[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.221462][ T26] audit: type=1800 audit(1573124411.811:25): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.266727][ T26] audit: type=1800 audit(1573124411.811:26): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.302284][ T26] audit: type=1800 audit(1573124411.811:27): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.0' (ECDSA) to the list of known hosts. 2019/11/07 11:00:24 parsed 1 programs 2019/11/07 11:00:27 executed programs: 0 syzkaller login: [ 70.654159][ T8766] IPVS: ftp: loaded support on port[0] = 21 [ 70.675581][ T8768] IPVS: ftp: loaded support on port[0] = 21 [ 70.698258][ T8762] IPVS: ftp: loaded support on port[0] = 21 [ 70.700939][ T8767] IPVS: ftp: loaded support on port[0] = 21 [ 70.712981][ T8770] IPVS: ftp: loaded support on port[0] = 21 [ 70.720860][ T8772] IPVS: ftp: loaded support on port[0] = 21 [ 70.967097][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 70.994322][ T8762] chnl_net:caif_netlink_parms(): no params data found [ 71.026681][ T8770] chnl_net:caif_netlink_parms(): no params data found [ 71.083471][ T8772] chnl_net:caif_netlink_parms(): no params data found [ 71.105791][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.113276][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.121020][ T8766] device bridge_slave_0 entered promiscuous mode [ 71.174265][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 71.190677][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.198170][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.205774][ T8766] device bridge_slave_1 entered promiscuous mode [ 71.232517][ T8767] chnl_net:caif_netlink_parms(): no params data found [ 71.264909][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.272222][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.280341][ T8762] device bridge_slave_0 entered promiscuous mode [ 71.292017][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.299135][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.306689][ T8762] device bridge_slave_1 entered promiscuous mode [ 71.335214][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.343914][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.352212][ T8770] device bridge_slave_0 entered promiscuous mode [ 71.361250][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.398879][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.405930][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.416810][ T8770] device bridge_slave_1 entered promiscuous mode [ 71.425331][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.436451][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.458465][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.500470][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.508111][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.515682][ T8767] device bridge_slave_0 entered promiscuous mode [ 71.523610][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.531276][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.539565][ T8772] device bridge_slave_0 entered promiscuous mode [ 71.548037][ T8770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.566824][ T8770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.582516][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.590002][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.598260][ T8768] device bridge_slave_0 entered promiscuous mode [ 71.605583][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.612705][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.623611][ T8767] device bridge_slave_1 entered promiscuous mode [ 71.630757][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.638229][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.645881][ T8772] device bridge_slave_1 entered promiscuous mode [ 71.660804][ T8766] team0: Port device team_slave_0 added [ 71.673688][ T8762] team0: Port device team_slave_0 added [ 71.679695][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.686734][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.695887][ T8768] device bridge_slave_1 entered promiscuous mode [ 71.721698][ T8766] team0: Port device team_slave_1 added [ 71.729982][ T8770] team0: Port device team_slave_0 added [ 71.737151][ T8762] team0: Port device team_slave_1 added [ 71.755017][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.772784][ T8770] team0: Port device team_slave_1 added [ 71.800388][ T8767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.811395][ T8767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.822034][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.833076][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.891256][ T8762] device hsr_slave_0 entered promiscuous mode [ 71.927569][ T8762] device hsr_slave_1 entered promiscuous mode [ 71.997859][ T8767] team0: Port device team_slave_0 added [ 72.004772][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.069139][ T8766] device hsr_slave_0 entered promiscuous mode [ 72.117717][ T8766] device hsr_slave_1 entered promiscuous mode [ 72.187141][ T8766] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.214191][ T8767] team0: Port device team_slave_1 added [ 72.280410][ T8770] device hsr_slave_0 entered promiscuous mode [ 72.327425][ T8770] device hsr_slave_1 entered promiscuous mode [ 72.387128][ T8770] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.416816][ T8768] team0: Port device team_slave_0 added [ 72.432514][ T8772] team0: Port device team_slave_0 added [ 72.449228][ T8772] team0: Port device team_slave_1 added [ 72.474003][ T8768] team0: Port device team_slave_1 added [ 72.630425][ T8767] device hsr_slave_0 entered promiscuous mode [ 72.676117][ T8767] device hsr_slave_1 entered promiscuous mode [ 72.807284][ T8767] debugfs: Directory 'hsr0' with parent '/' already present! [ 72.991541][ T8768] device hsr_slave_0 entered promiscuous mode [ 73.129101][ T8768] device hsr_slave_1 entered promiscuous mode [ 73.327198][ T8768] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.361034][ T8772] device hsr_slave_0 entered promiscuous mode [ 73.428459][ T8772] device hsr_slave_1 entered promiscuous mode [ 73.467442][ T8772] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.381918][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.560664][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.741003][ T8770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.796619][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.934643][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.107658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.116533][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.257646][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.265451][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.498369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.506558][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.780233][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.906008][ T8770] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.967733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.976517][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.108367][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.115777][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.337366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.346090][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.597504][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.604606][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.768329][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.778090][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.786795][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.027513][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.034609][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.177347][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.186083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.347692][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.354803][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.477348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.486156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.665973][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.750550][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.865141][ T8772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.917552][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.925565][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.002500][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.077892][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.086923][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.153420][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.188245][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.228605][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.254323][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.284639][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.313252][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.333189][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.358677][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.383063][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.410319][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.419233][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.428029][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.436115][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.444533][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.452898][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.461955][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.470620][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.477711][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.485152][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.493722][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.502026][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.509116][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.516623][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.525416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.539762][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.568032][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.575847][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.584306][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.592156][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.600451][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.608958][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.618248][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.626529][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.633603][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.642331][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.651063][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.659400][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.668322][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.676579][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.684444][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.692120][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.701062][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.710009][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.717168][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.724960][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.733555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.742065][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.750784][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.759230][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.768128][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.776805][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.784712][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.792677][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.823395][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.838910][ T8766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.849858][ T8772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.870274][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.879017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.887641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.895846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.904540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.912258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.919996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.927883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.937173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.945421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.958654][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.007944][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.016705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.025987][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.033080][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.043367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.050967][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.058550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.067071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.075312][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.082396][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.090496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.099176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.107698][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.114720][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.122331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.131130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.139816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.148226][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.156426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.165063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.173550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.182236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.191071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.198939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.207882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.236130][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.246567][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.260116][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.272284][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.281653][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.290062][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.298688][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.306727][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.315514][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.323923][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.330969][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.341054][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.355796][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.366689][ T8770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.380005][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.420831][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.435373][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.460508][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.471476][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.479482][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.496451][ T8768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.508862][ T8768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.525554][ T8767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.549988][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.569266][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.591049][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.616316][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.658514][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.666804][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.689692][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.699372][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.733242][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.741351][ T2612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.771484][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.820535][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.842692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.858055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 2019/11/07 11:00:38 executed programs: 6 [ 83.789814][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d93d4277: rx timeout, send abort [ 83.833543][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002aa95ac2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.848483][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000037aae9ff: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.314192][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d93d4277: abort rx timeout. Force session deactivation [ 84.324391][ C1] vcan0: j1939_tp_rxtimer: 0x0000000071a90644: rx timeout, send abort [ 84.396070][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b62292ec: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.410895][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000730a8749: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.451846][ C1] vcan0: j1939_tp_rxtimer: 0x000000000bf1200d: rx timeout, send abort [ 84.469232][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ab4b8d6f: rx timeout, send abort [ 84.501882][ C1] vcan0: j1939_tp_rxtimer: 0x0000000071dc3f41: rx timeout, send abort [ 84.510188][ C1] vcan0: j1939_tp_rxtimer: 0x00000000646d1d48: rx timeout, send abort [ 84.525624][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000abdd416b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.540303][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000092c37e4c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.554657][ C1] ================================================================== [ 84.562729][ C1] BUG: KASAN: use-after-free in __lock_acquire+0x3a8b/0x4a00 [ 84.570094][ C1] Read of size 8 at addr ffff8880a9365080 by task ksoftirqd/1/16 [ 84.577799][ C1] [ 84.580124][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc6+ #0 [ 84.587476][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.597521][ C1] Call Trace: [ 84.600809][ C1] dump_stack+0x197/0x210 [ 84.605136][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 84.610161][ C1] print_address_description.constprop.0.cold+0xd4/0x30b [ 84.617175][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 84.622196][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 84.627215][ C1] __kasan_report.cold+0x1b/0x41 [ 84.632157][ C1] ? can_rcv_filter+0x1a0/0x8e0 [ 84.636996][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 84.642011][ C1] kasan_report+0x12/0x20 [ 84.646329][ C1] __asan_report_load8_noabort+0x14/0x20 [ 84.651961][ C1] __lock_acquire+0x3a8b/0x4a00 [ 84.656808][ C1] ? lock_downgrade+0x920/0x920 [ 84.661653][ C1] ? mark_held_locks+0xf0/0xf0 [ 84.666409][ C1] ? trace_hardirqs_off+0x62/0x240 [ 84.671513][ C1] lock_acquire+0x190/0x410 [ 84.676008][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 84.681639][ C1] _raw_spin_lock_bh+0x33/0x50 [ 84.686393][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 84.692016][ C1] j1939_session_get_by_addr+0x2d/0x60 [ 84.697469][ C1] j1939_xtp_rx_abort_one+0x8d/0x100 [ 84.702750][ C1] ? j1939_ecu_get_by_addr_locked+0x53/0xf0 [ 84.708634][ C1] j1939_tp_recv+0x513/0x9b0 [ 84.713216][ C1] j1939_can_recv+0x4bb/0x620 [ 84.717887][ C1] can_rcv_filter+0x292/0x8e0 [ 84.722557][ C1] can_receive+0x2e7/0x530 [ 84.726966][ C1] can_rcv+0x133/0x1b0 [ 84.731025][ C1] ? can_receive+0x530/0x530 [ 84.735609][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 84.741497][ C1] ? __netif_receive_skb_core+0x3450/0x3450 [ 84.747390][ C1] ? lock_acquire+0x190/0x410 [ 84.752065][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.758301][ C1] __netif_receive_skb+0x2c/0x1d0 [ 84.763323][ C1] process_backlog+0x206/0x750 [ 84.768080][ C1] ? net_rx_action+0x27b/0x1120 [ 84.772925][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 84.778199][ C1] net_rx_action+0x508/0x1120 [ 84.782900][ C1] ? napi_busy_loop+0x970/0x970 [ 84.787744][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 84.793285][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 84.799259][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.805495][ C1] __do_softirq+0x262/0x98c [ 84.809999][ C1] ? takeover_tasklets+0x820/0x820 [ 84.815103][ C1] run_ksoftirqd+0x8e/0x110 [ 84.819596][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 84.824528][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 84.830765][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.836999][ C1] ? __kthread_parkme+0x108/0x1c0 [ 84.842011][ C1] ? __kasan_check_read+0x11/0x20 [ 84.847032][ C1] kthread+0x361/0x430 [ 84.851092][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 84.857343][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 84.863055][ C1] ret_from_fork+0x24/0x30 [ 84.867458][ C1] [ 84.869773][ C1] Allocated by task 9010: [ 84.874096][ C1] save_stack+0x23/0x90 [ 84.878245][ C1] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 84.883863][ C1] kasan_kmalloc+0x9/0x10 [ 84.888184][ C1] kmem_cache_alloc_trace+0x158/0x790 [ 84.893545][ C1] j1939_netdev_start+0xa4/0x550 [ 84.898475][ C1] j1939_sk_bind+0x65a/0x8e0 [ 84.903062][ C1] __sys_bind+0x239/0x290 [ 84.907382][ C1] __ia32_sys_bind+0x72/0xb0 [ 84.911963][ C1] do_fast_syscall_32+0x27b/0xdb3 [ 84.916974][ C1] entry_SYSENTER_compat+0x70/0x7f [ 84.922066][ C1] [ 84.924385][ C1] Freed by task 16: [ 84.928186][ C1] save_stack+0x23/0x90 [ 84.932334][ C1] __kasan_slab_free+0x102/0x150 [ 84.937261][ C1] kasan_slab_free+0xe/0x10 [ 84.941752][ C1] kfree+0x10a/0x2c0 [ 84.945637][ C1] j1939_priv_put+0x8b/0xb0 [ 84.950129][ C1] j1939_session_put+0x12c/0x180 [ 84.955053][ C1] j1939_xtp_rx_abort_one+0xc7/0x100 [ 84.960329][ C1] j1939_tp_recv+0x4fb/0x9b0 [ 84.964907][ C1] j1939_can_recv+0x4bb/0x620 [ 84.969575][ C1] can_rcv_filter+0x292/0x8e0 [ 84.974242][ C1] can_receive+0x2e7/0x530 [ 84.978648][ C1] can_rcv+0x133/0x1b0 [ 84.982711][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 84.988597][ C1] __netif_receive_skb+0x2c/0x1d0 [ 84.993614][ C1] process_backlog+0x206/0x750 [ 84.998368][ C1] net_rx_action+0x508/0x1120 [ 85.003036][ C1] __do_softirq+0x262/0x98c [ 85.007518][ C1] [ 85.009836][ C1] The buggy address belongs to the object at ffff8880a9364000 [ 85.009836][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 85.023882][ C1] The buggy address is located 4224 bytes inside of [ 85.023882][ C1] 8192-byte region [ffff8880a9364000, ffff8880a9366000) [ 85.037310][ C1] The buggy address belongs to the page: [ 85.042936][ C1] page:ffffea0002a4d900 refcount:1 mapcount:0 mapping:ffff8880aa4021c0 index:0x0 compound_mapcount: 0 [ 85.053856][ C1] flags: 0x1fffc0000010200(slab|head) [ 85.059222][ C1] raw: 01fffc0000010200 ffffea000293ac08 ffffea00024fac08 ffff8880aa4021c0 [ 85.067801][ C1] raw: 0000000000000000 ffff8880a9364000 0000000100000001 0000000000000000 [ 85.076370][ C1] page dumped because: kasan: bad access detected [ 85.082762][ C1] [ 85.085075][ C1] Memory state around the buggy address: [ 85.090701][ C1] ffff8880a9364f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.098750][ C1] ffff8880a9365000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.106799][ C1] >ffff8880a9365080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.114844][ C1] ^ [ 85.118901][ C1] ffff8880a9365100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.126949][ C1] ffff8880a9365180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.134994][ C1] ================================================================== [ 85.143041][ C1] Disabling lock debugging due to kernel taint [ 85.149185][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 85.155769][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.4.0-rc6+ #0 [ 85.164533][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.174576][ C1] Call Trace: [ 85.177865][ C1] dump_stack+0x197/0x210 [ 85.182186][ C1] panic+0x2e3/0x75c [ 85.186075][ C1] ? add_taint.cold+0x16/0x16 [ 85.190748][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 85.195765][ C1] ? trace_hardirqs_off+0x62/0x240 [ 85.200864][ C1] ? trace_hardirqs_off+0x59/0x240 [ 85.205972][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 85.210993][ C1] end_report+0x47/0x4f [ 85.215138][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 85.220153][ C1] __kasan_report.cold+0xe/0x41 [ 85.224996][ C1] ? can_rcv_filter+0x1a0/0x8e0 [ 85.229843][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 85.233635][ T3902] kobject: 'loop3' (0000000087ebdb68): kobject_uevent_env [ 85.234861][ C1] kasan_report+0x12/0x20 [ 85.244661][ T3902] kobject: 'loop3' (0000000087ebdb68): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 85.247033][ C1] __asan_report_load8_noabort+0x14/0x20 [ 85.247045][ C1] __lock_acquire+0x3a8b/0x4a00 [ 85.247062][ C1] ? lock_downgrade+0x920/0x920 [ 85.272466][ C1] ? mark_held_locks+0xf0/0xf0 [ 85.277232][ C1] ? trace_hardirqs_off+0x62/0x240 [ 85.282336][ C1] lock_acquire+0x190/0x410 [ 85.286829][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 85.292465][ C1] _raw_spin_lock_bh+0x33/0x50 [ 85.297219][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 85.302837][ C1] j1939_session_get_by_addr+0x2d/0x60 [ 85.308290][ C1] j1939_xtp_rx_abort_one+0x8d/0x100 [ 85.313576][ C1] ? j1939_ecu_get_by_addr_locked+0x53/0xf0 [ 85.319458][ C1] j1939_tp_recv+0x513/0x9b0 [ 85.324045][ C1] j1939_can_recv+0x4bb/0x620 [ 85.328807][ C1] can_rcv_filter+0x292/0x8e0 [ 85.333479][ C1] can_receive+0x2e7/0x530 [ 85.337885][ C1] can_rcv+0x133/0x1b0 [ 85.341946][ C1] ? can_receive+0x530/0x530 [ 85.346534][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 85.352420][ C1] ? __netif_receive_skb_core+0x3450/0x3450 [ 85.358310][ C1] ? lock_acquire+0x190/0x410 [ 85.362980][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.369211][ C1] __netif_receive_skb+0x2c/0x1d0 [ 85.374226][ C1] process_backlog+0x206/0x750 [ 85.379000][ C1] ? net_rx_action+0x27b/0x1120 [ 85.383844][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 85.389121][ C1] net_rx_action+0x508/0x1120 [ 85.393791][ C1] ? napi_busy_loop+0x970/0x970 [ 85.398634][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 85.404169][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 85.410145][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.416379][ C1] __do_softirq+0x262/0x98c [ 85.420878][ C1] ? takeover_tasklets+0x820/0x820 [ 85.425979][ C1] run_ksoftirqd+0x8e/0x110 [ 85.430471][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 85.435404][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 85.441635][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 85.447864][ C1] ? __kthread_parkme+0x108/0x1c0 [ 85.452881][ C1] ? __kasan_check_read+0x11/0x20 [ 85.457898][ C1] kthread+0x361/0x430 [ 85.461955][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 85.468183][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 85.473895][ C1] ret_from_fork+0x24/0x30 [ 85.479440][ C1] Kernel Offset: disabled [ 85.483757][ C1] Rebooting in 86400 seconds..