[ 34.204586] audit: type=1800 audit(1551564146.036:27): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.241631] audit: type=1800 audit(1551564146.036:28): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.887995] audit: type=1800 audit(1551564146.776:29): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.907541] audit: type=1800 audit(1551564146.776:30): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.222' (ECDSA) to the list of known hosts. 2019/03/02 22:02:35 parsed 1 programs 2019/03/02 22:02:37 executed programs: 0 syzkaller login: [ 46.111410] IPVS: ftp: loaded support on port[0] = 21 [ 46.114417] IPVS: ftp: loaded support on port[0] = 21 [ 46.122166] IPVS: ftp: loaded support on port[0] = 21 [ 46.139602] IPVS: ftp: loaded support on port[0] = 21 [ 46.140861] IPVS: ftp: loaded support on port[0] = 21 [ 46.154368] IPVS: ftp: loaded support on port[0] = 21 [ 46.324429] chnl_net:caif_netlink_parms(): no params data found [ 46.421519] chnl_net:caif_netlink_parms(): no params data found [ 46.445761] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.452116] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.460133] device bridge_slave_0 entered promiscuous mode [ 46.469877] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.476320] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.483402] device bridge_slave_1 entered promiscuous mode [ 46.532809] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.583195] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.590934] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.597767] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.604525] device bridge_slave_0 entered promiscuous mode [ 46.613593] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.620041] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.627358] device bridge_slave_1 entered promiscuous mode [ 46.665346] chnl_net:caif_netlink_parms(): no params data found [ 46.688191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.719017] team0: Port device team_slave_0 added [ 46.725386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.741847] chnl_net:caif_netlink_parms(): no params data found [ 46.759793] team0: Port device team_slave_1 added [ 46.773740] chnl_net:caif_netlink_parms(): no params data found [ 46.824003] team0: Port device team_slave_0 added [ 46.836086] team0: Port device team_slave_1 added [ 46.841654] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.848431] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.857795] device bridge_slave_0 entered promiscuous mode [ 46.864256] chnl_net:caif_netlink_parms(): no params data found [ 46.917793] device hsr_slave_0 entered promiscuous mode [ 46.955329] device hsr_slave_1 entered promiscuous mode [ 47.009296] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.016109] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.022934] device bridge_slave_1 entered promiscuous mode [ 47.097706] device hsr_slave_0 entered promiscuous mode [ 47.135295] device hsr_slave_1 entered promiscuous mode [ 47.192914] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.219509] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.226742] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.233557] device bridge_slave_0 entered promiscuous mode [ 47.256803] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.271841] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.281022] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.288095] device bridge_slave_1 entered promiscuous mode [ 47.315972] team0: Port device team_slave_0 added [ 47.322237] team0: Port device team_slave_1 added [ 47.377699] device hsr_slave_0 entered promiscuous mode [ 47.426801] device hsr_slave_1 entered promiscuous mode [ 47.465732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.472073] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.479612] device bridge_slave_0 entered promiscuous mode [ 47.491577] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.497976] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.504759] device bridge_slave_1 entered promiscuous mode [ 47.519271] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.526009] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.532822] device bridge_slave_0 entered promiscuous mode [ 47.539720] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.546156] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.552956] device bridge_slave_1 entered promiscuous mode [ 47.578519] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.600936] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.620647] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.649142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.659562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.680073] team0: Port device team_slave_0 added [ 47.686849] team0: Port device team_slave_1 added [ 47.692939] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.721716] team0: Port device team_slave_0 added [ 47.733743] team0: Port device team_slave_1 added [ 47.764625] team0: Port device team_slave_0 added [ 47.816982] device hsr_slave_0 entered promiscuous mode [ 47.855328] device hsr_slave_1 entered promiscuous mode [ 47.912667] team0: Port device team_slave_1 added [ 47.977528] device hsr_slave_0 entered promiscuous mode [ 48.015312] device hsr_slave_1 entered promiscuous mode [ 48.091082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.127982] device hsr_slave_0 entered promiscuous mode [ 48.175344] device hsr_slave_1 entered promiscuous mode [ 48.228124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.242354] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.256833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.264481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.271897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.280267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.288174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.294598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.303227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.329268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.335458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.343255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.352544] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.358947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.382204] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.399243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.406401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.413198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.422708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.430641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.438655] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.445068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.452949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.460138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.488712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.508662] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.516704] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.526596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.534257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.542206] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.548584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.555622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.563241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.571044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.579031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.586641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.594199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.601813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.608619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.619983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.630320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.652164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.659713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.667279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.674771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.682484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.690072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.697057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.703854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.711553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.723098] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.749300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.756405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.763314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.771334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.779611] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.786032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.792918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.800877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.808626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.816552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.823875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.831383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.862588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.870913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.881259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.889266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.896969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.904627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.912255] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.918663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.925657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.933301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.940945] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.947287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.954003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.961899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.969660] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.976067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.982934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.990746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.998662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.006514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.014181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.022002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.030032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.037196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.071319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.080876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.095697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.103189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.112048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.119827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.127404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.134739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.142442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.151749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.161837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.171613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.182404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.228630] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.238395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.253276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.261113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.269035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.281729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.298371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.315066] hrtimer: interrupt took 34429 ns [ 49.321175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.338079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.392809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.413851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.436024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.453165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.518179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.528259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.536209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.543807] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.550206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.563010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.625584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.636435] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.642791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.650342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.658045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.667114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.677885] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.711371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.724212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.797550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.822821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.839990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.886622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.894503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.944571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.965804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.985970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.998926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.015932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.031577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.039784] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.046183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.052238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.060862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.074009] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.080411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.093972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.109849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.116950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.124576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.132563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.140778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.149113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.170790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.181206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.193253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.201210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.208817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.216388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.223836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.231399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.239745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.257339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.268130] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/03/02 22:02:42 executed programs: 31 [ 52.165458] ================================================================== [ 52.172990] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 52.179661] Read of size 8 at addr ffff88808c226b80 by task ksoftirqd/1/16 [ 52.186679] [ 52.188327] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.0.0-rc8+ #2 [ 52.194991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.204342] Call Trace: [ 52.204364] dump_stack+0x172/0x1f0 [ 52.204379] ? ccid_hc_tx_delete+0xde/0x100 [ 52.204397] print_address_description.cold+0x7c/0x20d [ 52.220166] ? ccid_hc_tx_delete+0xde/0x100 [ 52.224516] ? ccid_hc_tx_delete+0xde/0x100 [ 52.228855] kasan_report.cold+0x1b/0x40 [ 52.232925] ? ccid_hc_tx_delete+0xde/0x100 [ 52.237268] __asan_report_load8_noabort+0x14/0x20 [ 52.242203] ccid_hc_tx_delete+0xde/0x100 [ 52.246362] dccp_sk_destruct+0x3f/0x90 [ 52.250342] ? dccp_init_sock+0x3f0/0x3f0 [ 52.254495] __sk_destruct+0x55/0x6d0 [ 52.258312] ? sock_no_getname+0x10/0x10 [ 52.262385] rcu_process_callbacks+0x928/0x1390 [ 52.267083] ? rcu_check_gp_start_stall+0x240/0x240 [ 52.272114] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 52.277579] __do_softirq+0x266/0x95a [ 52.281385] ? pci_mmcfg_check_reserved+0x170/0x170 [ 52.286414] ? takeover_tasklets+0x7b0/0x7b0 [ 52.290830] run_ksoftirqd+0x8e/0x110 [ 52.294637] smpboot_thread_fn+0x6ab/0xa10 [ 52.298883] ? sort_range+0x30/0x30 [ 52.302515] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 52.308061] ? __kthread_parkme+0xfb/0x1b0 [ 52.312301] kthread+0x357/0x430 [ 52.315672] ? sort_range+0x30/0x30 [ 52.319316] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 52.324863] ret_from_fork+0x3a/0x50 [ 52.328587] [ 52.330213] Allocated by task 7865: [ 52.333843] save_stack+0x45/0xd0 [ 52.337302] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 52.342236] kasan_slab_alloc+0xf/0x20 [ 52.346133] kmem_cache_alloc+0x11a/0x6f0 [ 52.350288] ccid_new+0x256/0x3f0 [ 52.353745] dccp_hdlr_ccid+0x27/0x150 [ 52.357640] __dccp_feat_activate+0x17a/0x270 [ 52.362141] dccp_feat_activate_values+0x33a/0x766 [ 52.367074] dccp_rcv_state_process+0x116f/0x1931 [ 52.371917] dccp_v6_do_rcv+0x269/0xbf0 [ 52.375897] __release_sock+0x12e/0x3a0 [ 52.379875] release_sock+0x59/0x1c0 [ 52.383592] __inet_stream_connect+0x59f/0xea0 [ 52.388179] inet_stream_connect+0x58/0xa0 [ 52.392421] __sys_connect+0x266/0x330 [ 52.396314] __x64_sys_connect+0x73/0xb0 [ 52.400380] do_syscall_64+0x103/0x610 [ 52.400396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.409446] [ 52.409453] Freed by task 7876: [ 52.409467] save_stack+0x45/0xd0 [ 52.409478] __kasan_slab_free+0x102/0x150 [ 52.409489] kasan_slab_free+0xe/0x10 [ 52.409500] kmem_cache_free+0x86/0x260 [ 52.409510] ccid_hc_tx_delete+0xc1/0x100 [ 52.409520] dccp_hdlr_ccid+0x7d/0x150 [ 52.409531] __dccp_feat_activate+0x17a/0x270 [ 52.409548] dccp_feat_activate_values+0x33a/0x766 [ 52.447235] dccp_create_openreq_child+0x40c/0x570 [ 52.452170] dccp_v6_request_recv_sock+0x214/0x1da0 [ 52.457192] dccp_check_req+0x35c/0x6f0 [ 52.461171] dccp_v6_rcv+0x6d7/0x191e [ 52.464975] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 52.469913] ip6_input_finish+0x84/0x170 [ 52.473976] ip6_input+0xe4/0x3f0 [ 52.477431] ip6_rcv_finish+0x1e7/0x320 [ 52.481406] ipv6_rcv+0x10e/0x420 [ 52.484866] __netif_receive_skb_one_core+0x115/0x1a0 [ 52.490063] __netif_receive_skb+0x2c/0x1c0 [ 52.494387] process_backlog+0x206/0x750 [ 52.498455] net_rx_action+0x4fa/0x1070 [ 52.502435] __do_softirq+0x266/0x95a [ 52.502442] [ 52.507866] The buggy address belongs to the object at ffff88808c226b80 [ 52.507866] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 52.521046] The buggy address is located 0 bytes inside of [ 52.521046] 1240-byte region [ffff88808c226b80, ffff88808c227058) [ 52.532956] The buggy address belongs to the page: [ 52.537889] page:ffffea0002308980 count:1 mapcount:0 mapping:ffff8882166a8cc0 index:0x0 compound_mapcount: 0 [ 52.547861] flags: 0x1fffc0000010200(slab|head) [ 52.547879] raw: 01fffc0000010200 ffffea0002a1a388 ffffea0002a6bc08 ffff8882166a8cc0 [ 52.547895] raw: 0000000000000000 ffff88808c226080 0000000100000005 0000000000000000 [ 52.547900] page dumped because: kasan: bad access detected [ 52.547904] [ 52.547908] Memory state around the buggy address: [ 52.547918] ffff88808c226a80: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 52.547928] ffff88808c226b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.547938] >ffff88808c226b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.547942] ^ [ 52.547952] ffff88808c226c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.547961] ffff88808c226c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.547970] ================================================================== [ 52.628003] Disabling lock debugging due to kernel taint [ 52.633518] Kernel panic - not syncing: panic_on_warn set ... [ 52.639422] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.0.0-rc8+ #2 [ 52.647650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.652787] kobject: 'loop5' (000000004905e382): kobject_uevent_env [ 52.657010] Call Trace: [ 52.657032] dump_stack+0x172/0x1f0 [ 52.657049] panic+0x2cb/0x65c [ 52.657063] ? __warn_printk+0xf3/0xf3 [ 52.657073] ? retint_kernel+0x2d/0x2d [ 52.657088] ? trace_hardirqs_on+0x5e/0x230 [ 52.657102] ? ccid_hc_tx_delete+0xde/0x100 [ 52.657117] end_report+0x47/0x4f [ 52.657126] ? ccid_hc_tx_delete+0xde/0x100 [ 52.657138] kasan_report.cold+0xe/0x40 [ 52.657149] ? ccid_hc_tx_delete+0xde/0x100 [ 52.657163] __asan_report_load8_noabort+0x14/0x20 [ 52.657173] ccid_hc_tx_delete+0xde/0x100 [ 52.657186] dccp_sk_destruct+0x3f/