[ 39.684390][ T26] audit: type=1800 audit(1573481517.765:27): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 39.684407][ T26] audit: type=1800 audit(1573481517.765:28): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.358850][ T26] audit: type=1800 audit(1573481518.475:29): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 40.378204][ T26] audit: type=1800 audit(1573481518.475:30): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.173' (ECDSA) to the list of known hosts. 2019/11/11 14:12:06 parsed 1 programs 2019/11/11 14:12:08 executed programs: 0 syzkaller login: [ 50.971924][ T7887] IPVS: ftp: loaded support on port[0] = 21 [ 50.987564][ T7891] IPVS: ftp: loaded support on port[0] = 21 [ 50.988811][ T7889] IPVS: ftp: loaded support on port[0] = 21 [ 51.005765][ T7883] IPVS: ftp: loaded support on port[0] = 21 [ 51.007171][ T7884] IPVS: ftp: loaded support on port[0] = 21 [ 51.019719][ T7892] IPVS: ftp: loaded support on port[0] = 21 [ 51.194163][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 51.277448][ T7887] chnl_net:caif_netlink_parms(): no params data found [ 51.375032][ T7892] chnl_net:caif_netlink_parms(): no params data found [ 51.385306][ T7883] chnl_net:caif_netlink_parms(): no params data found [ 51.394078][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.401139][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.409448][ T7889] device bridge_slave_0 entered promiscuous mode [ 51.420330][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.427485][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.435693][ T7889] device bridge_slave_1 entered promiscuous mode [ 51.445315][ T7891] chnl_net:caif_netlink_parms(): no params data found [ 51.522472][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.531060][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.538999][ T7892] device bridge_slave_0 entered promiscuous mode [ 51.547394][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.570356][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.577673][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.585404][ T7887] device bridge_slave_0 entered promiscuous mode [ 51.597725][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.605832][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.614211][ T7892] device bridge_slave_1 entered promiscuous mode [ 51.621937][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.643286][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.652322][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.660160][ T7887] device bridge_slave_1 entered promiscuous mode [ 51.667249][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 51.700503][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.711824][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.719258][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.727960][ T7891] device bridge_slave_0 entered promiscuous mode [ 51.740319][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.747531][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.758465][ T7891] device bridge_slave_1 entered promiscuous mode [ 51.779392][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.786943][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.794675][ T7883] device bridge_slave_0 entered promiscuous mode [ 51.802698][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.832688][ T7892] team0: Port device team_slave_0 added [ 51.842124][ T7889] team0: Port device team_slave_0 added [ 51.850086][ T7891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.859575][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.866855][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.874835][ T7883] device bridge_slave_1 entered promiscuous mode [ 51.882752][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.893956][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.904801][ T7892] team0: Port device team_slave_1 added [ 51.916478][ T7889] team0: Port device team_slave_1 added [ 51.927935][ T7891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.950941][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.959534][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.967973][ T7884] device bridge_slave_0 entered promiscuous mode [ 51.980239][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.987408][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.995117][ T7884] device bridge_slave_1 entered promiscuous mode [ 52.026626][ T7887] team0: Port device team_slave_0 added [ 52.086824][ T7892] device hsr_slave_0 entered promiscuous mode [ 52.124151][ T7892] device hsr_slave_1 entered promiscuous mode [ 52.171282][ T7883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.182467][ T7883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.198837][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.214230][ T7887] team0: Port device team_slave_1 added [ 52.222236][ T7891] team0: Port device team_slave_0 added [ 52.245741][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.274402][ T7891] team0: Port device team_slave_1 added [ 52.347166][ T7889] device hsr_slave_0 entered promiscuous mode [ 52.378125][ T7889] device hsr_slave_1 entered promiscuous mode [ 52.424643][ T7889] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.434437][ T7883] team0: Port device team_slave_0 added [ 52.441916][ T7884] team0: Port device team_slave_0 added [ 52.477227][ T7887] device hsr_slave_0 entered promiscuous mode [ 52.533970][ T7887] device hsr_slave_1 entered promiscuous mode [ 52.589128][ T7887] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.622906][ T7884] team0: Port device team_slave_1 added [ 52.666276][ T7883] team0: Port device team_slave_1 added [ 52.916250][ T7891] device hsr_slave_0 entered promiscuous mode [ 52.949315][ T7891] device hsr_slave_1 entered promiscuous mode [ 53.069987][ T7891] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.146857][ T7884] device hsr_slave_0 entered promiscuous mode [ 53.184360][ T7884] device hsr_slave_1 entered promiscuous mode [ 53.219169][ T7884] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.456484][ T7883] device hsr_slave_0 entered promiscuous mode [ 53.613993][ T7883] device hsr_slave_1 entered promiscuous mode [ 53.685962][ T7883] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.900760][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.071983][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.126526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.283030][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.447409][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.571960][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.653819][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.663167][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.774098][ T2825] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.781361][ T2825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.903818][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.912547][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.044247][ T2825] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.051429][ T2825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.143904][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.179283][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.270380][ T7887] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.325147][ T7892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.353602][ T7892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.534111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.542564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.624640][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.633382][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.761166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.814390][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.822912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.934169][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.943128][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.054103][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.062460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.173338][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.234915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.242714][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.278015][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.287424][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.296561][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.303798][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.311458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.320102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.328407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.335518][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.342972][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.351543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.360401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.368434][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.376180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.406227][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.425466][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.432385][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.441488][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.450299][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.457389][ T7970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.465015][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.473853][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.482110][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.489208][ T7970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.496826][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.505508][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.514146][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.522555][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.531517][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.539968][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.548338][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.556872][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.565304][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.573675][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.582350][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.590297][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.597982][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.612932][ T7891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.624186][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.631645][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.639781][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.648678][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.663369][ T7889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.675346][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.699255][ T7891] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.707930][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.719276][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.727710][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.736026][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.743869][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.751504][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.759399][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.767388][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.775354][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.783844][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.794218][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.810233][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.822239][ T7883] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.833973][ T7887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.848149][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.869316][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.878205][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.887007][ T2612] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.894110][ T2612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.901926][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.911289][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.919713][ T2612] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.928084][ T2612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.936521][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.945863][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.954563][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.963252][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.972071][ T2612] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.979181][ T2612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.987281][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.996411][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.004832][ T2612] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.011881][ T2612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.019734][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.028565][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.036594][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.044121][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.051942][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.077569][ T7889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.104761][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.120434][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.131598][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.138784][ T8040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.147299][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.156038][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.164697][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.171750][ T8040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.179459][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.188396][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.197158][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.205812][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.214791][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.224608][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.232500][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.262493][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.281170][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.309864][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.318812][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 2019/11/11 14:12:15 executed programs: 6 [ 57.330873][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.338795][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.352386][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.361862][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.380620][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.396618][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.409741][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.420347][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.435168][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.462754][ T7891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.481183][ T7883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.510172][ T7883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.528149][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.542332][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.550086][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.559049][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.569747][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.578410][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.587350][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.602016][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.621512][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.649718][ T7884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.660258][ T7884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.688995][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.714820][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.744800][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.767694][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.802097][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.818507][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.846903][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.861196][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.878803][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.898671][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.907265][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.988595][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.020001][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.066049][ T7883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.085892][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.093449][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.121240][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.688317][ C1] vcan0: j1939_tp_rxtimer: 0x0000000047e7c043: rx timeout, send abort [ 59.700548][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ace5de12: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 59.738909][ C1] vcan0: j1939_tp_txtimer: 0x000000001c3d2101: tx aborted with unknown reason: -2 [ 60.196937][ C1] vcan0: j1939_tp_rxtimer: 0x0000000047e7c043: abort rx timeout. Force session deactivation [ 60.249404][ C1] vcan0: j1939_tp_rxtimer: 0x000000001c3d2101: abort rx timeout. Force session deactivation [ 62.232560][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f356a7ff: rx timeout, send abort [ 62.255210][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000004fb783d4: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.269510][ C0] vcan0: j1939_tp_rxtimer: 0x0000000039ad6af9: rx timeout, send abort [ 62.269586][ C0] vcan0: j1939_tp_rxtimer: 0x0000000047e1a7c9: rx timeout, send abort [ 62.277806][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000781b2b70: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.291101][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000039ad6af9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.315285][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000047e1a7c9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.329863][ C0] ================================================================== [ 62.338198][ C0] BUG: KASAN: use-after-free in __lock_acquire+0x96/0x1be0 [ 62.345478][ C0] Read of size 8 at addr ffff88809835d080 by task ksoftirqd/0/9 [ 62.345480][ C0] [ 62.345489][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.0-rc6+ #0 [ 62.345493][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.345496][ C0] Call Trace: [ 62.345510][ C0] dump_stack+0x1fb/0x318 [ 62.345519][ C0] print_address_description+0x75/0x5c0 [ 62.345533][ C0] ? vprintk_default+0x28/0x30 [ 62.345540][ C0] ? vprintk_func+0x158/0x170 [ 62.345545][ C0] ? printk+0x62/0x8d [ 62.345552][ C0] __kasan_report+0x14b/0x1c0 [ 62.363005][ C0] ? kfree+0xa0/0x200 [ 62.363015][ C0] ? __lock_acquire+0x96/0x1be0 [ 62.363025][ C0] ? __do_softirq+0x333/0x7c4 [ 62.363034][ C0] kasan_report+0x26/0x50 [ 62.363042][ C0] ? net_rx_action+0x5ef/0x10d0 [ 62.363048][ C0] ? __do_softirq+0x333/0x7c4 [ 62.363056][ C0] __asan_report_load8_noabort+0x14/0x20 [ 62.363070][ C0] __lock_acquire+0x96/0x1be0 [ 62.411058][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0xe0 [ 62.425483][ C0] ? trace_lock_acquire+0x159/0x1d0 [ 62.425491][ C0] lock_acquire+0x158/0x250 [ 62.425502][ C0] ? j1939_xtp_rx_abort_one+0x89/0x3f0 [ 62.425511][ C0] ? j1939_xtp_rx_abort_one+0x89/0x3f0 [ 62.425520][ C0] _raw_spin_lock_bh+0x34/0x50 [ 62.425527][ C0] ? j1939_xtp_rx_abort_one+0x89/0x3f0 [ 62.425535][ C0] j1939_xtp_rx_abort_one+0x89/0x3f0 [ 62.425544][ C0] j1939_tp_recv+0x731/0xb80 [ 62.425553][ C0] j1939_can_recv+0x424/0x650 [ 62.425559][ C0] ? j1939_send_one+0x3e0/0x3e0 [ 62.425565][ C0] can_rcv_filter+0x3c0/0x8b0 [ 62.425573][ C0] can_receive+0x2ac/0x3b0 [ 62.425580][ C0] can_rcv+0xe4/0x220 [ 62.425586][ C0] ? rcu_lock_release+0x30/0x30 [ 62.425594][ C0] __netif_receive_skb+0x136/0x370 [ 62.425612][ C0] process_backlog+0x4d8/0x930 [ 62.543012][ C0] net_rx_action+0x5ef/0x10d0 [ 62.548717][ C0] __do_softirq+0x333/0x7c4 [ 62.553215][ C0] ? run_ksoftirqd+0x64/0xf0 [ 62.557997][ C0] run_ksoftirqd+0x64/0xf0 [ 62.562586][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 62.567859][ C0] smpboot_thread_fn+0x5b3/0x9a0 [ 62.572787][ C0] kthread+0x332/0x350 [ 62.577020][ C0] ? cpu_report_death+0x120/0x120 [ 62.582030][ C0] ? kthread_blkcg+0xe0/0xe0 [ 62.586625][ C0] ret_from_fork+0x24/0x30 [ 62.591108][ C0] [ 62.593424][ C0] Allocated by task 8493: [ 62.597739][ C0] __kasan_kmalloc+0x11c/0x1b0 [ 62.602585][ C0] kasan_kmalloc+0x9/0x10 [ 62.606917][ C0] kmem_cache_alloc_trace+0x221/0x2f0 [ 62.612299][ C0] j1939_netdev_start+0x177/0x730 [ 62.617310][ C0] j1939_sk_bind+0x2c0/0xac0 [ 62.621927][ C0] __sys_bind+0x2c2/0x3a0 [ 62.626237][ C0] __x64_sys_bind+0x7a/0x90 [ 62.630728][ C0] do_syscall_64+0xf7/0x1c0 [ 62.635235][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 62.641331][ C0] [ 62.643798][ C0] Freed by task 9: [ 62.647672][ C0] __kasan_slab_free+0x12a/0x1e0 [ 62.652731][ C0] kasan_slab_free+0xe/0x10 [ 62.657324][ C0] kfree+0x115/0x200 [ 62.662347][ C0] j1939_priv_put+0x86/0xa0 [ 62.669620][ C0] j1939_session_put+0xfe/0x150 [ 62.676078][ C0] j1939_xtp_rx_abort_one+0xd3/0x3f0 [ 62.681396][ C0] j1939_tp_recv+0x719/0xb80 [ 62.685965][ C0] j1939_can_recv+0x424/0x650 [ 62.690618][ C0] can_rcv_filter+0x3c0/0x8b0 [ 62.695274][ C0] can_receive+0x2ac/0x3b0 [ 62.699675][ C0] can_rcv+0xe4/0x220 [ 62.703703][ C0] __netif_receive_skb+0x136/0x370 [ 62.709152][ C0] process_backlog+0x4d8/0x930 [ 62.714140][ C0] net_rx_action+0x5ef/0x10d0 [ 62.719101][ C0] __do_softirq+0x333/0x7c4 [ 62.728104][ C0] [ 62.730423][ C0] The buggy address belongs to the object at ffff88809835c000 [ 62.730423][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 62.741017][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f356a7ff: abort rx timeout. Force session deactivation [ 62.745416][ C0] The buggy address is located 4224 bytes inside of [ 62.745416][ C0] 8192-byte region [ffff88809835c000, ffff88809835e000) [ 62.745419][ C0] The buggy address belongs to the page: [ 62.745429][ C0] page:ffffea000260d700 refcount:1 mapcount:0 mapping:ffff8880aa4021c0 index:0x0 compound_mapcount: 0 [ 62.745437][ C0] flags: 0x1fffc0000010200(slab|head) [ 62.745447][ C0] raw: 01fffc0000010200 ffffea00026f5608 ffffea00026fdb08 ffff8880aa4021c0 [ 62.745454][ C0] raw: 0000000000000000 ffff88809835c000 0000000100000001 0000000000000000 [ 62.745457][ C0] page dumped because: kasan: bad access detected [ 62.745459][ C0] [ 62.745467][ C0] Memory state around the buggy address: [ 62.825805][ C0] ffff88809835cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.834919][ C0] ffff88809835d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.843194][ C0] >ffff88809835d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.851876][ C0] ^ [ 62.856063][ C0] ffff88809835d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.864198][ C0] ffff88809835d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.872245][ C0] ================================================================== [ 62.880610][ C0] Disabling lock debugging due to kernel taint [ 62.886744][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 62.893315][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.4.0-rc6+ #0 [ 62.901972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.912135][ C0] Call Trace: [ 62.915419][ C0] dump_stack+0x1fb/0x318 [ 62.919825][ C0] panic+0x264/0x7a9 [ 62.923710][ C0] ? trace_hardirqs_off+0x1a/0x80 [ 62.928719][ C0] __kasan_report+0x1bb/0x1c0 [ 62.933391][ C0] ? kfree+0xa0/0x200 [ 62.937365][ C0] ? __lock_acquire+0x96/0x1be0 [ 62.942209][ C0] ? __do_softirq+0x333/0x7c4 [ 62.946882][ C0] kasan_report+0x26/0x50 [ 62.951196][ C0] ? net_rx_action+0x5ef/0x10d0 [ 62.956032][ C0] ? __do_softirq+0x333/0x7c4 [ 62.960815][ C0] __asan_report_load8_noabort+0x14/0x20 [ 62.966440][ C0] __lock_acquire+0x96/0x1be0 [ 62.971128][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0xe0 [ 62.976927][ C0] ? trace_lock_acquire+0x159/0x1d0 [ 62.982123][ C0] lock_acquire+0x158/0x250 [ 62.986631][ C0] ? j1939_xtp_rx_abort_one+0x89/0x3f0 [ 62.992086][ C0] ? j1939_xtp_rx_abort_one+0x89/0x3f0 [ 62.997541][ C0] _raw_spin_lock_bh+0x34/0x50 [ 63.002296][ C0] ? j1939_xtp_rx_abort_one+0x89/0x3f0 [ 63.007758][ C0] j1939_xtp_rx_abort_one+0x89/0x3f0 [ 63.013044][ C0] j1939_tp_recv+0x731/0xb80 [ 63.017616][ C0] j1939_can_recv+0x424/0x650 [ 63.022289][ C0] ? j1939_send_one+0x3e0/0x3e0 [ 63.027129][ C0] can_rcv_filter+0x3c0/0x8b0 [ 63.031800][ C0] can_receive+0x2ac/0x3b0 [ 63.036218][ C0] can_rcv+0xe4/0x220 [ 63.040202][ C0] ? rcu_lock_release+0x30/0x30 [ 63.045167][ C0] __netif_receive_skb+0x136/0x370 [ 63.050278][ C0] process_backlog+0x4d8/0x930 [ 63.055289][ C0] net_rx_action+0x5ef/0x10d0 [ 63.059954][ C0] __do_softirq+0x333/0x7c4 [ 63.064436][ C0] ? run_ksoftirqd+0x64/0xf0 [ 63.069024][ C0] run_ksoftirqd+0x64/0xf0 [ 63.073440][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 63.078616][ C0] smpboot_thread_fn+0x5b3/0x9a0 [ 63.083546][ C0] kthread+0x332/0x350 [ 63.087595][ C0] ? cpu_report_death+0x120/0x120 [ 63.092598][ C0] ? kthread_blkcg+0xe0/0xe0 [ 63.097182][ C0] ret_from_fork+0x24/0x30 [ 63.103093][ C0] Kernel Offset: disabled [ 63.107635][ C0] Rebooting in 86400 seconds..