __dccp_feat_activate+0x17a/0x270 [ 122.110513] dccp_feat_activate_values+0x33a/0x766 [ 122.115467] dccp_create_openreq_child+0x40c/0x570 [ 122.120422] dccp_v6_request_recv_sock+0x214/0x1da0 [ 122.125440] dccp_check_req+0x35c/0x6f0 [ 122.129426] dccp_v6_rcv+0x6d7/0x191e [ 122.133234] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 122.138165] ip6_input_finish+0x84/0x170 [ 122.142227] ip6_input+0xe4/0x3f0 [ 122.145681] ip6_rcv_finish+0x1e7/0x320 [ 122.149659] ipv6_rcv+0x10e/0x420 [ 122.153114] __netif_receive_skb_one_core+0x115/0x1a0 [ 122.158324] __netif_receive_skb+0x2c/0x1c0 [ 122.162647] process_backlog+0x206/0x750 [ 122.166708] net_rx_action+0x4fa/0x1070 [ 122.170682] __do_softirq+0x266/0x95a [ 122.174484] [ 122.176116] The buggy address belongs to the object at ffff888085f06c00 [ 122.176116] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 122.189477] The buggy address is located 0 bytes inside of [ 122.189477] 1240-byte region [ffff888085f06c00, ffff888085f070d8) [ 122.201260] The buggy address belongs to the page: [ 122.206201] page:ffffea000217c180 count:1 mapcount:0 mapping:ffff88821655fd80 index:0x0 compound_mapcount: 0 [ 122.216258] flags: 0x1fffc0000010200(slab|head) [ 122.220942] raw: 01fffc0000010200 ffffea0002291c88 ffffea0002636f88 ffff88821655fd80 [ 122.228856] raw: 0000000000000000 ffff888085f06100 0000000100000005 0000000000000000 [ 122.236742] page dumped because: kasan: bad access detected [ 122.242445] [ 122.244066] Memory state around the buggy address: [ 122.248995] ffff888085f06b00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 122.256352] ffff888085f06b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.263707] >ffff888085f06c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.271061] ^ [ 122.274423] ffff888085f06c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.281779] ffff888085f06d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.289134] ================================================================== [ 122.296488] Disabling lock debugging due to kernel taint [ 122.302043] Kernel panic - not syncing: panic_on_warn set ... [ 122.307934] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.0.0-rc8+ #1 [ 122.315904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.325265] Call Trace: [ 122.327879] dump_stack+0x172/0x1f0 [ 122.331513] panic+0x2cb/0x65c [ 122.334714] ? __warn_printk+0xf3/0xf3 [ 122.338617] ? retint_kernel+0x2d/0x2d [ 122.342612] ? trace_hardirqs_on+0x5e/0x230 [ 122.346942] ? ccid_hc_tx_delete+0xde/0x100 [ 122.351330] end_report+0x47/0x4f [ 122.354814] ? ccid_hc_tx_delete+0xde/0x100 [ 122.359146] kasan_report.cold+0xe/0x40 [ 122.363124] ? ccid_hc_tx_delete+0xde/0x100 [ 122.367452] __asan_report_load8_noabort+0x14/0x20 [ 122.372395] ccid_hc_tx_delete+0xde/0x100 [ 122.376650] dccp_sk_destruct+0x3f/0x90 [ 122.380626] ? dccp_init_sock+0x3f0/0x3f0 [ 122.384784] __sk_destruct+0x55/0x6d0 [ 122.388592] ? sock_no_getname+0x10/0x10 [ 122.392665] rcu_process_callbacks+0x928/0x1390 [ 122.397354] ? rcu_check_gp_start_stall+0x240/0x240 [ 122.402390] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 122.407856] __do_softirq+0x266/0x95a [ 122.411666] ? pci_mmcfg_check_reserved+0x170/0x170 [ 122.416695] ? takeover_tasklets+0x7b0/0x7b0 [ 122.421104] run_ksoftirqd+0x8e/0x110 [ 122.424909] smpboot_thread_fn+0x6ab/0xa10 [ 122.429150] ? sort_range+0x30/0x30 [ 122.432783] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 122.438328] ? __kthread_parkme+0xfb/0x1b0 [ 122.442570] kthread+0x357/0x430 [ 122.445937] ? sort_range+0x30/0x30 [ 122.449566] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 122.452467] kobject: 'loop2' (0000000080e0bfdc): kobject_uevent_env [ 122.455543] ret_from_fork+0x3a/0x50 [ 122.461961] kobject: 'loop2' (0000000080e0bfdc): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 122.466677] Kernel Offset: disabled [ 122.479728] Rebooting in 86400 seconds..