[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.161147][ T26] audit: type=1800 audit(1573122827.465:25): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.182722][ T26] audit: type=1800 audit(1573122827.465:26): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.234604][ T26] audit: type=1800 audit(1573122827.465:27): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.25' (ECDSA) to the list of known hosts. 2019/11/07 10:33:58 parsed 1 programs 2019/11/07 10:34:00 executed programs: 0 syzkaller login: [ 70.507796][ T8896] IPVS: ftp: loaded support on port[0] = 21 [ 70.529957][ T8900] IPVS: ftp: loaded support on port[0] = 21 [ 70.531717][ T8897] IPVS: ftp: loaded support on port[0] = 21 [ 70.554179][ T8893] IPVS: ftp: loaded support on port[0] = 21 [ 70.565797][ T8902] IPVS: ftp: loaded support on port[0] = 21 [ 70.647983][ T8903] IPVS: ftp: loaded support on port[0] = 21 [ 70.813699][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 70.856196][ T8896] chnl_net:caif_netlink_parms(): no params data found [ 70.960436][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.968307][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.977408][ T8900] device bridge_slave_0 entered promiscuous mode [ 70.988098][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.995453][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.003149][ T8900] device bridge_slave_1 entered promiscuous mode [ 71.026558][ T8893] chnl_net:caif_netlink_parms(): no params data found [ 71.049938][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.058597][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.066706][ T8896] device bridge_slave_0 entered promiscuous mode [ 71.083716][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.090873][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.098795][ T8896] device bridge_slave_1 entered promiscuous mode [ 71.120037][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 71.163115][ T8902] chnl_net:caif_netlink_parms(): no params data found [ 71.174119][ T8896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.209447][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.229267][ T8896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.259776][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.291523][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.298975][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.307241][ T8897] device bridge_slave_0 entered promiscuous mode [ 71.316677][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.323738][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.331562][ T8897] device bridge_slave_1 entered promiscuous mode [ 71.348667][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.355993][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.363872][ T8893] device bridge_slave_0 entered promiscuous mode [ 71.380462][ T8896] team0: Port device team_slave_0 added [ 71.386757][ T8903] chnl_net:caif_netlink_parms(): no params data found [ 71.402044][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.409339][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.420471][ T8893] device bridge_slave_1 entered promiscuous mode [ 71.429282][ T8900] team0: Port device team_slave_0 added [ 71.443580][ T8896] team0: Port device team_slave_1 added [ 71.471263][ T8900] team0: Port device team_slave_1 added [ 71.485480][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.540910][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.558584][ T8893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.567841][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.578498][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.586409][ T8902] device bridge_slave_0 entered promiscuous mode [ 71.628215][ T8900] device hsr_slave_0 entered promiscuous mode [ 71.715029][ T8900] device hsr_slave_1 entered promiscuous mode [ 71.767628][ T8903] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.775234][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.782961][ T8903] device bridge_slave_0 entered promiscuous mode [ 71.791736][ T8893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.801351][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.808527][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.816745][ T8902] device bridge_slave_1 entered promiscuous mode [ 71.877106][ T8896] device hsr_slave_0 entered promiscuous mode [ 71.915167][ T8896] device hsr_slave_1 entered promiscuous mode [ 71.955124][ T8896] debugfs: Directory 'hsr0' with parent '/' already present! [ 71.969214][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.976512][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.984247][ T8903] device bridge_slave_1 entered promiscuous mode [ 72.019520][ T8897] team0: Port device team_slave_0 added [ 72.033064][ T8897] team0: Port device team_slave_1 added [ 72.056198][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.113940][ T8893] team0: Port device team_slave_0 added [ 72.156276][ T8893] team0: Port device team_slave_1 added [ 72.197179][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.222962][ T8903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.407740][ T8897] device hsr_slave_0 entered promiscuous mode [ 72.464941][ T8897] device hsr_slave_1 entered promiscuous mode [ 72.554635][ T8897] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.563718][ T8903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.735191][ T8902] team0: Port device team_slave_0 added [ 72.914008][ T8902] team0: Port device team_slave_1 added [ 73.018376][ T8893] device hsr_slave_0 entered promiscuous mode [ 73.175770][ T8893] device hsr_slave_1 entered promiscuous mode [ 73.314792][ T8893] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.378168][ T8903] team0: Port device team_slave_0 added [ 73.465980][ T8903] team0: Port device team_slave_1 added [ 73.907684][ T8903] device hsr_slave_0 entered promiscuous mode [ 74.014912][ T8903] device hsr_slave_1 entered promiscuous mode [ 74.125213][ T8903] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.417685][ T8902] device hsr_slave_0 entered promiscuous mode [ 74.507291][ T8902] device hsr_slave_1 entered promiscuous mode [ 74.554690][ T8902] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.715048][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.011194][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.043040][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.145723][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.206602][ T8896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.237494][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.382718][ T8896] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.513513][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.631468][ T8893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.775674][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.824734][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.833521][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.840859][ T8905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.062586][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.154916][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.163056][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.275170][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.283041][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.425260][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.433757][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.440919][ T8905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.611346][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.681786][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.755393][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.764349][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.938055][ T8893] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.014705][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.022852][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.085670][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.144668][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.201267][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.208524][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.275424][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.320644][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.385242][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.392451][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.471300][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.518156][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.560368][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.567751][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.589712][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.599984][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.610806][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.619398][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.627767][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.637140][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.645923][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.653395][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.695242][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.705515][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.714229][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.722735][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.732825][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.741819][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.751059][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.759692][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.768326][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.777307][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.787095][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.795515][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.803936][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.812347][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.821130][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.830052][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.837297][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.845178][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.853753][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.862497][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.869581][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.878027][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.886630][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.895547][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.904062][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.912507][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.922735][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.939126][ T8897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.951489][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.964036][ T8903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.980312][ T8896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.993350][ T8896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.014382][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.024338][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.033767][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.042216][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.050884][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.059328][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.068843][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.077628][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.086003][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.096144][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.104935][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.113227][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.122025][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.131062][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.139356][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.147273][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.169296][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.217696][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.229786][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.238770][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.247977][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.256480][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.263905][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.271588][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.287793][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.296444][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.303866][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.318500][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.333766][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.346534][ T8896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.359125][ T8902] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.376347][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.393437][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.408066][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.423725][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.435880][ T8903] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.458505][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.475205][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.483397][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.498413][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.508580][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.515843][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.524332][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.533257][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.541839][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.549076][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.556924][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.565962][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.574711][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.581862][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.589560][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.598510][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.607416][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.615968][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.623253][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.631424][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.642478][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.695304][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.716755][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.725874][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.735019][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.743843][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.753531][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.761124][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.768828][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.777681][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.786721][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.795546][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.804283][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.813082][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.822019][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.830768][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.839219][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.847675][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.856504][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.865506][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.873611][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.891728][ T8902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.902943][ T8902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.918536][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.937205][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.951764][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.966790][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.975522][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.996566][ T8893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.044707][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.052542][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.100291][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.148437][ T8903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.187307][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.214704][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.289086][ T8902] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/11/07 10:34:10 executed programs: 6 [ 80.576226][ C0] vcan0: j1939_tp_rxtimer: 0x000000003fa7385a: rx timeout, send abort [ 80.585461][ C0] vcan0: j1939_tp_rxtimer: 0x00000000486a7083: rx timeout, send abort [ 80.637315][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000003fa7385a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 80.652727][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000486a7083: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 80.667108][ C0] ================================================================== [ 80.675313][ C0] BUG: KASAN: use-after-free in __lock_acquire+0x3a8b/0x4a00 [ 80.675322][ C0] Read of size 8 at addr ffff8880a8259080 by task ksoftirqd/0/9 [ 80.675325][ C0] [ 80.675336][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.0-rc6+ #0 [ 80.675342][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.675345][ C0] Call Trace: [ 80.675359][ C0] dump_stack+0x197/0x210 [ 80.675369][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 80.675384][ C0] print_address_description.constprop.0.cold+0xd4/0x30b [ 80.675394][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 80.675405][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 80.675415][ C0] __kasan_report.cold+0x1b/0x41 [ 80.675427][ C0] ? can_rcv_filter+0x1a0/0x8e0 [ 80.675436][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 80.675446][ C0] kasan_report+0x12/0x20 [ 80.675457][ C0] __asan_report_load8_noabort+0x14/0x20 [ 80.675468][ C0] __lock_acquire+0x3a8b/0x4a00 [ 80.675482][ C0] ? lock_downgrade+0x920/0x920 [ 80.675493][ C0] ? mark_held_locks+0xf0/0xf0 [ 80.675505][ C0] ? trace_hardirqs_off+0x62/0x240 [ 80.675517][ C0] lock_acquire+0x190/0x410 [ 80.675527][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 80.675540][ C0] _raw_spin_lock_bh+0x33/0x50 [ 80.675549][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 80.675558][ C0] j1939_session_get_by_addr+0x2d/0x60 [ 80.675568][ C0] j1939_xtp_rx_abort_one+0x8d/0x100 [ 80.675580][ C0] ? j1939_ecu_get_by_addr_locked+0x53/0xf0 [ 80.675589][ C0] j1939_tp_recv+0x513/0x9b0 [ 80.675601][ C0] j1939_can_recv+0x4bb/0x620 [ 80.675613][ C0] can_rcv_filter+0x292/0x8e0 [ 80.675631][ C0] can_receive+0x2e7/0x530 [ 80.675644][ C0] can_rcv+0x133/0x1b0 [ 80.690980][ C0] ? can_receive+0x530/0x530 [ 80.690994][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 80.691005][ C0] ? __netif_receive_skb_core+0x3450/0x3450 [ 80.691019][ C0] ? lock_acquire+0x190/0x410 [ 80.691034][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 80.691046][ C0] __netif_receive_skb+0x2c/0x1d0 [ 80.691058][ C0] process_backlog+0x206/0x750 [ 80.691068][ C0] ? net_rx_action+0x27b/0x1120 [ 80.691080][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 80.691094][ C0] net_rx_action+0x508/0x1120 [ 80.691108][ C0] ? napi_busy_loop+0x970/0x970 [ 80.691121][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 80.691132][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 80.691144][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 80.691162][ C0] __do_softirq+0x262/0x98c [ 80.924436][ C0] ? takeover_tasklets+0x820/0x820 [ 80.929832][ C0] run_ksoftirqd+0x8e/0x110 [ 80.934531][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 80.939508][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 80.945740][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 80.952094][ C0] ? __kthread_parkme+0x108/0x1c0 [ 80.957141][ C0] ? __kasan_check_read+0x11/0x20 [ 80.962229][ C0] kthread+0x361/0x430 [ 80.966329][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 80.972574][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 80.978334][ C0] ret_from_fork+0x24/0x30 [ 80.982735][ C0] [ 80.985065][ C0] Allocated by task 9121: [ 80.989469][ C0] save_stack+0x23/0x90 [ 80.993670][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 80.999296][ C0] kasan_kmalloc+0x9/0x10 [ 81.003915][ C0] kmem_cache_alloc_trace+0x158/0x790 [ 81.009398][ C0] j1939_netdev_start+0xa4/0x550 [ 81.014330][ C0] j1939_sk_bind+0x65a/0x8e0 [ 81.018911][ C0] __sys_bind+0x239/0x290 [ 81.023229][ C0] __ia32_sys_bind+0x72/0xb0 [ 81.027844][ C0] do_fast_syscall_32+0x27b/0xdb3 [ 81.032892][ C0] entry_SYSENTER_compat+0x70/0x7f [ 81.038017][ C0] [ 81.040787][ C0] Freed by task 9: [ 81.044538][ C0] save_stack+0x23/0x90 [ 81.048714][ C0] __kasan_slab_free+0x102/0x150 [ 81.053842][ C0] kasan_slab_free+0xe/0x10 [ 81.058416][ C0] kfree+0x10a/0x2c0 [ 81.062303][ C0] j1939_priv_put+0x8b/0xb0 [ 81.066792][ C0] j1939_session_put+0x12c/0x180 [ 81.071943][ C0] j1939_xtp_rx_abort_one+0xc7/0x100 [ 81.077448][ C0] j1939_tp_recv+0x4fb/0x9b0 [ 81.082024][ C0] j1939_can_recv+0x4bb/0x620 [ 81.086828][ C0] can_rcv_filter+0x292/0x8e0 [ 81.091726][ C0] can_receive+0x2e7/0x530 [ 81.096144][ C0] can_rcv+0x133/0x1b0 [ 81.100224][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 81.106217][ C0] __netif_receive_skb+0x2c/0x1d0 [ 81.111247][ C0] process_backlog+0x206/0x750 [ 81.116086][ C0] net_rx_action+0x508/0x1120 [ 81.120786][ C0] __do_softirq+0x262/0x98c [ 81.125304][ C0] [ 81.127629][ C0] The buggy address belongs to the object at ffff8880a8258000 [ 81.127629][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 81.141933][ C0] The buggy address is located 4224 bytes inside of [ 81.141933][ C0] 8192-byte region [ffff8880a8258000, ffff8880a825a000) [ 81.155417][ C0] The buggy address belongs to the page: [ 81.161059][ C0] page:ffffea0002a09600 refcount:1 mapcount:0 mapping:ffff8880aa4021c0 index:0x0 compound_mapcount: 0 [ 81.171977][ C0] flags: 0x1fffc0000010200(slab|head) [ 81.177340][ C0] raw: 01fffc0000010200 ffffea0002961608 ffffea000259dd08 ffff8880aa4021c0 [ 81.185912][ C0] raw: 0000000000000000 ffff8880a8258000 0000000100000001 0000000000000000 [ 81.194481][ C0] page dumped because: kasan: bad access detected [ 81.201036][ C0] [ 81.203395][ C0] Memory state around the buggy address: [ 81.209011][ C0] ffff8880a8258f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.217146][ C0] ffff8880a8259000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.225200][ C0] >ffff8880a8259080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.233245][ C0] ^ [ 81.237302][ C0] ffff8880a8259100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.245346][ C0] ffff8880a8259180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.253462][ C0] ================================================================== [ 81.261569][ C0] Disabling lock debugging due to kernel taint [ 81.267706][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 81.274690][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.4.0-rc6+ #0 [ 81.283382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.293865][ C0] Call Trace: [ 81.297424][ C0] dump_stack+0x197/0x210 [ 81.301762][ C0] panic+0x2e3/0x75c [ 81.305655][ C0] ? add_taint.cold+0x16/0x16 [ 81.310551][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 81.315561][ C0] ? trace_hardirqs_off+0x62/0x240 [ 81.320750][ C0] ? trace_hardirqs_off+0x59/0x240 [ 81.325848][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 81.330918][ C0] end_report+0x47/0x4f [ 81.335063][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 81.340102][ C0] __kasan_report.cold+0xe/0x41 [ 81.344952][ C0] ? can_rcv_filter+0x1a0/0x8e0 [ 81.349797][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 81.354813][ C0] kasan_report+0x12/0x20 [ 81.359138][ C0] __asan_report_load8_noabort+0x14/0x20 [ 81.365906][ C0] __lock_acquire+0x3a8b/0x4a00 [ 81.370805][ C0] ? lock_downgrade+0x920/0x920 [ 81.375691][ C0] ? mark_held_locks+0xf0/0xf0 [ 81.380444][ C0] ? trace_hardirqs_off+0x62/0x240 [ 81.385540][ C0] lock_acquire+0x190/0x410 [ 81.390032][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 81.395654][ C0] _raw_spin_lock_bh+0x33/0x50 [ 81.400445][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 81.406064][ C0] j1939_session_get_by_addr+0x2d/0x60 [ 81.411514][ C0] j1939_xtp_rx_abort_one+0x8d/0x100 [ 81.416839][ C0] ? j1939_ecu_get_by_addr_locked+0x53/0xf0 [ 81.422812][ C0] j1939_tp_recv+0x513/0x9b0 [ 81.427442][ C0] j1939_can_recv+0x4bb/0x620 [ 81.432186][ C0] can_rcv_filter+0x292/0x8e0 [ 81.436857][ C0] can_receive+0x2e7/0x530 [ 81.441262][ C0] can_rcv+0x133/0x1b0 [ 81.445357][ C0] ? can_receive+0x530/0x530 [ 81.450285][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 81.456247][ C0] ? __netif_receive_skb_core+0x3450/0x3450 [ 81.462128][ C0] ? lock_acquire+0x190/0x410 [ 81.466829][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.473062][ C0] __netif_receive_skb+0x2c/0x1d0 [ 81.478095][ C0] process_backlog+0x206/0x750 [ 81.482849][ C0] ? net_rx_action+0x27b/0x1120 [ 81.487752][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 81.493030][ C0] net_rx_action+0x508/0x1120 [ 81.497697][ C0] ? napi_busy_loop+0x970/0x970 [ 81.502539][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 81.508080][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 81.514226][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.520512][ C0] __do_softirq+0x262/0x98c [ 81.525009][ C0] ? takeover_tasklets+0x820/0x820 [ 81.530196][ C0] run_ksoftirqd+0x8e/0x110 [ 81.534693][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 81.539712][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 81.546051][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 81.552317][ C0] ? __kthread_parkme+0x108/0x1c0 [ 81.557327][ C0] ? __kasan_check_read+0x11/0x20 [ 81.562435][ C0] kthread+0x361/0x430 [ 81.566509][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 81.572858][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 81.578604][ C0] ret_from_fork+0x24/0x30 [ 81.584403][ C0] Kernel Offset: disabled [ 81.589077][ C0] Rebooting in 86400 seconds..