[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.745267][ T26] audit: type=1800 audit(1573397227.171:25): pid=8687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.790775][ T26] audit: type=1800 audit(1573397227.171:26): pid=8687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.833668][ T26] audit: type=1800 audit(1573397227.171:27): pid=8687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. syzkaller login: [ 164.317113][ T8841] IPVS: ftp: loaded support on port[0] = 21 [ 164.388121][ T8841] chnl_net:caif_netlink_parms(): no params data found [ 164.416913][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.424786][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.432581][ T8841] device bridge_slave_0 entered promiscuous mode [ 164.441230][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.448430][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.456165][ T8841] device bridge_slave_1 entered promiscuous mode [ 164.472887][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.483956][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.502415][ T8841] team0: Port device team_slave_0 added [ 164.510153][ T8841] team0: Port device team_slave_1 added [ 164.575867][ T8841] device hsr_slave_0 entered promiscuous mode [ 164.633576][ T8841] device hsr_slave_1 entered promiscuous mode [ 164.736662][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.744136][ T8841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.752017][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.760116][ T8841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.796356][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.808443][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.830345][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.839583][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.848769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 164.860602][ T8841] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.872238][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.881306][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.888901][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.901747][ T8843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.911114][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.918905][ T8843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.941197][ T8841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.953594][ T8841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.967394][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.976343][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.985764][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.994707][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.004345][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.012004][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.026986][ T8843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.035663][ T8843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.046958][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program [ 166.404866][ C0] vcan0: j1939_tp_rxtimer: 0x000000000ce5f323: rx timeout, send abort [ 166.414012][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000ce5f323: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 167.694056][ C0] vcan0: j1939_tp_rxtimer: 0x0000000053319edc: rx timeout, send abort [ 167.702393][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000053319edc: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 168.977789][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f516a4df: rx timeout, send abort [ 168.986315][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f516a4df: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 170.264024][ C0] vcan0: j1939_tp_rxtimer: 0x00000000581c9738: rx timeout, send abort [ 170.272343][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000581c9738: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 171.549251][ C0] vcan0: j1939_tp_rxtimer: 0x000000000831e925: rx timeout, send abort [ 171.558401][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000831e925: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 172.834883][ C0] vcan0: j1939_tp_rxtimer: 0x000000009d0e6db4: rx timeout, send abort [ 172.843326][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000009d0e6db4: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 174.118858][ C0] vcan0: j1939_tp_rxtimer: 0x000000004c6a7349: rx timeout, send abort [ 174.127306][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000004c6a7349: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 175.405542][ C0] vcan0: j1939_tp_rxtimer: 0x000000001923fc6b: rx timeout, send abort [ 175.415336][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000001923fc6b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 176.690848][ C0] vcan0: j1939_tp_rxtimer: 0x000000002aca12a4: rx timeout, send abort [ 176.699626][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000002aca12a4: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 177.981851][ C0] vcan0: j1939_tp_rxtimer: 0x0000000045cc6553: rx timeout, send abort [ 177.990337][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000045cc6553: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 179.268035][ C1] vcan0: j1939_tp_rxtimer: 0x0000000098789098: rx timeout, send abort [ 179.276451][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000098789098: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 180.554740][ C0] vcan0: j1939_tp_rxtimer: 0x00000000528cddfb: rx timeout, send abort [ 180.563224][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000528cddfb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 181.839594][ C1] vcan0: j1939_tp_rxtimer: 0x000000007d9a4a45: rx timeout, send abort [ 181.848160][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000007d9a4a45: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 183.124850][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f65cde5b: rx timeout, send abort [ 183.133584][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f65cde5b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 184.408676][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a671561c: rx timeout, send abort [ 184.417068][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a671561c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 185.691793][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a3e0390e: rx timeout, send abort [ 185.700483][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a3e0390e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 186.976030][ C0] vcan0: j1939_tp_rxtimer: 0x000000009d6225f2: rx timeout, send abort [ 186.984740][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000009d6225f2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 188.259932][ C0] vcan0: j1939_tp_rxtimer: 0x000000002bf38a53: rx timeout, send abort [ 188.268661][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000002bf38a53: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 189.547002][ C0] vcan0: j1939_tp_rxtimer: 0x000000003a8be524: rx timeout, send abort [ 189.555997][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000003a8be524: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 190.835459][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d58d5ce6: rx timeout, send abort [ 190.843859][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000d58d5ce6: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 192.119111][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cc5bb61e: rx timeout, send abort [ 192.127559][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000cc5bb61e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 193.403682][ C1] vcan0: j1939_tp_rxtimer: 0x0000000048a849ae: rx timeout, send abort [ 193.412230][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000048a849ae: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 194.688452][ C0] vcan0: j1939_tp_rxtimer: 0x000000005c6e6f0d: rx timeout, send abort [ 194.696840][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000005c6e6f0d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 195.972926][ C0] vcan0: j1939_tp_rxtimer: 0x000000005b0b40ad: rx timeout, send abort [ 195.981506][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000005b0b40ad: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 197.259064][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d9b51f26: rx timeout, send abort [ 197.267478][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000d9b51f26: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 198.545199][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a3c330f5: rx timeout, send abort [ 198.553578][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a3c330f5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 199.829366][ C0] vcan0: j1939_tp_rxtimer: 0x00000000eb9531dd: rx timeout, send abort [ 199.837817][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000eb9531dd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 201.113860][ C1] vcan0: j1939_tp_rxtimer: 0x000000006f254ce4: rx timeout, send abort [ 201.122318][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006f254ce4: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 202.400115][ C0] vcan0: j1939_tp_rxtimer: 0x00000000618c3102: rx timeout, send abort [ 202.408500][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000618c3102: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 203.684226][ C0] vcan0: j1939_tp_rxtimer: 0x00000000dc680229: rx timeout, send abort [ 203.692835][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000dc680229: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 204.971044][ C1] vcan0: j1939_tp_rxtimer: 0x00000000402fe5be: rx timeout, send abort [ 204.979463][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000402fe5be: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 206.255688][ C0] vcan0: j1939_tp_rxtimer: 0x00000000655dbd9e: rx timeout, send abort [ 206.264231][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000655dbd9e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 207.540280][ C0] vcan0: j1939_tp_rxtimer: 0x00000000442830b8: rx timeout, send abort [ 207.548694][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000442830b8: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 208.824832][ C1] vcan0: j1939_tp_rxtimer: 0x0000000033e403d3: rx timeout, send abort [ 208.833379][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000033e403d3: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 210.112770][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f30cf65e: rx timeout, send abort [ 210.121397][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f30cf65e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 211.397408][ C0] vcan0: j1939_tp_rxtimer: 0x0000000049f9bbd9: rx timeout, send abort [ 211.406246][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000049f9bbd9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 212.683758][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f72e708a: rx timeout, send abort [ 212.692196][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f72e708a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 213.968184][ C1] vcan0: j1939_tp_rxtimer: 0x000000004c94d675: rx timeout, send abort [ 213.976569][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000004c94d675: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 215.253044][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b6beebac: rx timeout, send abort [ 215.261519][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b6beebac: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 216.538132][ C1] vcan0: j1939_tp_rxtimer: 0x000000006a181a7e: rx timeout, send abort [ 216.546677][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006a181a7e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 217.826057][ C0] vcan0: j1939_tp_rxtimer: 0x000000001a0fcc12: rx timeout, send abort [ 217.835124][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000001a0fcc12: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 219.113906][ C1] vcan0: j1939_tp_rxtimer: 0x000000009c4d3782: rx timeout, send abort [ 219.122461][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000009c4d3782: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 220.401085][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ad324eb1: rx timeout, send abort [ 220.409436][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ad324eb1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 221.688873][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bc5992f8: rx timeout, send abort [ 221.697487][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bc5992f8: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 222.977058][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e2bb47b4: rx timeout, send abort [ 222.985497][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000e2bb47b4: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 224.264104][ C1] vcan0: j1939_tp_rxtimer: 0x0000000077a1e66a: rx timeout, send abort [ 224.272957][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000077a1e66a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 225.552952][ C0] vcan0: j1939_tp_rxtimer: 0x000000004ad725a2: rx timeout, send abort [ 225.561485][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000004ad725a2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 226.841264][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f37917cb: rx timeout, send abort [ 226.849783][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f37917cb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 228.126708][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bcf72bc8: rx timeout, send abort [ 228.135233][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bcf72bc8: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 229.415326][ C1] vcan0: j1939_tp_rxtimer: 0x00000000fffc8c83: rx timeout, send abort [ 229.423709][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000fffc8c83: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 230.703127][ C1] vcan0: j1939_tp_rxtimer: 0x0000000009ad4167: rx timeout, send abort [ 230.713134][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000009ad4167: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 231.989680][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e7aea399: rx timeout, send abort [ 231.998115][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000e7aea399: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 233.275685][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a44d45a3: rx timeout, send abort [ 233.284353][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000a44d45a3: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 234.561595][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b489b370: rx timeout, send abort [ 234.570160][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b489b370: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 235.848547][ C0] vcan0: j1939_tp_rxtimer: 0x000000008bee4039: rx timeout, send abort [ 235.857075][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000008bee4039: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 237.134088][ C1] vcan0: j1939_tp_rxtimer: 0x000000004c86495b: rx timeout, send abort [ 237.142458][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000004c86495b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 238.419075][ C0] vcan0: j1939_tp_rxtimer: 0x000000009d70931c: rx timeout, send abort [ 238.427552][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000009d70931c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 239.709062][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e4b74ac1: rx timeout, send abort [ 239.717456][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e4b74ac1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 240.995210][ C0] vcan0: j1939_tp_rxtimer: 0x000000002e6ab4f0: rx timeout, send abort [ 241.003894][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000002e6ab4f0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 242.283736][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e565baea: rx timeout, send abort [ 242.292360][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e565baea: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 243.572721][ C0] vcan0: j1939_tp_rxtimer: 0x0000000092725176: rx timeout, send abort [ 243.581344][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000092725176: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 244.860210][ C1] vcan0: j1939_tp_rxtimer: 0x000000002e4e3db3: rx timeout, send abort [ 244.868853][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002e4e3db3: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 246.147355][ C1] vcan0: j1939_tp_rxtimer: 0x00000000132f96fc: rx timeout, send abort [ 246.155856][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000132f96fc: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 247.432129][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ca315e56: rx timeout, send abort [ 247.440544][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ca315e56: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 248.718133][ C1] vcan0: j1939_tp_rxtimer: 0x0000000092140ada: rx timeout, send abort [ 248.726682][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000092140ada: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 250.005625][ C1] vcan0: j1939_tp_rxtimer: 0x0000000010d1eca1: rx timeout, send abort [ 250.014204][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000010d1eca1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. executing program [ 251.293194][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ce349e7a: rx timeout, send abort [ 251.301791][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000ce349e7a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.581069][ C1] vcan0: j1939_tp_rxtimer: 0x000000007d6f5d0d: rx timeout, send abort [ 252.589845][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000007d6f5d0d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.604969][ C1] ================================================================== [ 252.613167][ C1] BUG: KASAN: use-after-free in __lock_acquire+0x3a8b/0x4a00 [ 252.620652][ C1] Read of size 8 at addr ffff88808e86d080 by task ksoftirqd/1/16 [ 252.629741][ C1] [ 252.632332][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc6+ #0 [ 252.640807][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.654346][ C1] Call Trace: [ 252.657894][ C1] dump_stack+0x197/0x210 [ 252.662353][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 252.668512][ C1] print_address_description.constprop.0.cold+0xd4/0x30b [ 252.676141][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 252.681252][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 252.686257][ C1] __kasan_report.cold+0x1b/0x41 [ 252.692145][ C1] ? can_rcv_filter+0x1f0/0x8e0 [ 252.696981][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 252.702107][ C1] kasan_report+0x12/0x20 [ 252.706445][ C1] __asan_report_load8_noabort+0x14/0x20 [ 252.712375][ C1] __lock_acquire+0x3a8b/0x4a00 [ 252.718461][ C1] ? lock_downgrade+0x920/0x920 [ 252.723294][ C1] ? mark_held_locks+0xf0/0xf0 [ 252.728039][ C1] ? trace_hardirqs_off+0x62/0x240 [ 252.733215][ C1] lock_acquire+0x190/0x410 [ 252.737718][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 252.743368][ C1] _raw_spin_lock_bh+0x33/0x50 [ 252.748134][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 252.753746][ C1] j1939_session_get_by_addr+0x2d/0x60 [ 252.759186][ C1] j1939_xtp_rx_abort_one+0x8d/0x100 [ 252.765579][ C1] ? j1939_ecu_get_by_addr_locked+0x43/0xf0 [ 252.771647][ C1] j1939_tp_recv+0x798/0x9b0 [ 252.776230][ C1] j1939_can_recv+0x4bb/0x620 [ 252.780899][ C1] can_rcv_filter+0x292/0x8e0 [ 252.786271][ C1] can_receive+0x2e7/0x530 [ 252.790757][ C1] can_rcv+0x133/0x1b0 [ 252.794808][ C1] ? can_receive+0x530/0x530 [ 252.799470][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 252.805521][ C1] ? __netif_receive_skb_core+0x3340/0x3340 [ 252.811397][ C1] ? lock_acquire+0x190/0x410 [ 252.816056][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.822286][ C1] __netif_receive_skb+0x2c/0x1d0 [ 252.827290][ C1] process_backlog+0x206/0x750 [ 252.832205][ C1] ? net_rx_action+0x27b/0x1120 [ 252.837041][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 252.842449][ C1] net_rx_action+0x508/0x1120 [ 252.847123][ C1] ? napi_busy_loop+0x970/0x970 [ 252.852055][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 252.857594][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 252.863556][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.869851][ C1] __do_softirq+0x262/0x98c [ 252.874431][ C1] ? takeover_tasklets+0x820/0x820 [ 252.879608][ C1] run_ksoftirqd+0x8e/0x110 [ 252.884087][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 252.889006][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 252.895231][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.901451][ C1] ? __kthread_parkme+0x108/0x1c0 [ 252.906465][ C1] ? __kasan_check_read+0x11/0x20 [ 252.911476][ C1] kthread+0x361/0x430 [ 252.915537][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 252.922365][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 252.928069][ C1] ret_from_fork+0x24/0x30 [ 252.932464][ C1] [ 252.934776][ C1] Allocated by task 8986: [ 252.939096][ C1] save_stack+0x23/0x90 [ 252.943405][ C1] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 252.949012][ C1] kasan_kmalloc+0x9/0x10 [ 252.953333][ C1] kmem_cache_alloc_trace+0x158/0x790 [ 252.958845][ C1] j1939_netdev_start+0xa4/0x550 [ 252.963964][ C1] j1939_sk_bind+0x65a/0x8e0 [ 252.968625][ C1] __sys_bind+0x239/0x290 [ 252.972945][ C1] __x64_sys_bind+0x73/0xb0 [ 252.977434][ C1] do_syscall_64+0xfa/0x760 [ 252.981927][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.987793][ C1] [ 252.990103][ C1] Freed by task 8985: [ 252.994072][ C1] save_stack+0x23/0x90 [ 252.998295][ C1] __kasan_slab_free+0x102/0x150 [ 253.003206][ C1] kasan_slab_free+0xe/0x10 [ 253.007865][ C1] kfree+0x10a/0x2c0 [ 253.012975][ C1] j1939_priv_put+0x8b/0xb0 [ 253.017458][ C1] j1939_netdev_stop+0x45/0x190 [ 253.022294][ C1] j1939_sk_release+0x3bd/0x5c0 [ 253.027130][ C1] __sock_release+0xce/0x280 [ 253.031697][ C1] sock_close+0x1e/0x30 [ 253.035836][ C1] __fput+0x2ff/0x890 [ 253.039797][ C1] ____fput+0x16/0x20 [ 253.043788][ C1] task_work_run+0x145/0x1c0 [ 253.048636][ C1] exit_to_usermode_loop+0x316/0x380 [ 253.053918][ C1] do_syscall_64+0x65f/0x760 [ 253.058502][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.064368][ C1] [ 253.066716][ C1] The buggy address belongs to the object at ffff88808e86c000 [ 253.066716][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 253.081010][ C1] The buggy address is located 4224 bytes inside of [ 253.081010][ C1] 8192-byte region [ffff88808e86c000, ffff88808e86e000) [ 253.094444][ C1] The buggy address belongs to the page: [ 253.100167][ C1] page:ffffea00023a1b00 refcount:1 mapcount:0 mapping:ffff8880aa4021c0 index:0x0 compound_mapcount: 0 [ 253.111092][ C1] flags: 0x1fffc0000010200(slab|head) [ 253.116454][ C1] raw: 01fffc0000010200 ffffea00029f9008 ffffea00025bbd08 ffff8880aa4021c0 [ 253.125026][ C1] raw: 0000000000000000 ffff88808e86c000 0000000100000001 0000000000000000 [ 253.133586][ C1] page dumped because: kasan: bad access detected [ 253.139974][ C1] [ 253.142292][ C1] Memory state around the buggy address: [ 253.148640][ C1] ffff88808e86cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.156693][ C1] ffff88808e86d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.164743][ C1] >ffff88808e86d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.172782][ C1] ^ [ 253.176827][ C1] ffff88808e86d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.184868][ C1] ffff88808e86d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.192922][ C1] ================================================================== [ 253.200966][ C1] Disabling lock debugging due to kernel taint [ 253.207218][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 253.213821][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.4.0-rc6+ #0 [ 253.222583][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.232642][ C1] Call Trace: [ 253.235946][ C1] dump_stack+0x197/0x210 [ 253.240288][ C1] panic+0x2e3/0x75c [ 253.244166][ C1] ? add_taint.cold+0x16/0x16 [ 253.248829][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 253.253834][ C1] ? trace_hardirqs_off+0x62/0x240 [ 253.258922][ C1] ? trace_hardirqs_off+0x59/0x240 [ 253.264017][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 253.269027][ C1] end_report+0x47/0x4f [ 253.273166][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 253.278280][ C1] __kasan_report.cold+0xe/0x41 [ 253.283141][ C1] ? can_rcv_filter+0x1f0/0x8e0 [ 253.287983][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 253.292992][ C1] kasan_report+0x12/0x20 [ 253.297324][ C1] __asan_report_load8_noabort+0x14/0x20 [ 253.302940][ C1] __lock_acquire+0x3a8b/0x4a00 [ 253.307781][ C1] ? lock_downgrade+0x920/0x920 [ 253.312655][ C1] ? mark_held_locks+0xf0/0xf0 [ 253.317420][ C1] ? trace_hardirqs_off+0x62/0x240 [ 253.322560][ C1] lock_acquire+0x190/0x410 [ 253.327099][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 253.332729][ C1] _raw_spin_lock_bh+0x33/0x50 [ 253.337502][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 253.343139][ C1] j1939_session_get_by_addr+0x2d/0x60 [ 253.348582][ C1] j1939_xtp_rx_abort_one+0x8d/0x100 [ 253.353849][ C1] ? j1939_ecu_get_by_addr_locked+0x43/0xf0 [ 253.359722][ C1] j1939_tp_recv+0x798/0x9b0 [ 253.364296][ C1] j1939_can_recv+0x4bb/0x620 [ 253.368960][ C1] can_rcv_filter+0x292/0x8e0 [ 253.373623][ C1] can_receive+0x2e7/0x530 [ 253.378021][ C1] can_rcv+0x133/0x1b0 [ 253.382069][ C1] ? can_receive+0x530/0x530 [ 253.387349][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 253.393228][ C1] ? __netif_receive_skb_core+0x3340/0x3340 [ 253.399122][ C1] ? lock_acquire+0x190/0x410 [ 253.403782][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.410014][ C1] __netif_receive_skb+0x2c/0x1d0 [ 253.415021][ C1] process_backlog+0x206/0x750 [ 253.419769][ C1] ? net_rx_action+0x27b/0x1120 [ 253.424607][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 253.430657][ C1] net_rx_action+0x508/0x1120 [ 253.435318][ C1] ? napi_busy_loop+0x970/0x970 [ 253.440151][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 253.445699][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 253.451664][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.457892][ C1] __do_softirq+0x262/0x98c [ 253.462401][ C1] ? takeover_tasklets+0x820/0x820 [ 253.467517][ C1] run_ksoftirqd+0x8e/0x110 [ 253.472002][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 253.476922][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 253.483144][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 253.489380][ C1] ? __kthread_parkme+0x108/0x1c0 [ 253.494402][ C1] ? __kasan_check_read+0x11/0x20 [ 253.499528][ C1] kthread+0x361/0x430 [ 253.503586][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 253.509898][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 253.515611][ C1] ret_from_fork+0x24/0x30 [ 253.521549][ C1] Kernel Offset: disabled [ 253.526016][ C1] Rebooting in 86400 seconds..