[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.817839][ T26] audit: type=1800 audit(1574303982.560:25): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.859248][ T26] audit: type=1800 audit(1574303982.570:26): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.900375][ T26] audit: type=1800 audit(1574303982.570:27): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. syzkaller login: [ 97.304850][ T8810] IPVS: ftp: loaded support on port[0] = 21 [ 97.380068][ T8810] chnl_net:caif_netlink_parms(): no params data found [ 97.406235][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.414290][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.423129][ T8810] device bridge_slave_0 entered promiscuous mode [ 97.431410][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.438634][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.447057][ T8810] device bridge_slave_1 entered promiscuous mode [ 97.465500][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.476666][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.496753][ T8810] team0: Port device team_slave_0 added [ 97.504256][ T8810] team0: Port device team_slave_1 added [ 97.572051][ T8810] device hsr_slave_0 entered promiscuous mode [ 97.619526][ T8810] device hsr_slave_1 entered promiscuous mode [ 97.702750][ T8810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.762283][ T8810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.821212][ T8810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.881481][ T8810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.928265][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.935572][ T8810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.943443][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.950553][ T8810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.985612][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.000447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.021206][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.030552][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.038544][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 98.051272][ T8810] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.061994][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.071023][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.078081][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.101015][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.110187][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.117227][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.125652][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.135701][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.144819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.155926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.164021][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.174800][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.191073][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 98.198505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.211718][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.474047][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bc4b6db0: rx timeout, send abort [ 99.482812][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bc4b6db0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.498008][ C0] ------------[ cut here ]------------ [ 99.503780][ C0] WARNING: CPU: 0 PID: 9 at net/can/j1939/socket.c:180 j1939_sk_queue_activate_next+0x359/0x460 [ 99.514204][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 99.520794][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.0-rc7-syzkaller #0 [ 99.528844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.539118][ C0] Call Trace: [ 99.542572][ C0] dump_stack+0x197/0x210 [ 99.546904][ C0] ? j1939_sk_queue_activate_next+0x350/0x460 [ 99.552979][ C0] panic+0x2e3/0x75c [ 99.557072][ C0] ? add_taint.cold+0x16/0x16 [ 99.561795][ C0] ? printk+0xba/0xed [ 99.565887][ C0] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 99.571349][ C0] ? __warn.cold+0x14/0x35 [ 99.575754][ C0] ? __warn+0xd9/0x1d0 [ 99.579828][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 99.586036][ C0] __warn.cold+0x2f/0x35 [ 99.590356][ C0] ? report_bug.cold+0x63/0xad [ 99.595116][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 99.601733][ C0] report_bug+0x289/0x300 [ 99.606236][ C0] do_error_trap+0x11b/0x200 [ 99.610840][ C0] do_invalid_op+0x37/0x50 [ 99.615538][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 99.621619][ C0] invalid_op+0x23/0x30 [ 99.625769][ C0] RIP: 0010:j1939_sk_queue_activate_next+0x359/0x460 [ 99.632438][ C0] Code: e8 1c 83 c0 0a 89 45 cc eb 9f 48 c7 c7 b4 1a c7 89 e8 cb b1 2d fb e9 6a fd ff ff e8 c1 b1 2d fb e9 19 fe ff ff e8 17 f9 f1 fa <0f> 0b 48 8b 45 c0 48 8d b8 b0 00 00 00 48 89 f8 48 c1 e8 03 42 0f [ 99.652192][ C0] RSP: 0018:ffff8880a98af918 EFLAGS: 00010206 [ 99.658252][ C0] RAX: ffff8880a98a2240 RBX: ffff888099561000 RCX: ffffffff86816668 [ 99.666336][ C0] RDX: 0000000000000100 RSI: ffffffff86816709 RDI: 0000000000000005 [ 99.674309][ C0] RBP: ffff8880a98af970 R08: ffff8880a98a2240 R09: fffffbfff14f0f4c [ 99.682544][ C0] R10: fffffbfff14f0f4b R11: ffffffff8a787a5f R12: ffff888099561510 [ 99.690670][ C0] R13: ffff88809175cc00 R14: ffff888099561548 R15: dffffc0000000000 [ 99.698682][ C0] ? j1939_sk_queue_activate_next+0x2b8/0x460 [ 99.704747][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 99.711016][ C0] ? j1939_sk_queue_activate_next+0x359/0x460 [ 99.717090][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 99.722466][ C0] j1939_session_deactivate_activate_next+0x3d/0x50 [ 99.729167][ C0] j1939_xtp_rx_abort_one.cold+0x21a/0x35e [ 99.734977][ C0] ? j1939_ecu_get_by_addr_locked+0x33/0xf0 [ 99.740877][ C0] j1939_tp_recv+0x783/0x9b0 [ 99.745466][ C0] j1939_can_recv+0x502/0x610 [ 99.750403][ C0] can_rcv_filter+0x292/0x8e0 [ 99.755070][ C0] can_receive+0x2e7/0x530 [ 99.759512][ C0] can_rcv+0x133/0x1b0 [ 99.763737][ C0] ? can_receive+0x530/0x530 [ 99.768506][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 99.774768][ C0] ? __netif_receive_skb_core+0x3340/0x3340 [ 99.780681][ C0] ? lock_acquire+0x190/0x410 [ 99.785569][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.791831][ C0] __netif_receive_skb+0x2c/0x1d0 [ 99.796854][ C0] process_backlog+0x206/0x750 [ 99.802195][ C0] ? net_rx_action+0x27b/0x1120 [ 99.808005][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 99.813580][ C0] net_rx_action+0x508/0x1120 [ 99.818696][ C0] ? napi_busy_loop+0x970/0x970 [ 99.823635][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 99.829249][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 99.835593][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.841833][ C0] __do_softirq+0x262/0x98c [ 99.846344][ C0] ? takeover_tasklets+0x820/0x820 [ 99.851453][ C0] run_ksoftirqd+0x8e/0x110 [ 99.856077][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 99.861137][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 99.867406][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 99.873740][ C0] ? __kthread_parkme+0x108/0x1c0 [ 99.878896][ C0] ? __kasan_check_read+0x11/0x20 [ 99.883988][ C0] kthread+0x361/0x430 [ 99.888086][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 99.894318][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 99.900032][ C0] ret_from_fork+0x24/0x30 [ 99.907090][ C0] Kernel Offset: disabled [ 99.911810][ C0] Rebooting in 86400 seconds..