[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [ 55.848464][ T26] audit: type=1800 audit(1572980426.562:25): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.879870][ T26] audit: type=1800 audit(1572980426.562:26): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.922042][ T26] audit: type=1800 audit(1572980426.562:27): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.134' (ECDSA) to the list of known hosts. 2019/11/05 19:01:05 parsed 1 programs 2019/11/05 19:01:08 executed programs: 0 syzkaller login: [ 97.649160][ T8785] IPVS: ftp: loaded support on port[0] = 21 [ 97.660231][ T8780] IPVS: ftp: loaded support on port[0] = 21 [ 97.670564][ T8782] IPVS: ftp: loaded support on port[0] = 21 [ 97.691892][ T8779] IPVS: ftp: loaded support on port[0] = 21 [ 97.700063][ T8787] IPVS: ftp: loaded support on port[0] = 21 [ 97.707715][ T8788] IPVS: ftp: loaded support on port[0] = 21 [ 97.949567][ T8785] chnl_net:caif_netlink_parms(): no params data found [ 98.007340][ T8782] chnl_net:caif_netlink_parms(): no params data found [ 98.061270][ T8787] chnl_net:caif_netlink_parms(): no params data found [ 98.153334][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.161005][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.168914][ T8785] device bridge_slave_0 entered promiscuous mode [ 98.208729][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.216760][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.224521][ T8782] device bridge_slave_0 entered promiscuous mode [ 98.232053][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.239676][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.247563][ T8785] device bridge_slave_1 entered promiscuous mode [ 98.280266][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.288721][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.298153][ T8782] device bridge_slave_1 entered promiscuous mode [ 98.305538][ T8780] chnl_net:caif_netlink_parms(): no params data found [ 98.328966][ T8788] chnl_net:caif_netlink_parms(): no params data found [ 98.341250][ T8779] chnl_net:caif_netlink_parms(): no params data found [ 98.351067][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.361682][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.377046][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.386465][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.393599][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.401545][ T8787] device bridge_slave_0 entered promiscuous mode [ 98.420998][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.448966][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.456195][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.463927][ T8787] device bridge_slave_1 entered promiscuous mode [ 98.493735][ T8782] team0: Port device team_slave_0 added [ 98.528297][ T8785] team0: Port device team_slave_0 added [ 98.540776][ T8782] team0: Port device team_slave_1 added [ 98.549183][ T8787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.565054][ T8787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.582845][ T8785] team0: Port device team_slave_1 added [ 98.617724][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.625072][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.632885][ T8780] device bridge_slave_0 entered promiscuous mode [ 98.653784][ T8787] team0: Port device team_slave_0 added [ 98.661172][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.672126][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.680062][ T8779] device bridge_slave_0 entered promiscuous mode [ 98.687763][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.698163][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.706197][ T8788] device bridge_slave_0 entered promiscuous mode [ 98.713909][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.721106][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.729256][ T8780] device bridge_slave_1 entered promiscuous mode [ 98.737680][ T8787] team0: Port device team_slave_1 added [ 98.776826][ T8782] device hsr_slave_0 entered promiscuous mode [ 98.825075][ T8782] device hsr_slave_1 entered promiscuous mode [ 98.887290][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.894378][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.905601][ T8779] device bridge_slave_1 entered promiscuous mode [ 98.912741][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.920302][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.928542][ T8788] device bridge_slave_1 entered promiscuous mode [ 99.007959][ T8785] device hsr_slave_0 entered promiscuous mode [ 99.055175][ T8785] device hsr_slave_1 entered promiscuous mode [ 99.104941][ T8785] debugfs: Directory 'hsr0' with parent '/' already present! [ 99.160105][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.170991][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.183818][ T8780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.258200][ T8787] device hsr_slave_0 entered promiscuous mode [ 99.325008][ T8787] device hsr_slave_1 entered promiscuous mode [ 99.394938][ T8787] debugfs: Directory 'hsr0' with parent '/' already present! [ 99.406532][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.418220][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.441815][ T8780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.497641][ T8779] team0: Port device team_slave_0 added [ 99.523068][ T8788] team0: Port device team_slave_0 added [ 99.531334][ T8780] team0: Port device team_slave_0 added [ 99.540072][ T8779] team0: Port device team_slave_1 added [ 99.559035][ T8788] team0: Port device team_slave_1 added [ 99.568717][ T8780] team0: Port device team_slave_1 added [ 99.657721][ T8780] device hsr_slave_0 entered promiscuous mode [ 99.725216][ T8780] device hsr_slave_1 entered promiscuous mode [ 99.764900][ T8780] debugfs: Directory 'hsr0' with parent '/' already present! [ 99.816802][ T8779] device hsr_slave_0 entered promiscuous mode [ 99.855045][ T8779] device hsr_slave_1 entered promiscuous mode [ 99.914794][ T8779] debugfs: Directory 'hsr0' with parent '/' already present! [ 99.977577][ T8788] device hsr_slave_0 entered promiscuous mode [ 100.035211][ T8788] device hsr_slave_1 entered promiscuous mode [ 100.074848][ T8788] debugfs: Directory 'hsr0' with parent '/' already present! [ 100.798475][ T8782] netdevsim: probe of netdevsim3 failed with error -17 [ 100.843024][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.854112][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.863664][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.885628][ T8782] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.894408][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.903238][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.911851][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.919209][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.928892][ T8785] netdevsim: probe of netdevsim5 failed with error -17 [ 100.929313][ T8787] netdevsim: probe of netdevsim0 failed with error -17 [ 100.946290][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.954136][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.962627][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.971090][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.978167][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.003777][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.013984][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.036334][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.048633][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.057807][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.065753][ T8788] netdevsim: probe of netdevsim4 failed with error -17 [ 101.073826][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.082263][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.090736][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.109138][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.138223][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.147285][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.165479][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.203485][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.214112][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.223641][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.235683][ T8780] netdevsim: probe of netdevsim2 failed with error -17 [ 101.253884][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.277721][ T8785] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.288907][ T8779] netdevsim: probe of netdevsim1 failed with error -17 [ 101.303968][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.312842][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.341571][ T8788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.370422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.380136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.397817][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.405049][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.413498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.422306][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.430939][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.438144][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.446635][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.475258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.483670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.501958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.519466][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.548107][ T8787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.566703][ T8788] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.576020][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.583840][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.591863][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.600210][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.609370][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.632542][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.641246][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.650210][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.659239][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.674927][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.683494][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.692253][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.699355][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.707681][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.716653][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.725453][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.732502][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.740184][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.752128][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.767619][ T8780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.788114][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.796163][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.804914][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.813476][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.827919][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.836935][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.846368][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.868417][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.881572][ T8787] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.889725][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.901018][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.908675][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.917213][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.924962][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.933271][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.944839][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.964051][ T8788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.980897][ T8788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.999714][ T8780] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.008450][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.018002][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.026820][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.035515][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.043793][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.050897][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.059094][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.068064][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.077222][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.084375][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.092210][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.100062][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.108073][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.127938][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.141269][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.150105][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.158456][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.178044][ T8788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.202021][ T8779] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.210377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.229409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.237267][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.246275][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.254575][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.261941][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.269670][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.278659][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.287137][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.294184][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.302046][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.311920][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.335636][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.347185][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.359094][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.369573][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.379015][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.387787][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.396721][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.426422][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.447134][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.458752][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.465999][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.475289][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.484550][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.499596][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.509687][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.516846][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.524557][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.533448][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.542467][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.551332][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.560209][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.568887][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.577557][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.586356][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.594762][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.603119][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.611765][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.620573][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.630550][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.638584][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.656454][ T8787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.666854][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.695826][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.711536][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.720485][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.730062][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.739378][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.753900][ T8779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.765941][ T8779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.778930][ C1] vcan0: j1939_tp_rxtimer: 0x000000000f8e9a67: rx timeout, send abort [ 102.794962][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000000f8e9a67: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.811201][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.819756][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.830395][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.839292][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.851208][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.869495][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.877352][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.896044][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.903484][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.917817][ T8780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.933267][ T8787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.963534][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.978972][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.987842][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 2019/11/05 19:01:14 executed programs: 6 [ 103.745527][ C1] vcan0: j1939_tp_rxtimer: 0x00000000443502c0: rx timeout, send abort [ 103.753976][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000443502c0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.938472][ C0] vcan0: j1939_tp_rxtimer: 0x00000000f92277cd: rx timeout, send abort [ 103.947105][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f92277cd: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.066497][ C0] vcan0: j1939_tp_rxtimer: 0x000000000339c013: rx timeout, send abort [ 104.075008][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000339c013: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.412755][ C1] vcan0: j1939_tp_rxtimer: 0x000000009a92c2af: rx timeout, send abort [ 104.421176][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000009a92c2af: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.481118][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c523492a: rx timeout, send abort [ 104.489544][ C1] vcan0: j1939_tp_rxtimer: 0x000000006fb29c8f: rx timeout, send abort [ 104.498306][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000c523492a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.512943][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006fb29c8f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.043254][ C1] vcan0: j1939_tp_rxtimer: 0x0000000083569304: rx timeout, send abort [ 105.051886][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000083569304: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.213340][ C1] vcan0: j1939_tp_rxtimer: 0x000000003562ca34: rx timeout, send abort [ 105.222134][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000003562ca34: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.362955][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ef04f111: rx timeout, send abort [ 105.371377][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ef04f111: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.709345][ C0] vcan0: j1939_tp_rxtimer: 0x000000003d5d8ded: rx timeout, send abort [ 105.717738][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000003d5d8ded: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.764845][ C0] vcan0: j1939_tp_rxtimer: 0x000000005cf05fb0: rx timeout, send abort [ 105.775047][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000005cf05fb0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.789727][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ea5e0de5: rx timeout, send abort [ 105.800206][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000ea5e0de5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.342414][ C1] vcan0: j1939_tp_rxtimer: 0x000000001c1f7f98: rx timeout, send abort [ 106.350794][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000001c1f7f98: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.365610][ C1] ================================================================== [ 106.373708][ C1] BUG: KASAN: use-after-free in __lock_acquire+0x3a8b/0x4a00 [ 106.381058][ C1] Read of size 8 at addr ffff8880a7dc5080 by task ksoftirqd/1/16 [ 106.388749][ C1] [ 106.391116][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc5+ #0 [ 106.398468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.408521][ C1] Call Trace: [ 106.411796][ C1] dump_stack+0x172/0x1f0 [ 106.416108][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 106.421118][ C1] print_address_description.constprop.0.cold+0xd4/0x30b [ 106.428132][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 106.433166][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 106.438183][ C1] __kasan_report.cold+0x1b/0x41 [ 106.443124][ C1] ? can_rcv_filter+0x1a0/0x8e0 [ 106.447984][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 106.452986][ C1] kasan_report+0x12/0x20 [ 106.457298][ C1] __asan_report_load8_noabort+0x14/0x20 [ 106.462911][ C1] __lock_acquire+0x3a8b/0x4a00 [ 106.467744][ C1] ? lock_downgrade+0x920/0x920 [ 106.472595][ C1] ? mark_held_locks+0xf0/0xf0 [ 106.477347][ C1] ? trace_hardirqs_off+0x62/0x240 [ 106.482467][ C1] lock_acquire+0x190/0x410 [ 106.487136][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 106.492774][ C1] _raw_spin_lock_bh+0x33/0x50 [ 106.497568][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 106.503183][ C1] j1939_session_get_by_addr+0x2d/0x60 [ 106.508627][ C1] j1939_xtp_rx_abort_one+0x8d/0x100 [ 106.514151][ C1] ? j1939_ecu_get_by_addr_locked+0x53/0xf0 [ 106.520196][ C1] j1939_tp_recv+0x798/0x9b0 [ 106.524780][ C1] j1939_can_recv+0x4bb/0x620 [ 106.529454][ C1] can_rcv_filter+0x292/0x8e0 [ 106.534117][ C1] can_receive+0x2e7/0x530 [ 106.538526][ C1] can_rcv+0x133/0x1b0 [ 106.542575][ C1] ? can_receive+0x530/0x530 [ 106.547225][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 106.553110][ C1] ? __netif_receive_skb_core+0x3450/0x3450 [ 106.558998][ C1] ? lock_acquire+0x190/0x410 [ 106.563677][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.569914][ C1] __netif_receive_skb+0x2c/0x1d0 [ 106.574935][ C1] process_backlog+0x206/0x750 [ 106.579694][ C1] ? net_rx_action+0x27b/0x1120 [ 106.584536][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 106.589824][ C1] net_rx_action+0x508/0x1120 [ 106.594524][ C1] ? napi_busy_loop+0x970/0x970 [ 106.599373][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 106.604900][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 106.610864][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.617092][ C1] __do_softirq+0x262/0x98c [ 106.621588][ C1] ? takeover_tasklets+0x820/0x820 [ 106.626682][ C1] run_ksoftirqd+0x8e/0x110 [ 106.631179][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 106.636105][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 106.642330][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 106.648567][ C1] ? __kthread_parkme+0x108/0x1c0 [ 106.653581][ C1] ? __kasan_check_read+0x11/0x20 [ 106.658594][ C1] kthread+0x361/0x430 [ 106.662647][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 106.668918][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 106.674621][ C1] ret_from_fork+0x24/0x30 [ 106.679015][ C1] [ 106.681327][ C1] Allocated by task 8860: [ 106.685642][ C1] save_stack+0x23/0x90 [ 106.689778][ C1] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 106.695393][ C1] kasan_kmalloc+0x9/0x10 [ 106.699705][ C1] kmem_cache_alloc_trace+0x158/0x790 [ 106.705322][ C1] j1939_netdev_start+0xa4/0x550 [ 106.710251][ C1] j1939_sk_bind+0x65a/0x8e0 [ 106.714829][ C1] __sys_bind+0x239/0x290 [ 106.719148][ C1] __x64_sys_bind+0x73/0xb0 [ 106.724169][ C1] do_syscall_64+0xfa/0x760 [ 106.728671][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.734546][ C1] [ 106.736856][ C1] Freed by task 8859: [ 106.740826][ C1] save_stack+0x23/0x90 [ 106.744982][ C1] __kasan_slab_free+0x102/0x150 [ 106.749905][ C1] kasan_slab_free+0xe/0x10 [ 106.754393][ C1] kfree+0x10a/0x2c0 [ 106.758270][ C1] j1939_priv_put+0x8b/0xb0 [ 106.763190][ C1] j1939_netdev_stop+0x45/0x190 [ 106.768023][ C1] j1939_sk_release+0x38d/0x590 [ 106.772858][ C1] __sock_release+0xce/0x280 [ 106.777426][ C1] sock_close+0x1e/0x30 [ 106.781557][ C1] __fput+0x2ff/0x890 [ 106.785526][ C1] ____fput+0x16/0x20 [ 106.789484][ C1] task_work_run+0x145/0x1c0 [ 106.794050][ C1] exit_to_usermode_loop+0x316/0x380 [ 106.799325][ C1] do_syscall_64+0x65f/0x760 [ 106.803906][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.809782][ C1] [ 106.812087][ C1] The buggy address belongs to the object at ffff8880a7dc4000 [ 106.812087][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 106.826128][ C1] The buggy address is located 4224 bytes inside of [ 106.826128][ C1] 8192-byte region [ffff8880a7dc4000, ffff8880a7dc6000) [ 106.839554][ C1] The buggy address belongs to the page: [ 106.845167][ C1] page:ffffea00029f7100 refcount:1 mapcount:0 mapping:ffff8880aa4021c0 index:0x0 compound_mapcount: 0 [ 106.856250][ C1] flags: 0x1fffc0000010200(slab|head) [ 106.861603][ C1] raw: 01fffc0000010200 ffffea0002a46e08 ffffea0002589d08 ffff8880aa4021c0 [ 106.870186][ C1] raw: 0000000000000000 ffff8880a7dc4000 0000000100000001 0000000000000000 [ 106.878747][ C1] page dumped because: kasan: bad access detected [ 106.885136][ C1] [ 106.887438][ C1] Memory state around the buggy address: [ 106.893044][ C1] ffff8880a7dc4f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.901082][ C1] ffff8880a7dc5000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.909127][ C1] >ffff8880a7dc5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.917172][ C1] ^ [ 106.921219][ C1] ffff8880a7dc5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.929267][ C1] ffff8880a7dc5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.937320][ C1] ================================================================== [ 106.945354][ C1] Disabling lock debugging due to kernel taint [ 106.951494][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 106.958098][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.4.0-rc5+ #0 [ 106.966840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.976880][ C1] Call Trace: [ 106.980158][ C1] dump_stack+0x172/0x1f0 [ 106.984466][ C1] panic+0x2e3/0x75c [ 106.988343][ C1] ? add_taint.cold+0x16/0x16 [ 106.992997][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 106.997996][ C1] ? trace_hardirqs_off+0x62/0x240 [ 107.003092][ C1] ? trace_hardirqs_off+0x59/0x240 [ 107.008179][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 107.013184][ C1] end_report+0x47/0x4f [ 107.017333][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 107.022333][ C1] __kasan_report.cold+0xe/0x41 [ 107.027163][ C1] ? can_rcv_filter+0x1a0/0x8e0 [ 107.031993][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 107.037003][ C1] kasan_report+0x12/0x20 [ 107.041309][ C1] __asan_report_load8_noabort+0x14/0x20 [ 107.046916][ C1] __lock_acquire+0x3a8b/0x4a00 [ 107.051751][ C1] ? lock_downgrade+0x920/0x920 [ 107.056584][ C1] ? mark_held_locks+0xf0/0xf0 [ 107.061412][ C1] ? trace_hardirqs_off+0x62/0x240 [ 107.066498][ C1] lock_acquire+0x190/0x410 [ 107.072284][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 107.077894][ C1] _raw_spin_lock_bh+0x33/0x50 [ 107.082635][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 107.088267][ C1] j1939_session_get_by_addr+0x2d/0x60 [ 107.093714][ C1] j1939_xtp_rx_abort_one+0x8d/0x100 [ 107.098991][ C1] ? j1939_ecu_get_by_addr_locked+0x53/0xf0 [ 107.104864][ C1] j1939_tp_recv+0x798/0x9b0 [ 107.109448][ C1] j1939_can_recv+0x4bb/0x620 [ 107.113778][ T3900] kobject: 'loop3' (00000000269d9f53): kobject_uevent_env [ 107.114132][ C1] can_rcv_filter+0x292/0x8e0 [ 107.125972][ C1] can_receive+0x2e7/0x530 [ 107.126143][ T3900] kobject: 'loop3' (00000000269d9f53): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 107.130724][ C1] can_rcv+0x133/0x1b0 [ 107.130737][ C1] ? can_receive+0x530/0x530 [ 107.130751][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 107.130763][ C1] ? __netif_receive_skb_core+0x3450/0x3450 [ 107.130781][ C1] ? lock_acquire+0x190/0x410 [ 107.165954][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.172214][ C1] __netif_receive_skb+0x2c/0x1d0 [ 107.177233][ C1] process_backlog+0x206/0x750 [ 107.181973][ C1] ? net_rx_action+0x27b/0x1120 [ 107.186811][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 107.192075][ C1] net_rx_action+0x508/0x1120 [ 107.196735][ C1] ? napi_busy_loop+0x970/0x970 [ 107.201563][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 107.207100][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 107.213075][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.219311][ C1] __do_softirq+0x262/0x98c [ 107.223794][ C1] ? takeover_tasklets+0x820/0x820 [ 107.228899][ C1] run_ksoftirqd+0x8e/0x110 [ 107.233380][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 107.238303][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 107.244519][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 107.250743][ C1] ? __kthread_parkme+0x108/0x1c0 [ 107.255767][ C1] ? __kasan_check_read+0x11/0x20 [ 107.260793][ C1] kthread+0x361/0x430 [ 107.264857][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 107.271076][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 107.276775][ C1] ret_from_fork+0x24/0x30 [ 107.282694][ C1] Kernel Offset: disabled [ 107.287030][ C1] Rebooting in 86400 seconds..