Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. [ 87.688220] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/13 01:54:40 parsed 1 programs [ 89.037560] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/13 01:54:42 executed programs: 0 [ 91.086326] IPVS: ftp: loaded support on port[0] = 21 [ 91.334261] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.340979] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.348813] device bridge_slave_0 entered promiscuous mode [ 91.367742] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.374182] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.381398] device bridge_slave_1 entered promiscuous mode [ 91.399139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.417430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.467375] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.487972] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.562146] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.569584] team0: Port device team_slave_0 added [ 91.587316] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.594442] team0: Port device team_slave_1 added [ 91.611799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.630717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.650367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.669796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.817110] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.823733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.830536] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.836893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.356924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.409171] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.461833] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.468068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.475115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.527170] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.905559] ================================================================== [ 92.913097] BUG: KASAN: use-after-free in __dev_map_entry_free+0x2ab/0x300 [ 92.920222] Read of size 8 at addr ffff8801c002b648 by task swapper/1/0 [ 92.926960] [ 92.928684] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.19.0-rc3+ #233 [ 92.935489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.944836] Call Trace: [ 92.947402] [ 92.949563] dump_stack+0x1c4/0x2b4 [ 92.953196] ? dump_stack_print_info.cold.2+0x52/0x52 [ 92.958422] ? printk+0xa7/0xcf [ 92.961689] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 92.966452] print_address_description.cold.8+0x9/0x1ff [ 92.971821] kasan_report.cold.9+0x242/0x309 [ 92.976217] ? __dev_map_entry_free+0x2ab/0x300 [ 92.980875] __asan_report_load8_noabort+0x14/0x20 [ 92.985790] __dev_map_entry_free+0x2ab/0x300 [ 92.990272] ? dev_map_delete_elem+0x120/0x120 [ 92.994865] rcu_process_callbacks+0xf23/0x2670 [ 92.999547] ? __rcu_read_unlock+0x2f0/0x2f0 [ 93.003954] ? find_held_lock+0x36/0x1c0 [ 93.008010] ? rebalance_domains+0x358/0xdc0 [ 93.012498] ? lock_downgrade+0x900/0x900 [ 93.016639] ? check_preemption_disabled+0x48/0x200 [ 93.021647] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 93.027430] ? kasan_check_read+0x11/0x20 [ 93.031576] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 93.036840] ? rcu_bh_qs+0xc0/0xc0 [ 93.040392] ? rebalance_domains+0x375/0xdc0 [ 93.044794] ? load_balance+0x3430/0x3430 [ 93.048940] ? enqueue_hrtimer+0x1a5/0x560 [ 93.053174] ? lock_release+0x970/0x970 [ 93.057132] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 93.062312] ? find_held_lock+0x36/0x1c0 [ 93.066380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.071925] ? check_preemption_disabled+0x48/0x200 [ 93.076946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.082500] ? check_preemption_disabled+0x48/0x200 [ 93.087509] ? check_preemption_disabled+0x48/0x200 [ 93.092518] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 93.098043] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 93.103305] ? rcu_pm_notify+0xc0/0xc0 [ 93.107185] __do_softirq+0x30b/0xad8 [ 93.110994] ? __irqentry_text_end+0x1f9618/0x1f9618 [ 93.116097] ? pvclock_read_flags+0x160/0x160 [ 93.120586] ? lapic_next_event+0x5a/0x90 [ 93.124730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.130272] ? check_preemption_disabled+0x48/0x200 [ 93.135287] ? check_preemption_disabled+0x48/0x200 [ 93.140299] ? kvm_clock_read+0x18/0x30 [ 93.144270] ? kvm_sched_clock_read+0x9/0x20 [ 93.148700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.154241] ? check_preemption_disabled+0x48/0x200 [ 93.159249] irq_exit+0x17f/0x1c0 [ 93.162694] smp_apic_timer_interrupt+0x1cb/0x760 [ 93.167523] ? smp_reschedule_interrupt+0x109/0x650 [ 93.172527] ? smp_call_function_single_interrupt+0x650/0x650 [ 93.178397] ? interrupt_entry+0xb5/0xf0 [ 93.182446] ? trace_hardirqs_off_caller+0xbb/0x310 [ 93.187449] ? trace_hardirqs_off_caller+0xbb/0x310 [ 93.192472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 93.197328] ? trace_hardirqs_on_caller+0x310/0x310 [ 93.202328] ? trace_hardirqs_on_caller+0x310/0x310 [ 93.207372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.212896] ? check_preemption_disabled+0x48/0x200 [ 93.217897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.223424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 93.228261] apic_timer_interrupt+0xf/0x20 [ 93.232484] [ 93.234713] RIP: 0010:native_safe_halt+0x6/0x10 [ 93.239368] Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 43 ab 02 fa 48 8b 45 d8 e9 ca fe ff ff 48 89 df e8 32 ab 02 fa eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 93.258281] RSP: 0018:ffff8801d9b2fbf0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 93.265987] RAX: dffffc0000000000 RBX: 1ffff1003b365f82 RCX: 0000000000000000 [ 93.273264] RDX: 1ffffffff12a4540 RSI: 0000000000000001 RDI: ffffffff89522a00 [ 93.280523] RBP: ffff8801d9b2fbf0 R08: ffff8801d9b1a3c0 R09: 0000000000000000 [ 93.287778] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d9b2fcb0 [ 93.295030] R13: ffffffff8a314a60 R14: 0000000000000000 R15: 0000000000000001 [ 93.302309] default_idle+0xbf/0x490 [ 93.306017] ? rcu_dynticks_eqs_enter+0x4c/0x70 [ 93.310676] ? __sched_text_end+0x1/0x1 [ 93.314647] ? rcu_idle_enter+0x329/0x4b0 [ 93.318783] ? rcu_eqs_special_set+0x1b0/0x1b0 [ 93.323351] ? tsc_verify_tsc_adjust+0x137/0x460 [ 93.328107] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 93.333578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.339121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.344648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.350173] arch_cpu_idle+0x10/0x20 [ 93.353874] default_idle_call+0x6d/0x90 [ 93.357922] do_idle+0x3db/0x5b0 [ 93.361299] ? kasan_check_write+0x14/0x20 [ 93.365958] ? do_raw_spin_lock+0xc1/0x200 [ 93.370183] ? arch_cpu_idle_exit+0x70/0x70 [ 93.374508] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 93.379603] ? complete+0x62/0x80 [ 93.383068] cpu_startup_entry+0x10c/0x120 [ 93.387309] ? cpu_in_idle+0x20/0x20 [ 93.391026] start_secondary+0x523/0x750 [ 93.395094] ? set_cpu_sibling_map+0x1860/0x1860 [ 93.399863] secondary_startup_64+0xa4/0xb0 [ 93.404194] [ 93.405806] Allocated by task 5608: [ 93.409425] save_stack+0x43/0xd0 [ 93.412885] kasan_kmalloc+0xc7/0xe0 [ 93.416597] kmem_cache_alloc_trace+0x152/0x750 [ 93.421251] dev_map_alloc+0x210/0x810 [ 93.425121] map_create+0x3bd/0x10f0 [ 93.428817] __x64_sys_bpf+0x303/0x510 [ 93.432690] do_syscall_64+0x1b9/0x820 [ 93.436570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.441758] [ 93.443375] Freed by task 14: [ 93.446486] save_stack+0x43/0xd0 [ 93.449932] __kasan_slab_free+0x102/0x150 [ 93.454149] kasan_slab_free+0xe/0x10 [ 93.457934] kfree+0xcf/0x230 [ 93.461029] dev_map_free+0x514/0x690 [ 93.464822] bpf_map_free_deferred+0xba/0xf0 [ 93.469236] process_one_work+0xc90/0x1b90 [ 93.473452] worker_thread+0x17f/0x1390 [ 93.477416] kthread+0x35a/0x420 [ 93.480769] ret_from_fork+0x3a/0x50 [ 93.484459] [ 93.486082] The buggy address belongs to the object at ffff8801c002b540 [ 93.486082] which belongs to the cache kmalloc-512 of size 512 [ 93.498731] The buggy address is located 264 bytes inside of [ 93.498731] 512-byte region [ffff8801c002b540, ffff8801c002b740) [ 93.510600] The buggy address belongs to the page: [ 93.515517] page:ffffea0007000ac0 count:1 mapcount:0 mapping:ffff8801da800940 index:0x0 [ 93.523653] flags: 0x2fffc0000000100(slab) [ 93.527887] raw: 02fffc0000000100 ffffea0007142788 ffffea0006ff2508 ffff8801da800940 [ 93.535751] raw: 0000000000000000 ffff8801c002b040 0000000100000006 0000000000000000 [ 93.543612] page dumped because: kasan: bad access detected [ 93.549301] [ 93.550908] Memory state around the buggy address: [ 93.555818] ffff8801c002b500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 93.563167] ffff8801c002b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.570523] >ffff8801c002b600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.577866] ^ [ 93.583568] ffff8801c002b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.590911] ffff8801c002b700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.598252] ================================================================== [ 93.605614] Disabling lock debugging due to kernel taint [ 93.611087] Kernel panic - not syncing: panic_on_warn set ... [ 93.611087] [ 93.618463] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 4.19.0-rc3+ #233 [ 93.626531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.628523] kobject: 'loop0' (00000000ec49400f): kobject_uevent_env [ 93.635880] Call Trace: [ 93.635886] [ 93.635902] dump_stack+0x1c4/0x2b4 [ 93.635920] ? dump_stack_print_info.cold.2+0x52/0x52 [ 93.646011] kobject: 'loop0' (00000000ec49400f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 93.647042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 93.647061] panic+0x238/0x4e7 [ 93.673271] ? add_taint.cold.5+0x16/0x16 [ 93.674742] kobject: 'loop0' (00000000ec49400f): kobject_uevent_env [ 93.677426] ? trace_hardirqs_on+0x9a/0x310 [ 93.677439] ? trace_hardirqs_on+0xb4/0x310 [ 93.677451] ? trace_hardirqs_on+0xb4/0x310 [ 93.677469] kasan_end_report+0x47/0x4f [ 93.684753] kobject: 'loop0' (00000000ec49400f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 93.688202] kasan_report.cold.9+0x76/0x309 [ 93.688215] ? __dev_map_entry_free+0x2ab/0x300 [ 93.688229] __asan_report_load8_noabort+0x14/0x20 [ 93.688246] __dev_map_entry_free+0x2ab/0x300 [ 93.719967] kobject: 'loop0' (00000000ec49400f): kobject_uevent_env [ 93.724169] ? dev_map_delete_elem+0x120/0x120 [ 93.724189] rcu_process_callbacks+0xf23/0x2670 [ 93.734257] kobject: 'loop0' (00000000ec49400f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 93.735120] ? __rcu_read_unlock+0x2f0/0x2f0 [ 93.735141] ? find_held_lock+0x36/0x1c0 [ 93.762448] ? rebalance_domains+0x358/0xdc0 [ 93.766890] ? lock_downgrade+0x900/0x900 [ 93.771046] ? check_preemption_disabled+0x48/0x200 [ 93.773307] cgroup: fork rejected by pids controller in [ 93.776071] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 93.776086] ? kasan_check_read+0x11/0x20 [ 93.776100] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 93.776118] ? rcu_bh_qs+0xc0/0xc0 [ 93.782837] /syz0 [ 93.788043] ? rebalance_domains+0x375/0xdc0 [ 93.797445] ? load_balance+0x3430/0x3430 [ 93.797459] ? enqueue_hrtimer+0x1a5/0x560 [ 93.797472] ? lock_release+0x970/0x970 [ 93.797502] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 93.806089] kobject: 'loop0' (00000000ec49400f): kobject_uevent_env [ 93.807492] ? find_held_lock+0x36/0x1c0 [ 93.811646] kobject: 'loop0' (00000000ec49400f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 93.815854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.815866] ? check_preemption_disabled+0x48/0x200 [ 93.815880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.815891] ? check_preemption_disabled+0x48/0x200 [ 93.815902] ? check_preemption_disabled+0x48/0x200 [ 93.815923] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 93.886431] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 93.891700] ? rcu_pm_notify+0xc0/0xc0 [ 93.895576] __do_softirq+0x30b/0xad8 [ 93.899384] ? __irqentry_text_end+0x1f9618/0x1f9618 [ 93.904504] ? pvclock_read_flags+0x160/0x160 [ 93.909005] ? lapic_next_event+0x5a/0x90 [ 93.913137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.918655] ? check_preemption_disabled+0x48/0x200 [ 93.923648] ? check_preemption_disabled+0x48/0x200 [ 93.928649] ? kvm_clock_read+0x18/0x30 [ 93.932604] ? kvm_sched_clock_read+0x9/0x20 [ 93.936998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.942524] ? check_preemption_disabled+0x48/0x200 [ 93.947526] irq_exit+0x17f/0x1c0 [ 93.950963] smp_apic_timer_interrupt+0x1cb/0x760 [ 93.955788] ? smp_reschedule_interrupt+0x109/0x650 [ 93.960804] ? smp_call_function_single_interrupt+0x650/0x650 [ 93.966672] ? interrupt_entry+0xb5/0xf0 [ 93.970728] ? trace_hardirqs_off_caller+0xbb/0x310 [ 93.975747] ? trace_hardirqs_off_caller+0xbb/0x310 [ 93.980747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 93.985571] ? trace_hardirqs_on_caller+0x310/0x310 [ 93.990590] ? trace_hardirqs_on_caller+0x310/0x310 [ 93.995591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.001107] ? check_preemption_disabled+0x48/0x200 [ 94.006104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.011622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 94.016448] apic_timer_interrupt+0xf/0x20 [ 94.020662] [ 94.022878] RIP: 0010:native_safe_halt+0x6/0x10 [ 94.027533] Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 43 ab 02 fa 48 8b 45 d8 e9 ca fe ff ff 48 89 df e8 32 ab 02 fa eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 94.046421] RSP: 0018:ffff8801d9b2fbf0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 94.054114] RAX: dffffc0000000000 RBX: 1ffff1003b365f82 RCX: 0000000000000000 [ 94.061366] RDX: 1ffffffff12a4540 RSI: 0000000000000001 RDI: ffffffff89522a00 [ 94.068618] RBP: ffff8801d9b2fbf0 R08: ffff8801d9b1a3c0 R09: 0000000000000000 [ 94.075890] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d9b2fcb0 [ 94.083167] R13: ffffffff8a314a60 R14: 0000000000000000 R15: 0000000000000001 [ 94.090439] default_idle+0xbf/0x490 [ 94.094138] ? rcu_dynticks_eqs_enter+0x4c/0x70 [ 94.098789] ? __sched_text_end+0x1/0x1 [ 94.102745] ? rcu_idle_enter+0x329/0x4b0 [ 94.106884] ? rcu_eqs_special_set+0x1b0/0x1b0 [ 94.111446] ? tsc_verify_tsc_adjust+0x137/0x460 [ 94.116207] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 94.121662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.127187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.132715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.138258] arch_cpu_idle+0x10/0x20 [ 94.141959] default_idle_call+0x6d/0x90 [ 94.146028] do_idle+0x3db/0x5b0 [ 94.149394] ? kasan_check_write+0x14/0x20 [ 94.153613] ? do_raw_spin_lock+0xc1/0x200 [ 94.157834] ? arch_cpu_idle_exit+0x70/0x70 [ 94.162138] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 94.167227] ? complete+0x62/0x80 [ 94.170669] cpu_startup_entry+0x10c/0x120 [ 94.174888] ? cpu_in_idle+0x20/0x20 [ 94.178590] start_secondary+0x523/0x750 [ 94.182632] ? set_cpu_sibling_map+0x1860/0x1860 [ 94.187393] secondary_startup_64+0xa4/0xb0 [ 94.192624] Kernel Offset: disabled [ 94.196246] Rebooting in 86400 seconds..