INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes [ 783.379309] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. [ 788.833356] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/09 20:49:41 parsed 1 programs [ 790.061681] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/09 20:49:43 executed programs: 0 [ 791.297783] IPVS: Creating netns size=2536 id=1 [ 791.429777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 791.441827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 791.486600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 791.499307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 791.541851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 791.553429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 791.565387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 791.587196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 792.086964] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 792.114033] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 792.120551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 792.127283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/08/09 20:49:48 executed programs: 70 2018/08/09 20:49:53 executed programs: 186 2018/08/09 20:49:58 executed programs: 303 2018/08/09 20:50:05 executed programs: 515 2018/08/09 20:50:10 executed programs: 799 2018/08/09 20:50:15 executed programs: 1091 2018/08/09 20:50:20 executed programs: 1209 2018/08/09 20:50:25 executed programs: 1330 2018/08/09 20:50:31 executed programs: 1527 [ 843.841978] random: crng init done 2018/08/09 20:50:36 executed programs: 1813 2018/08/09 20:50:41 executed programs: 2101 2018/08/09 20:50:49 executed programs: 2213 2018/08/09 20:50:54 executed programs: 2503 2018/08/09 20:51:02 executed programs: 2597 2018/08/09 20:51:07 executed programs: 2712 [ 876.848815] ================================================================== [ 876.856253] BUG: KASAN: use-after-free in p9_conn_cancel+0x3f3/0x4c0 [ 876.862761] Read of size 4 at addr ffff8801d6ee91a8 by task kworker/1:1/24 [ 876.869785] [ 876.871397] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 4.9.119-g92e8704 #22 [ 876.878647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.887999] Workqueue: events p9_poll_workfn [ 876.892525] ffff8801d940faa0 ffffffff81eb4be9 ffffea00075bba00 ffff8801d6ee91a8 [ 876.900520] 0000000000000000 ffff8801d6ee91a8 00000000ffffff87 ffff8801d940fad8 [ 876.908518] ffffffff81567f89 ffff8801d6ee91a8 0000000000000004 0000000000000000 [ 876.916535] Call Trace: [ 876.919105] [] dump_stack+0xc1/0x128 [ 876.924455] [] print_address_description+0x6c/0x234 [ 876.931124] [] kasan_report.cold.6+0x242/0x2fe [ 876.937373] [] ? p9_conn_cancel+0x3f3/0x4c0 [ 876.943360] [] __asan_report_load4_noabort+0x14/0x20 [ 876.950109] [] p9_conn_cancel+0x3f3/0x4c0 [ 876.955900] [] ? p9_pollwake+0x110/0x110 [ 876.961600] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 876.968518] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 876.975351] [] ? p9_fd_poll+0x246/0x310 [ 876.980979] [] p9_poll_workfn+0x222/0x330 [ 876.986780] [] process_one_work+0x7e1/0x1500 [ 876.992823] [] ? process_one_work+0x728/0x1500 [ 876.999040] [] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 877.005519] [] worker_thread+0xd6/0x10a0 [ 877.011216] [] kthread+0x26d/0x300 [ 877.016421] [] ? process_one_work+0x1500/0x1500 [ 877.022762] [] ? kthread_park+0xa0/0xa0 [ 877.028379] [] ? kthread_park+0xa0/0xa0 [ 877.033991] [] ? kthread_park+0xa0/0xa0 [ 877.039628] [] ret_from_fork+0x5c/0x70 [ 877.045165] [ 877.046775] Allocated by task 18313: [ 877.050472] save_stack_trace+0x16/0x20 [ 877.054425] save_stack+0x43/0xd0 [ 877.057856] kasan_kmalloc+0xc7/0xe0 [ 877.061557] kmem_cache_alloc_trace+0xfd/0x2b0 [ 877.066126] p9_fd_create+0xf3/0x330 [ 877.069818] p9_client_create+0x6ff/0x10a0 [ 877.074032] v9fs_session_init+0x333/0x13a0 [ 877.078331] v9fs_mount+0x7d/0x810 [ 877.081868] mount_fs+0x28c/0x370 [ 877.085296] vfs_kern_mount.part.29+0xd1/0x3d0 [ 877.089855] do_mount+0x3c9/0x2740 [ 877.093371] SyS_mount+0xfe/0x110 [ 877.096807] do_syscall_64+0x1a6/0x490 [ 877.100673] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 877.105769] [ 877.107375] Freed by task 18313: [ 877.110736] save_stack_trace+0x16/0x20 [ 877.114687] save_stack+0x43/0xd0 [ 877.118117] kasan_slab_free+0x72/0xc0 [ 877.121992] kfree+0xfb/0x310 [ 877.125098] p9_fd_close+0x298/0x330 [ 877.128796] p9_client_destroy+0x73/0x570 [ 877.132925] v9fs_session_close+0x46/0x110 [ 877.137159] v9fs_kill_super+0x4e/0xa0 [ 877.141115] deactivate_locked_super+0x75/0xd0 [ 877.145676] v9fs_mount+0x3c6/0x810 [ 877.149308] mount_fs+0x28c/0x370 [ 877.152742] vfs_kern_mount.part.29+0xd1/0x3d0 [ 877.157299] do_mount+0x3c9/0x2740 [ 877.160814] SyS_mount+0xfe/0x110 [ 877.164243] do_syscall_64+0x1a6/0x490 [ 877.168109] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 877.173205] [ 877.174814] The buggy address belongs to the object at ffff8801d6ee9180 [ 877.174814] which belongs to the cache kmalloc-512 of size 512 [ 877.187453] The buggy address is located 40 bytes inside of [ 877.187453] 512-byte region [ffff8801d6ee9180, ffff8801d6ee9380) [ 877.199220] The buggy address belongs to the page: [ 877.204131] page:ffffea00075bba00 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 877.214335] flags: 0x8000000000004080(slab|head) [ 877.219065] page dumped because: kasan: bad access detected [ 877.224750] [ 877.226352] Memory state around the buggy address: [ 877.231261] ffff8801d6ee9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 877.238601] ffff8801d6ee9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 877.245944] >ffff8801d6ee9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 877.253284] ^ [ 877.257939] ffff8801d6ee9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 877.265292] ffff8801d6ee9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 877.272633] ================================================================== [ 877.279970] Disabling lock debugging due to kernel taint [ 877.285401] Kernel panic - not syncing: panic_on_warn set ... [ 877.285401] [ 877.292767] CPU: 1 PID: 24 Comm: kworker/1:1 Tainted: G B 4.9.119-g92e8704 #22 [ 877.301250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.310598] Workqueue: events p9_poll_workfn [ 877.315157] ffff8801d940fa00 ffffffff81eb4be9 ffffffff843c893f 00000000ffffffff [ 877.323157] 0000000000000000 0000000000000001 00000000ffffff87 ffff8801d940fac0 [ 877.331155] ffffffff81421c95 0000000041b58ab3 ffffffff843bc020 ffffffff81421ad6 [ 877.339159] Call Trace: [ 877.341728] [] dump_stack+0xc1/0x128 [ 877.347080] [] panic+0x1bf/0x3bc [ 877.352082] [] ? add_taint.cold.6+0x16/0x16 [ 877.358039] [] ? kasan_end_report+0x32/0x4f [ 877.363994] [] kasan_end_report+0x47/0x4f [ 877.369793] [] kasan_report.cold.6+0x76/0x2fe [ 877.375918] [] ? p9_conn_cancel+0x3f3/0x4c0 [ 877.381873] [] __asan_report_load4_noabort+0x14/0x20 [ 877.388637] [] p9_conn_cancel+0x3f3/0x4c0 [ 877.394418] [] ? p9_pollwake+0x110/0x110 [ 877.400110] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 877.407021] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 877.413848] [] ? p9_fd_poll+0x246/0x310 [ 877.419460] [] p9_poll_workfn+0x222/0x330 [ 877.425249] [] process_one_work+0x7e1/0x1500 [ 877.431297] [] ? process_one_work+0x728/0x1500 [ 877.437528] [] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 877.444024] [] worker_thread+0xd6/0x10a0 [ 877.449742] [] kthread+0x26d/0x300 [ 877.454920] [] ? process_one_work+0x1500/0x1500 [ 877.461236] [] ? kthread_park+0xa0/0xa0 [ 877.466841] [] ? kthread_park+0xa0/0xa0 [ 877.472444] [] ? kthread_park+0xa0/0xa0 [ 877.478051] [] ret_from_fork+0x5c/0x70 [ 877.483945] Dumping ftrace buffer: [ 877.487473] (ftrace buffer empty) [ 877.491179] Kernel Offset: disabled [ 877.494804] Rebooting in 86400 seconds..