INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes Warning: Permanently added '10.128.10.50' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 624.073782] ================================================================== [ 624.081364] BUG: KASAN: use-after-free in xfrm6_tunnel_destroy+0x4f6/0x570 [ 624.088373] Read of size 8 at addr ffff8801c57921b8 by task kworker/0:1/23 [ 624.095377] [ 624.096991] CPU: 0 PID: 23 Comm: kworker/0:1 Not tainted 4.9.190+ #2 [ 624.103651] Workqueue: events xfrm_state_gc_task [ 624.108527] ffff8801d9c5fa60 ffffffff81b66c51 0000000000000000 ffffea000715e400 [ 624.116544] ffff8801c57921b8 0000000000000008 ffffffff8278d2c6 ffff8801d9c5fa98 [ 624.124650] ffffffff8150c161 0000000000000000 ffff8801c57921b8 ffff8801c57921b8 [ 624.132771] Call Trace: [ 624.135341] [<00000000bfd7339e>] dump_stack+0xc1/0x120 [ 624.140683] [<000000003109aac1>] ? xfrm6_tunnel_destroy+0x4f6/0x570 [ 624.147240] [<000000007f235c96>] print_address_description+0x6f/0x23a [ 624.153902] [<000000003109aac1>] ? xfrm6_tunnel_destroy+0x4f6/0x570 [ 624.160373] [<000000008f3f8f8c>] kasan_report.cold+0x8c/0x2ba [ 624.166341] [<00000000a6605afb>] __asan_report_load8_noabort+0x14/0x20 [ 624.173148] [<000000003109aac1>] xfrm6_tunnel_destroy+0x4f6/0x570 [ 624.179459] [<0000000008a8a668>] ? xfrm6_tunnel_destroy+0x34/0x570 [ 624.185998] [<00000000c7572be4>] ? kfree+0x1b8/0x310 [ 624.191182] [<0000000046310069>] xfrm_state_gc_task+0x3b9/0x520 [ 624.197321] [<000000008ae217d8>] ? xfrm_state_unregister_afinfo+0x170/0x170 [ 624.204519] [<0000000026707a3e>] process_one_work+0x88b/0x1600 [ 624.210921] [<000000005973c4d6>] ? process_one_work+0x7ce/0x1600 [ 624.217155] [<00000000a07d575a>] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 624.223689] [<000000006ccb80a1>] ? _raw_spin_unlock_irq+0x28/0x60 [ 624.230125] [<0000000040b2e013>] worker_thread+0x7fb/0x11d0 [ 624.235922] [<00000000b4dee4b1>] ? process_one_work+0x1600/0x1600 [ 624.242236] [<00000000434b7448>] kthread+0x278/0x310 [ 624.247422] [<000000006f82e1aa>] ? kthread_park+0xa0/0xa0 [ 624.253039] [<00000000b0287c2b>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 624.259783] [<000000003f38ad9c>] ? _raw_spin_unlock_irq+0x39/0x60 [ 624.266183] [<000000006edf3a1a>] ? finish_task_switch+0x1e5/0x660 [ 624.272759] [<00000000f199e0e7>] ? finish_task_switch+0x1b7/0x660 [ 624.279079] [<000000000bd5b953>] ? __switch_to_asm+0x41/0x70 [ 624.284961] [<0000000094a7ea59>] ? __switch_to_asm+0x35/0x70 [ 624.291099] [<000000000bd5b953>] ? __switch_to_asm+0x41/0x70 [ 624.297105] [<000000006f82e1aa>] ? kthread_park+0xa0/0xa0 [ 624.302806] [<000000006f82e1aa>] ? kthread_park+0xa0/0xa0 [ 624.308437] [<00000000d05e6bfd>] ret_from_fork+0x5c/0x70 [ 624.313963] [ 624.315577] Allocated by task 2169: [ 624.319193] save_stack_trace+0x16/0x20 [ 624.323258] kasan_kmalloc.part.0+0x62/0xf0 [ 624.327577] kasan_kmalloc+0xb7/0xd0 [ 624.331278] __kmalloc+0x133/0x320 [ 624.334806] ops_init+0xf1/0x3a0 [ 624.338160] setup_net+0x1c8/0x500 [ 624.341932] copy_net_ns+0x191/0x340 [ 624.345635] create_new_namespaces+0x37c/0x7a0 [ 624.350195] unshare_nsproxy_namespaces+0xab/0x1e0 [ 624.355118] SyS_unshare+0x305/0x6f0 [ 624.358827] do_syscall_64+0x1ad/0x5c0 [ 624.362707] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 624.367874] [ 624.369492] Freed by task 64: [ 624.372581] save_stack_trace+0x16/0x20 [ 624.376546] kasan_slab_free+0xb0/0x190 [ 624.380558] kfree+0xfc/0x310 [ 624.383663] ops_free_list.part.0+0x1ff/0x330 [ 624.388149] cleanup_net+0x474/0x8a0 [ 624.391958] process_one_work+0x88b/0x1600 [ 624.396174] worker_thread+0x5df/0x11d0 [ 624.400416] kthread+0x278/0x310 [ 624.403769] ret_from_fork+0x5c/0x70 [ 624.407454] [ 624.409056] The buggy address belongs to the object at ffff8801c5792100 [ 624.409056] which belongs to the cache kmalloc-8192 of size 8192 [ 624.421864] The buggy address is located 184 bytes inside of [ 624.421864] 8192-byte region [ffff8801c5792100, ffff8801c5794100) [ 624.433808] The buggy address belongs to the page: [ 624.439212] page:ffffea000715e400 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 624.449475] flags: 0x4000000000010200(slab|head) [ 624.454215] page dumped because: kasan: bad access detected [ 624.460012] [ 624.461616] Memory state around the buggy address: [ 624.466805] ffff8801c5792080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 624.474195] ffff8801c5792100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 624.481807] >ffff8801c5792180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 624.489424] ^ [ 624.494667] ffff8801c5792200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 624.502432] ffff8801c5792280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 624.509918] ================================================================== [ 624.517253] Disabling lock debugging due to kernel taint executing program [ 624.522911] Kernel panic - not syncing: panic_on_warn set ... [ 624.522911] [ 624.530485] CPU: 0 PID: 23 Comm: kworker/0:1 Tainted: G B 4.9.190+ #2 [ 624.538846] Workqueue: events xfrm_state_gc_task [ 624.543714] ffff8801d9c5f9a0 ffffffff81b66c51 ffff8801d9c5fa00 ffffffff82e40a77 [ 624.551802] 00000000ffffffff 0000000000000000 ffffffff8278d2c6 ffff8801d9c5fa80 [ 624.559836] ffffffff813febaa 0000000041b58ab3 ffffffff82e32ab5 ffffffff813fe9d1 [ 624.567853] Call Trace: [ 624.570432] [<00000000bfd7339e>] dump_stack+0xc1/0x120 [ 624.575830] [<000000003109aac1>] ? xfrm6_tunnel_destroy+0x4f6/0x570 [ 624.582529] [<00000000eb85a3f1>] panic+0x1d9/0x3bd [ 624.587534] [<00000000a304ee91>] ? add_taint.cold+0x16/0x16 [ 624.593316] [<000000003109aac1>] ? xfrm6_tunnel_destroy+0x4f6/0x570 [ 624.599804] [<000000004abb2d37>] kasan_end_report+0x47/0x4f [ 624.605643] [<00000000f68db0f8>] kasan_report.cold+0xa9/0x2ba [ 624.611621] [<00000000a6605afb>] __asan_report_load8_noabort+0x14/0x20 [ 624.618366] [<000000003109aac1>] xfrm6_tunnel_destroy+0x4f6/0x570 [ 624.624888] [<0000000008a8a668>] ? xfrm6_tunnel_destroy+0x34/0x570 [ 624.631479] [<00000000c7572be4>] ? kfree+0x1b8/0x310 [ 624.651158] [<0000000046310069>] xfrm_state_gc_task+0x3b9/0x520 [ 624.657403] [<000000008ae217d8>] ? xfrm_state_unregister_afinfo+0x170/0x170 [ 624.664589] [<0000000026707a3e>] process_one_work+0x88b/0x1600 [ 624.670807] [<000000005973c4d6>] ? process_one_work+0x7ce/0x1600 [ 624.677156] [<00000000a07d575a>] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 624.683711] [<000000006ccb80a1>] ? _raw_spin_unlock_irq+0x28/0x60 [ 624.690023] [<0000000040b2e013>] worker_thread+0x7fb/0x11d0 [ 624.695906] [<00000000b4dee4b1>] ? process_one_work+0x1600/0x1600 [ 624.702332] [<00000000434b7448>] kthread+0x278/0x310 [ 624.707567] [<000000006f82e1aa>] ? kthread_park+0xa0/0xa0 [ 624.713189] [<00000000b0287c2b>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 624.720075] [<000000003f38ad9c>] ? _raw_spin_unlock_irq+0x39/0x60 [ 624.726499] [<000000006edf3a1a>] ? finish_task_switch+0x1e5/0x660 [ 624.732825] [<00000000f199e0e7>] ? finish_task_switch+0x1b7/0x660 [ 624.739309] [<000000000bd5b953>] ? __switch_to_asm+0x41/0x70 [ 624.745282] [<0000000094a7ea59>] ? __switch_to_asm+0x35/0x70 [ 624.751704] [<000000000bd5b953>] ? __switch_to_asm+0x41/0x70 [ 624.757591] [<000000006f82e1aa>] ? kthread_park+0xa0/0xa0 [ 624.763661] [<000000006f82e1aa>] ? kthread_park+0xa0/0xa0 [ 624.769763] [<00000000d05e6bfd>] ret_from_fork+0x5c/0x70 [ 624.776141] Kernel Offset: disabled [ 624.779839] Rebooting in 86400 seconds..