[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.419874][ T26] audit: type=1800 audit(1573423101.078:25): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.465810][ T26] audit: type=1800 audit(1573423101.078:26): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.502960][ T26] audit: type=1800 audit(1573423101.088:27): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.243' (ECDSA) to the list of known hosts. syzkaller login: [ 1500.652262][ T9025] IPVS: ftp: loaded support on port[0] = 21 [ 1500.652587][ T9030] IPVS: ftp: loaded support on port[0] = 21 [ 1500.667564][ T9027] IPVS: ftp: loaded support on port[0] = 21 [ 1500.682951][ T9029] IPVS: ftp: loaded support on port[0] = 21 [ 1500.689672][ T9026] IPVS: ftp: loaded support on port[0] = 21 [ 1500.703840][ T9028] IPVS: ftp: loaded support on port[0] = 21 [ 1501.052520][ T9027] chnl_net:caif_netlink_parms(): no params data found [ 1501.072336][ T9029] chnl_net:caif_netlink_parms(): no params data found [ 1501.082126][ T9026] chnl_net:caif_netlink_parms(): no params data found [ 1501.129700][ T9025] chnl_net:caif_netlink_parms(): no params data found [ 1501.169369][ T9030] chnl_net:caif_netlink_parms(): no params data found [ 1501.191040][ T9028] chnl_net:caif_netlink_parms(): no params data found [ 1501.265465][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.274051][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.282922][ T9029] device bridge_slave_0 entered promiscuous mode [ 1501.302984][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.311585][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.319717][ T9027] device bridge_slave_0 entered promiscuous mode [ 1501.328901][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.336066][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.344122][ T9026] device bridge_slave_0 entered promiscuous mode [ 1501.371483][ T9025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.379897][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.387910][ T9025] device bridge_slave_0 entered promiscuous mode [ 1501.395531][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.403127][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.411300][ T9029] device bridge_slave_1 entered promiscuous mode [ 1501.432417][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.439791][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.451206][ T9027] device bridge_slave_1 entered promiscuous mode [ 1501.458475][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.465543][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.474287][ T9026] device bridge_slave_1 entered promiscuous mode [ 1501.488591][ T9025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.497704][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.505532][ T9025] device bridge_slave_1 entered promiscuous mode [ 1501.547886][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.555010][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.563654][ T9030] device bridge_slave_0 entered promiscuous mode [ 1501.582243][ T9029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.599056][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.606308][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.614151][ T9028] device bridge_slave_0 entered promiscuous mode [ 1501.631118][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.638505][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.650715][ T9030] device bridge_slave_1 entered promiscuous mode [ 1501.670960][ T9029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.690141][ T9027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.699704][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.710151][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.718356][ T9028] device bridge_slave_1 entered promiscuous mode [ 1501.727442][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.739572][ T9025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.763777][ T9029] team0: Port device team_slave_0 added [ 1501.772324][ T9027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.788815][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.800246][ T9025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.811641][ T9030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.822324][ T9029] team0: Port device team_slave_1 added [ 1501.860893][ T9030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.880658][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.897274][ T9027] team0: Port device team_slave_0 added [ 1501.915447][ T9025] team0: Port device team_slave_0 added [ 1501.931262][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.950755][ T9026] team0: Port device team_slave_0 added [ 1501.960029][ T9027] team0: Port device team_slave_1 added [ 1501.967469][ T9025] team0: Port device team_slave_1 added [ 1502.019942][ T9029] device hsr_slave_0 entered promiscuous mode [ 1502.076257][ T9029] device hsr_slave_1 entered promiscuous mode [ 1502.146093][ T9026] team0: Port device team_slave_1 added [ 1502.219316][ T9027] device hsr_slave_0 entered promiscuous mode [ 1502.272400][ T9027] device hsr_slave_1 entered promiscuous mode [ 1502.316868][ T9027] debugfs: Directory 'hsr0' with parent '/' already present! [ 1502.327369][ T9030] team0: Port device team_slave_0 added [ 1502.357585][ T9028] team0: Port device team_slave_0 added [ 1502.403489][ T9030] team0: Port device team_slave_1 added [ 1502.434000][ T9028] team0: Port device team_slave_1 added [ 1502.494114][ T9025] device hsr_slave_0 entered promiscuous mode [ 1502.546988][ T9025] device hsr_slave_1 entered promiscuous mode [ 1502.576076][ T9025] debugfs: Directory 'hsr0' with parent '/' already present! [ 1502.689516][ T9026] device hsr_slave_0 entered promiscuous mode [ 1502.746385][ T9026] device hsr_slave_1 entered promiscuous mode [ 1502.791638][ T9026] debugfs: Directory 'hsr0' with parent '/' already present! [ 1502.910143][ T9030] device hsr_slave_0 entered promiscuous mode [ 1503.006595][ T9030] device hsr_slave_1 entered promiscuous mode [ 1503.062947][ T9030] debugfs: Directory 'hsr0' with parent '/' already present! [ 1503.479187][ T9028] device hsr_slave_0 entered promiscuous mode [ 1503.533927][ T9028] device hsr_slave_1 entered promiscuous mode [ 1503.687231][ T9028] debugfs: Directory 'hsr0' with parent '/' already present! [ 1504.568944][ T9029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.675073][ T9027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.864051][ T9029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.978260][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.007565][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.136909][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.145244][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.358561][ T9027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.442312][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.643011][ T9030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.774521][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.887777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1505.927273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1506.006351][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.013688][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.188650][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1506.296673][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1506.406891][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.414010][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.526253][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1506.535409][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1506.726534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1506.735302][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.742509][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.956136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1506.965068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1507.156928][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.164041][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.298337][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1507.396468][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1507.465432][ T9030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.644478][ T9025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.742669][ T9029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1507.864687][ T9029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1507.980372][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1508.016726][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1508.024890][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1508.116804][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1508.154900][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1508.207319][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1508.256815][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1508.277394][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1508.309357][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1508.404399][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1508.424496][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1508.442558][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1508.451923][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.459360][ T9047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1508.467518][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1508.476926][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1508.485296][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.492432][ T9047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.500228][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1508.509017][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1508.517929][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1508.526784][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1508.535346][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1508.543942][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1508.552503][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1508.561617][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1508.570388][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1508.579750][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1508.588473][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1508.597638][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1508.605767][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1508.613959][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1508.622226][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1508.639581][ T9028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.653206][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1508.662769][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1508.671544][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1508.680046][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1508.689321][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1508.698469][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1508.707286][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1508.716474][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1508.726425][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1508.737177][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1508.753926][ T9028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.771310][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1508.779284][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1508.787990][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1508.797984][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1508.807753][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.814825][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1508.822790][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1508.830916][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1508.839130][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1508.874010][ T9025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.891953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1508.900814][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1508.911238][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.918418][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1508.926546][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1508.935222][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1508.943825][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.950974][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.959848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1508.968599][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1508.977273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1508.985745][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1508.993441][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1509.001330][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1509.030516][ T9029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.040902][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1509.049471][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1509.057980][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1509.067806][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1509.077385][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.084477][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.092222][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1509.100943][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1509.109481][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1509.118278][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1509.127042][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1509.135419][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.142533][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.150764][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1509.159686][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1509.168318][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.175370][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.185260][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1509.193383][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1509.206298][ T9026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1509.226281][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1509.235052][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1509.244007][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1509.252965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1509.262420][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1509.271336][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1509.279964][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1509.288787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1509.298725][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1509.327289][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1509.338643][ T9027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.351439][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1509.361361][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1509.371141][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1509.389466][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1509.398781][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1509.407479][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1509.416494][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1509.425566][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1509.434018][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1509.444424][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1509.452844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1509.481478][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.502101][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1509.511742][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1509.570424][ T9025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1509.584316][ T9025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1509.602426][ T9030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network executing program executing program [ 1509.620997][ T9030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1509.647301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1509.658418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1509.668833][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1509.677979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1509.687940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1509.695429][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1509.703352][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1509.712043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1509.721190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1509.730069][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1509.739695][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1509.748661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1509.760119][ T9028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.790618][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1509.801503][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1509.825618][ T9025] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 1509.845143][ T9030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.869298][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1509.883941][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1509.893107][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1509.908985][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program executing program executing program [ 1510.891128][ C0] vcan0: j1939_tp_rxtimer: 0x000000000651b4c2: rx timeout, send abort [ 1510.900591][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000651b4c2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1510.919847][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f0f4cbe2: rx timeout, send abort executing program executing program [ 1510.928838][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f0f4cbe2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1511.123676][ C0] vcan0: j1939_tp_rxtimer: 0x0000000086415388: rx timeout, send abort [ 1511.132341][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000086415388: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1511.275076][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b3c7c1d2: rx timeout, send abort [ 1511.284456][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b3c7c1d2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1511.318597][ C1] vcan0: j1939_tp_rxtimer: 0x0000000051c7f204: rx timeout, send abort [ 1511.327178][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000051c7f204: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1511.341811][ C1] vcan0: j1939_tp_rxtimer: 0x000000009f7fbee4: rx timeout, send abort executing program [ 1511.362166][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000009f7fbee4: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1512.200457][ C0] vcan0: j1939_tp_rxtimer: 0x0000000072c407cb: rx timeout, send abort [ 1512.209124][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000072c407cb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1512.224815][ C1] vcan0: j1939_tp_rxtimer: 0x000000000f004c45: rx timeout, send abort [ 1512.233596][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000000f004c45: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1512.415335][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a612bf8f: rx timeout, send abort [ 1512.423852][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a612bf8f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1512.567846][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d7c53257: rx timeout, send abort [ 1512.576549][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000d7c53257: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1512.619096][ C0] vcan0: j1939_tp_rxtimer: 0x000000000d11d1c6: rx timeout, send abort [ 1512.627637][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000d11d1c6: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1512.644283][ C1] vcan0: j1939_tp_rxtimer: 0x00000000aa5679ab: rx timeout, send abort [ 1512.653158][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000aa5679ab: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1513.493101][ C0] vcan0: j1939_tp_rxtimer: 0x0000000027faf1f9: rx timeout, send abort [ 1513.501590][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000027faf1f9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1513.515999][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c7f66510: rx timeout, send abort [ 1513.516181][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000c7f66510: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1513.704171][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b6276f9a: rx timeout, send abort [ 1513.712983][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b6276f9a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1513.858965][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b263e76f: rx timeout, send abort [ 1513.868078][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b263e76f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1513.935014][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c31c8e54: rx timeout, send abort [ 1513.937469][ C0] vcan0: j1939_tp_rxtimer: 0x000000001b079b21: rx timeout, send abort [ 1513.943674][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000c31c8e54: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1513.951845][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000001b079b21: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1514.807793][ C0] vcan0: j1939_tp_rxtimer: 0x00000000255db8fd: rx timeout, send abort [ 1514.816254][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000255db8fd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1514.831047][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b4842f5d: rx timeout, send abort [ 1514.841313][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b4842f5d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1514.994751][ C0] vcan0: j1939_tp_rxtimer: 0x000000000aa04f17: rx timeout, send abort [ 1515.003329][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000aa04f17: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1515.149366][ C1] vcan0: j1939_tp_rxtimer: 0x0000000078c94ec3: rx timeout, send abort [ 1515.157807][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000078c94ec3: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1515.239259][ C1] vcan0: j1939_tp_rxtimer: 0x000000006d25f186: rx timeout, send abort [ 1515.247890][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006d25f186: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1515.264218][ C1] vcan0: j1939_tp_rxtimer: 0x0000000024bb7fbb: rx timeout, send abort [ 1515.272710][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000024bb7fbb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1516.117118][ C0] vcan0: j1939_tp_rxtimer: 0x00000000559331fd: rx timeout, send abort [ 1516.125557][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000559331fd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1516.126570][ C1] vcan0: j1939_tp_rxtimer: 0x000000008884e8dd: rx timeout, send abort [ 1516.148355][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000008884e8dd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1516.287697][ C1] vcan0: j1939_tp_rxtimer: 0x000000002ee8660e: rx timeout, send abort [ 1516.296226][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002ee8660e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1516.439811][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d7426b78: rx timeout, send abort [ 1516.448370][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000d7426b78: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1516.547414][ C1] vcan0: j1939_tp_rxtimer: 0x000000008cf8ceae: rx timeout, send abort [ 1516.555979][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000008cf8ceae: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1516.571331][ C1] vcan0: j1939_tp_rxtimer: 0x000000009fb84c04: rx timeout, send abort executing program [ 1516.591348][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000009fb84c04: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1517.423758][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e6123c99: rx timeout, send abort [ 1517.432485][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000e6123c99: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1517.447008][ C0] vcan0: j1939_tp_rxtimer: 0x0000000080193f60: rx timeout, send abort executing program [ 1517.462802][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000080193f60: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1517.579465][ C0] vcan0: j1939_tp_rxtimer: 0x0000000041ea6abf: rx timeout, send abort [ 1517.588057][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000041ea6abf: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 1517.729342][ C1] vcan0: j1939_tp_rxtimer: 0x0000000089c96b0d: rx timeout, send abort [ 1517.738099][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000089c96b0d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1517.848323][ C0] vcan0: j1939_tp_rxtimer: 0x00000000211cd3c8: rx timeout, send abort [ 1517.856742][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000211cd3c8: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1517.873727][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ffb3c5c5: rx timeout, send abort [ 1517.882177][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000ffb3c5c5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program executing program [ 1518.726880][ C1] vcan0: j1939_tp_rxtimer: 0x000000008d604c47: rx timeout, send abort [ 1518.735322][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000008d604c47: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1518.751418][ C1] vcan0: j1939_tp_rxtimer: 0x000000007a331cbf: rx timeout, send abort [ 1518.759810][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000007a331cbf: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1518.870094][ C0] vcan0: j1939_tp_rxtimer: 0x0000000015b33cb9: rx timeout, send abort [ 1518.878606][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000015b33cb9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1518.893849][ C0] ================================================================== [ 1518.901961][ C0] BUG: KASAN: use-after-free in __lock_acquire+0x3a8b/0x4a00 [ 1518.909601][ C0] Read of size 8 at addr ffff8880a1945080 by task ksoftirqd/0/9 [ 1518.917250][ C0] executing program [ 1518.919601][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.0-rc6+ #0 [ 1518.926878][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.937454][ C0] Call Trace: [ 1518.940815][ C0] dump_stack+0x197/0x210 [ 1518.945176][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 1518.950203][ C0] print_address_description.constprop.0.cold+0xd4/0x30b [ 1518.957237][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 1518.962280][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 1518.967311][ C0] __kasan_report.cold+0x1b/0x41 [ 1518.972337][ C0] ? can_rcv_filter+0x270/0x8e0 [ 1518.977198][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 1518.982250][ C0] kasan_report+0x12/0x20 [ 1518.986580][ C0] __asan_report_load8_noabort+0x14/0x20 [ 1518.992210][ C0] __lock_acquire+0x3a8b/0x4a00 [ 1518.997080][ C0] ? lock_downgrade+0x920/0x920 [ 1519.001936][ C0] ? mark_held_locks+0xf0/0xf0 [ 1519.006976][ C0] ? trace_hardirqs_off+0x62/0x240 [ 1519.012114][ C0] lock_acquire+0x190/0x410 [ 1519.016619][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 1519.024206][ C0] _raw_spin_lock_bh+0x33/0x50 [ 1519.028979][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 1519.034609][ C0] j1939_session_get_by_addr+0x2d/0x60 [ 1519.040062][ C0] j1939_xtp_rx_abort_one+0x8d/0x100 [ 1519.045332][ C0] ? j1939_ecu_get_by_addr_locked+0xc3/0xf0 [ 1519.051213][ C0] j1939_tp_recv+0x798/0x9b0 [ 1519.055809][ C0] j1939_can_recv+0x4bb/0x620 [ 1519.060482][ C0] can_rcv_filter+0x292/0x8e0 [ 1519.065172][ C0] can_receive+0x2e7/0x530 [ 1519.069597][ C0] can_rcv+0x133/0x1b0 [ 1519.073671][ C0] ? can_receive+0x530/0x530 [ 1519.078344][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 1519.084237][ C0] ? __netif_receive_skb_core+0x3450/0x3450 [ 1519.091188][ C0] ? lock_acquire+0x190/0x410 [ 1519.095872][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.102137][ C0] __netif_receive_skb+0x2c/0x1d0 [ 1519.107163][ C0] process_backlog+0x206/0x750 [ 1519.111940][ C0] ? net_rx_action+0x27b/0x1120 [ 1519.116794][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 1519.122087][ C0] net_rx_action+0x508/0x1120 [ 1519.126769][ C0] ? napi_busy_loop+0x970/0x970 [ 1519.131622][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1519.137175][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1519.143323][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.148400][ C1] vcan0: j1939_tp_rxtimer: 0x00000000bba67bf1: rx timeout, send abort [ 1519.149619][ C0] __do_softirq+0x262/0x98c [ 1519.149646][ C0] ? takeover_tasklets+0x820/0x820 [ 1519.158165][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000bba67bf1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1519.162369][ C0] run_ksoftirqd+0x8e/0x110 [ 1519.162383][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 1519.162402][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 1519.162417][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1519.162435][ C0] ? __kthread_parkme+0x108/0x1c0 [ 1519.209041][ C0] ? __kasan_check_read+0x11/0x20 [ 1519.214056][ C0] kthread+0x361/0x430 [ 1519.218110][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 1519.224328][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1519.230053][ C0] ret_from_fork+0x24/0x30 [ 1519.234456][ C0] [ 1519.236767][ C0] Allocated by task 9282: [ 1519.241087][ C0] save_stack+0x23/0x90 [ 1519.245230][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1519.250874][ C0] kasan_kmalloc+0x9/0x10 [ 1519.255179][ C0] kmem_cache_alloc_trace+0x158/0x790 [ 1519.260535][ C0] j1939_netdev_start+0xa4/0x550 [ 1519.265470][ C0] j1939_sk_bind+0x65a/0x8e0 [ 1519.270134][ C0] __sys_bind+0x239/0x290 [ 1519.274445][ C0] __ia32_sys_bind+0x72/0xb0 [ 1519.279016][ C0] do_fast_syscall_32+0x27b/0xdb3 [ 1519.284021][ C0] entry_SYSENTER_compat+0x70/0x7f [ 1519.289114][ C0] [ 1519.291420][ C0] Freed by task 9282: [ 1519.295381][ C0] save_stack+0x23/0x90 [ 1519.299514][ C0] __kasan_slab_free+0x102/0x150 [ 1519.304429][ C0] kasan_slab_free+0xe/0x10 [ 1519.308915][ C0] kfree+0x10a/0x2c0 [ 1519.312787][ C0] j1939_priv_put+0x8b/0xb0 [ 1519.317270][ C0] j1939_netdev_stop+0x45/0x190 [ 1519.322102][ C0] j1939_sk_release+0x3bd/0x5c0 [ 1519.327363][ C0] __sock_release+0xce/0x280 [ 1519.331932][ C0] sock_close+0x1e/0x30 [ 1519.336068][ C0] __fput+0x2ff/0x890 [ 1519.340040][ C0] ____fput+0x16/0x20 [ 1519.344266][ C0] task_work_run+0x145/0x1c0 [ 1519.348840][ C0] exit_to_usermode_loop+0x316/0x380 [ 1519.354106][ C0] do_fast_syscall_32+0xb87/0xdb3 [ 1519.359117][ C0] entry_SYSENTER_compat+0x70/0x7f [ 1519.364288][ C0] [ 1519.366599][ C0] The buggy address belongs to the object at ffff8880a1944000 [ 1519.366599][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 1519.380632][ C0] The buggy address is located 4224 bytes inside of [ 1519.380632][ C0] 8192-byte region [ffff8880a1944000, ffff8880a1946000) [ 1519.394129][ C0] The buggy address belongs to the page: [ 1519.399781][ C0] page:ffffea0002865100 refcount:1 mapcount:0 mapping:ffff8880aa4021c0 index:0x0 compound_mapcount: 0 [ 1519.410794][ C0] flags: 0x1fffc0000010200(slab|head) [ 1519.416294][ C0] raw: 01fffc0000010200 ffffea00029d4c08 ffffea00024c8008 ffff8880aa4021c0 [ 1519.424863][ C0] raw: 0000000000000000 ffff8880a1944000 0000000100000001 0000000000000000 [ 1519.433440][ C0] page dumped because: kasan: bad access detected [ 1519.439827][ C0] [ 1519.442216][ C0] Memory state around the buggy address: [ 1519.447836][ C0] ffff8880a1944f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1519.455966][ C0] ffff8880a1945000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1519.464007][ C0] >ffff8880a1945080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1519.472208][ C0] ^ [ 1519.476284][ C0] ffff8880a1945100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1519.484482][ C0] ffff8880a1945180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1519.492552][ C0] ================================================================== [ 1519.500692][ C0] Disabling lock debugging due to kernel taint [ 1519.506911][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 1519.513482][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.4.0-rc6+ #0 [ 1519.522266][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.532415][ C0] Call Trace: [ 1519.535704][ C0] dump_stack+0x197/0x210 [ 1519.540019][ C0] panic+0x2e3/0x75c [ 1519.543893][ C0] ? add_taint.cold+0x16/0x16 [ 1519.548551][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 1519.553644][ C0] ? trace_hardirqs_off+0x62/0x240 [ 1519.558791][ C0] ? trace_hardirqs_off+0x59/0x240 [ 1519.563883][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 1519.568918][ C0] end_report+0x47/0x4f [ 1519.573085][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 1519.578150][ C0] __kasan_report.cold+0xe/0x41 [ 1519.582994][ C0] ? can_rcv_filter+0x270/0x8e0 [ 1519.587829][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 1519.592850][ C0] kasan_report+0x12/0x20 [ 1519.597170][ C0] __asan_report_load8_noabort+0x14/0x20 [ 1519.602796][ C0] __lock_acquire+0x3a8b/0x4a00 [ 1519.607801][ C0] ? lock_downgrade+0x920/0x920 [ 1519.612695][ C0] ? mark_held_locks+0xf0/0xf0 [ 1519.617458][ C0] ? trace_hardirqs_off+0x62/0x240 [ 1519.622557][ C0] lock_acquire+0x190/0x410 [ 1519.627047][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 1519.632666][ C0] _raw_spin_lock_bh+0x33/0x50 [ 1519.637769][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 1519.643378][ C0] j1939_session_get_by_addr+0x2d/0x60 [ 1519.648822][ C0] j1939_xtp_rx_abort_one+0x8d/0x100 [ 1519.654084][ C0] ? j1939_ecu_get_by_addr_locked+0xc3/0xf0 [ 1519.659955][ C0] j1939_tp_recv+0x798/0x9b0 [ 1519.664621][ C0] j1939_can_recv+0x4bb/0x620 [ 1519.669277][ C0] can_rcv_filter+0x292/0x8e0 [ 1519.674026][ C0] can_receive+0x2e7/0x530 [ 1519.678424][ C0] can_rcv+0x133/0x1b0 [ 1519.682481][ C0] ? can_receive+0x530/0x530 [ 1519.687057][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 1519.692929][ C0] ? __netif_receive_skb_core+0x3450/0x3450 [ 1519.698802][ C0] ? lock_acquire+0x190/0x410 [ 1519.703460][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.709694][ C0] __netif_receive_skb+0x2c/0x1d0 [ 1519.714752][ C0] process_backlog+0x206/0x750 [ 1519.719492][ C0] ? net_rx_action+0x27b/0x1120 [ 1519.724322][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 1519.729595][ C0] net_rx_action+0x508/0x1120 [ 1519.734261][ C0] ? napi_busy_loop+0x970/0x970 [ 1519.739097][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1519.744629][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1519.751203][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.757541][ C0] __do_softirq+0x262/0x98c [ 1519.763185][ C0] ? takeover_tasklets+0x820/0x820 [ 1519.768281][ C0] run_ksoftirqd+0x8e/0x110 [ 1519.772774][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 1519.777788][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 1519.784021][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1519.790268][ C0] ? __kthread_parkme+0x108/0x1c0 [ 1519.795288][ C0] ? __kasan_check_read+0x11/0x20 [ 1519.800302][ C0] kthread+0x361/0x430 [ 1519.804357][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 1519.810760][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1519.816469][ C0] ret_from_fork+0x24/0x30 [ 1519.822670][ C0] Kernel Offset: disabled [ 1519.826998][ C0] Rebooting in 86400 seconds..