[ 32.754129] audit: type=1800 audit(1546192634.444:27): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 32.786696] audit: type=1800 audit(1546192634.444:28): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.317993] audit: type=1800 audit(1546192635.064:29): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 33.342434] audit: type=1800 audit(1546192635.064:30): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. syzkaller login: [ 44.604384] IPVS: ftp: loaded support on port[0] = 21 [ 44.660902] chnl_net:caif_netlink_parms(): no params data found [ 44.687860] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.694402] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.701510] device bridge_slave_0 entered promiscuous mode [ 44.708728] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.715074] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.721972] device bridge_slave_1 entered promiscuous mode [ 44.735907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.744819] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.761475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.768919] team0: Port device team_slave_0 added [ 44.774149] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.781346] team0: Port device team_slave_1 added [ 44.786432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.793724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.849359] device hsr_slave_0 entered promiscuous mode [ 44.917503] device hsr_slave_1 entered promiscuous mode [ 44.967619] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.974427] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.986625] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.993170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.000147] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.006492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.034229] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.041714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.050352] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.058790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.077484] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.084628] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.092734] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 45.102038] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.108484] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.116408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.124196] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.130557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.148308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.155817] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.162167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.169523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.177071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.184637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.192512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.201476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.210473] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.216446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 45.229434] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.239155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.250544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 45.337398] ================================================================== [ 45.344852] BUG: KASAN: slab-out-of-bounds in tun_net_xmit+0x197e/0x1be0 [ 45.351669] Read of size 8 at addr ffff88809fa64f48 by task swapper/0/0 [ 45.358396] [ 45.360002] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.20.0+ #363 [ 45.366313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.375645] Call Trace: [ 45.378204] [ 45.380331] dump_stack+0x1d3/0x2c6 [ 45.383933] ? dump_stack_print_info.cold.1+0x20/0x20 [ 45.389098] ? printk+0xa7/0xcf [ 45.392355] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 45.397094] print_address_description.cold.8+0x9/0x1ff [ 45.402452] kasan_report.cold.9+0x242/0x309 [ 45.406835] ? tun_net_xmit+0x197e/0x1be0 [ 45.410970] __asan_report_load8_noabort+0x14/0x20 [ 45.415878] tun_net_xmit+0x197e/0x1be0 [ 45.419830] ? rcu_read_lock_sched_held+0x108/0x120 [ 45.424822] ? tun_xdp_act.isra.49+0xa00/0xa00 [ 45.429479] ? print_usage_bug+0xc0/0xc0 [ 45.433525] ? find_held_lock+0x36/0x1c0 [ 45.437568] ? graph_lock+0x270/0x270 [ 45.441348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.446865] ? check_preemption_disabled+0x48/0x280 [ 45.451862] ? __lock_is_held+0xb5/0x140 [ 45.455910] dev_hard_start_xmit+0x286/0xc80 [ 45.460314] ? dev_direct_xmit+0x6a0/0x6a0 [ 45.464527] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 45.470044] ? validate_xmit_xfrm+0x41c/0xef0 [ 45.474522] ? validate_xmit_skb+0x849/0xf70 [ 45.478913] ? netif_skb_features+0xb50/0xb50 [ 45.483390] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 45.488479] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 45.493561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.499080] ? check_preemption_disabled+0x48/0x280 [ 45.504078] ? validate_xmit_skb_list+0xf4/0x140 [ 45.508824] sch_direct_xmit+0x48b/0x1130 [ 45.512970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.518488] ? check_preemption_disabled+0x48/0x280 [ 45.523483] ? dev_watchdog+0xb10/0xb10 [ 45.527466] ? __lock_is_held+0xb5/0x140 [ 45.531522] __qdisc_run+0x624/0x19f0 [ 45.535339] ? sch_direct_xmit+0x1130/0x1130 [ 45.539730] ? lock_acquire+0x1ed/0x520 [ 45.543687] ? dev_queue_xmit+0x17/0x20 [ 45.547651] ? lock_release+0xa00/0xa00 [ 45.551615] ? mini_qdisc_pair_init+0x160/0x160 [ 45.556269] __dev_queue_xmit+0x190c/0x3ac0 [ 45.560571] ? dev_queue_xmit+0x17/0x20 [ 45.564753] ? netdev_pick_tx+0x300/0x300 [ 45.568881] ? __lock_acquire+0x62f/0x4c20 [ 45.573093] ? check_preemption_disabled+0x48/0x280 [ 45.578099] ? kasan_check_read+0x11/0x20 [ 45.582234] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 45.587504] ? mark_held_locks+0x130/0x130 [ 45.591732] ? fib_rules_lookup+0x54c/0xcd0 [ 45.596032] ? fib_rules_net_exit+0x120/0x120 [ 45.600505] ? kasan_check_read+0x11/0x20 [ 45.604627] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 45.609899] ? print_usage_bug+0xc0/0xc0 [ 45.613933] ? graph_lock+0x270/0x270 [ 45.617718] ? __lock_acquire+0x62f/0x4c20 [ 45.621952] ? graph_lock+0x270/0x270 [ 45.625731] ? print_usage_bug+0xc0/0xc0 [ 45.629776] ? ipv6_chk_mcast_addr+0x350/0x940 [ 45.634335] ? find_held_lock+0x36/0x1c0 [ 45.638379] ? mark_held_locks+0xc7/0x130 [ 45.642501] ? ip6_finish_output2+0x14f0/0x2930 [ 45.647149] ? ip6_finish_output2+0x14f0/0x2930 [ 45.651804] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 45.656363] ? trace_hardirqs_on+0xbd/0x310 [ 45.660664] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 45.666095] dev_queue_xmit+0x17/0x20 [ 45.669868] ? dev_queue_xmit+0x17/0x20 [ 45.673832] ip6_finish_output2+0x144e/0x2930 [ 45.678302] ? __do_softirq+0x30c/0xb2e [ 45.682261] ? find_held_lock+0x36/0x1c0 [ 45.686301] ? ip6_forward_finish+0x580/0x580 [ 45.690781] ? ip6_mtu+0x39c/0x520 [ 45.694301] ? lock_downgrade+0x900/0x900 [ 45.698437] ? check_preemption_disabled+0x48/0x280 [ 45.703434] ? kasan_check_read+0x11/0x20 [ 45.707570] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 45.712831] ? rcu_read_unlock_special+0x370/0x370 [ 45.717754] ? ip6_mtu+0x160/0x520 [ 45.721280] ? find_match+0x10a0/0x10a0 [ 45.725231] ? kasan_check_read+0x11/0x20 [ 45.729448] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 45.734706] ip6_finish_output+0x583/0xc50 [ 45.738948] ? ip6_finish_output+0x583/0xc50 [ 45.743336] ip6_output+0x232/0x9d0 [ 45.746959] ? ip6_finish_output+0xc50/0xc50 [ 45.751348] ? ip6_fragment+0x3850/0x3850 [ 45.755475] ? ip6_mtu_from_fib6+0x770/0x770 [ 45.759864] mld_sendpack+0xac9/0xfa0 [ 45.763662] ? nf_hook.constprop.40+0x860/0x860 [ 45.768314] ? _raw_read_unlock_bh+0x30/0x40 [ 45.772705] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 45.778161] ? __local_bh_enable_ip+0x160/0x260 [ 45.782809] mld_send_initial_cr.part.32+0x114/0x160 [ 45.787905] mld_dad_timer_expire+0x42/0x1b0 [ 45.792309] call_timer_fn+0x272/0x920 [ 45.796178] ? mld_send_initial_cr.part.32+0x160/0x160 [ 45.801433] ? process_timeout+0x40/0x40 [ 45.805473] ? __run_timers+0x7da/0xc70 [ 45.809432] ? _raw_spin_unlock_irq+0x27/0x80 [ 45.813905] ? _raw_spin_unlock_irq+0x27/0x80 [ 45.818388] ? mld_send_initial_cr.part.32+0x160/0x160 [ 45.823640] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 45.828202] ? trace_hardirqs_on+0xbd/0x310 [ 45.832499] ? kasan_check_read+0x11/0x20 [ 45.836624] ? __run_timers+0x7da/0xc70 [ 45.840580] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 45.846014] ? mld_send_initial_cr.part.32+0x160/0x160 [ 45.851288] __run_timers+0x7e5/0xc70 [ 45.855083] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 45.860445] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 45.865438] ? graph_lock+0x270/0x270 [ 45.869221] ? enqueue_hrtimer+0x1a5/0x560 [ 45.873434] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 45.878603] ? find_held_lock+0x36/0x1c0 [ 45.882642] ? pvclock_read_flags+0x160/0x160 [ 45.887114] ? clockevents_program_event+0x158/0x370 [ 45.892202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.897719] ? check_preemption_disabled+0x48/0x280 [ 45.902718] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 45.908244] ? rcu_pm_notify+0xc0/0xc0 [ 45.912110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.917627] ? check_preemption_disabled+0x48/0x280 [ 45.922620] run_timer_softirq+0x52/0xb0 [ 45.926658] ? rcu_read_lock_sched_held+0x108/0x120 [ 45.931651] __do_softirq+0x30c/0xb2e [ 45.935431] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 45.940528] ? pvclock_read_flags+0x160/0x160 [ 45.944999] ? lapic_next_event+0x5a/0x90 [ 45.949128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.954645] ? kvm_clock_read+0x18/0x30 [ 45.958597] ? kvm_sched_clock_read+0x9/0x20 [ 45.962982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.968502] ? check_preemption_disabled+0x48/0x280 [ 45.973498] irq_exit+0x17f/0x1c0 [ 45.976933] smp_apic_timer_interrupt+0x1cb/0x760 [ 45.981759] ? smp_call_function_single_interrupt+0x650/0x650 [ 45.987629] ? interrupt_entry+0xb5/0xc0 [ 45.991675] ? trace_hardirqs_off_caller+0xbb/0x310 [ 45.996671] ? trace_hardirqs_off_caller+0xbb/0x310 [ 46.001666] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.006485] ? trace_hardirqs_on_caller+0x310/0x310 [ 46.011478] ? trace_hardirqs_on_caller+0x310/0x310 [ 46.016475] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.021303] apic_timer_interrupt+0xf/0x20 [ 46.025509] [ 46.027736] RIP: 0010:native_safe_halt+0x6/0x10 [ 46.032393] Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 a3 84 c9 f9 48 8b 45 d8 e9 ca fe ff ff 48 89 df e8 92 84 c9 f9 eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 46.051369] RSP: 0018:ffffffff89607c20 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 46.059065] RAX: dffffc0000000000 RBX: 1ffffffff12c0f88 RCX: 0000000000000000 [ 46.066315] RDX: 1ffffffff12e4969 RSI: 0000000000000001 RDI: ffffffff89724b48 [ 46.073563] RBP: ffffffff89607c20 R08: ffffffff8967aec0 R09: 0000000000000000 [ 46.080832] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89607ce0 [ 46.088083] R13: ffffffff8a3a3260 R14: 0000000000000000 R15: 0000000000000000 [ 46.095342] default_idle+0xbf/0x490 [ 46.099039] ? rcu_dynticks_eqs_enter+0x4f/0x80 [ 46.103683] ? __sched_text_end+0x1/0x1 [ 46.107641] ? rcu_idle_enter+0x39a/0x530 [ 46.111796] ? rcu_eqs_special_set+0x1c0/0x1c0 [ 46.116377] ? tsc_verify_tsc_adjust+0x137/0x460 [ 46.121109] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 46.126534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.132051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.137569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.143087] arch_cpu_idle+0x10/0x20 [ 46.146780] default_idle_call+0x6d/0x90 [ 46.150823] do_idle+0x3db/0x5b0 [ 46.154170] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 46.159597] ? arch_cpu_idle_exit+0x70/0x70 [ 46.163909] ? check_preemption_disabled+0x48/0x280 [ 46.168911] cpu_startup_entry+0x18/0x20 [ 46.172947] rest_init+0x243/0x372 [ 46.176462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.181978] arch_call_rest_init+0xe/0x1b [ 46.186102] start_kernel+0x873/0x8ae [ 46.189881] ? mem_encrypt_init+0xb/0xb [ 46.193837] ? early_idt_handler_common+0x3b/0x60 [ 46.198661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.204176] ? x86_family+0x3e/0x50 [ 46.207791] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 46.213311] x86_64_start_reservations+0x29/0x2b [ 46.218043] x86_64_start_kernel+0x76/0x79 [ 46.222256] secondary_startup_64+0xa4/0xb0 [ 46.226555] [ 46.228158] Allocated by task 7497: [ 46.231773] save_stack+0x43/0xd0 [ 46.235200] kasan_kmalloc+0xc7/0xe0 [ 46.238887] __kmalloc_node+0x50/0x70 [ 46.242770] kvmalloc_node+0x65/0xf0 [ 46.246478] tun_device_event+0x56a/0x106c [ 46.250689] notifier_call_chain+0x17e/0x380 [ 46.255073] raw_notifier_call_chain+0x2d/0x40 [ 46.259634] call_netdevice_notifiers_info+0x3f/0x90 [ 46.264711] dev_change_tx_queue_len+0x188/0x270 [ 46.269438] dev_ifsioc+0x79b/0xa80 [ 46.273147] dev_ioctl+0x1b5/0xcc0 [ 46.276665] sock_do_ioctl+0x1f6/0x420 [ 46.280527] sock_ioctl+0x313/0x690 [ 46.284139] do_vfs_ioctl+0x1de/0x1790 [ 46.288013] ksys_ioctl+0xa9/0xd0 [ 46.291450] __x64_sys_ioctl+0x73/0xb0 [ 46.295314] do_syscall_64+0x1b9/0x820 [ 46.299184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.304342] [ 46.305952] Freed by task 4400: [ 46.309209] save_stack+0x43/0xd0 [ 46.312635] __kasan_slab_free+0x102/0x150 [ 46.316842] kasan_slab_free+0xe/0x10 [ 46.320617] kfree+0xcf/0x230 [ 46.323698] single_release+0x8f/0xb0 [ 46.327574] __fput+0x385/0xa30 [ 46.330845] ____fput+0x15/0x20 [ 46.334108] task_work_run+0x1e8/0x2a0 [ 46.337972] exit_to_usermode_loop+0x318/0x380 [ 46.342528] do_syscall_64+0x6be/0x820 [ 46.346388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.351557] [ 46.353164] The buggy address belongs to the object at ffff88809fa64f40 [ 46.353164] which belongs to the cache kmalloc-32 of size 32 [ 46.365621] The buggy address is located 8 bytes inside of [ 46.365621] 32-byte region [ffff88809fa64f40, ffff88809fa64f60) [ 46.377215] The buggy address belongs to the page: [ 46.382144] page:ffffea00027e9900 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff88809fa64fc1 [ 46.391571] flags: 0x1fffc0000000200(slab) [ 46.395781] raw: 01fffc0000000200 ffffea0002837048 ffffea00028f0888 ffff88812c3f01c0 [ 46.403638] raw: ffff88809fa64fc1 ffff88809fa64000 000000010000003f 0000000000000000 [ 46.411492] page dumped because: kasan: bad access detected [ 46.417191] [ 46.418826] Memory state around the buggy address: [ 46.423728] ffff88809fa64e00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 46.431168] ffff88809fa64e80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 46.438510] >ffff88809fa64f00: fb fb fb fb fc fc fc fc 00 fc fc fc fc fc fc fc [ 46.445842] ^ [ 46.451526] ffff88809fa64f80: 06 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.458862] ffff88809fa65000: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 46.466233] ================================================================== [ 46.473563] Disabling lock debugging due to kernel taint [ 46.479018] Kernel panic - not syncing: panic_on_warn set ... [ 46.484895] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 4.20.0+ #363 [ 46.492586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.501910] Call Trace: [ 46.504464] [ 46.506592] dump_stack+0x1d3/0x2c6 [ 46.510204] ? dump_stack_print_info.cold.1+0x20/0x20 [ 46.515389] panic+0x2ad/0x55f [ 46.518558] ? add_taint.cold.5+0x16/0x16 [ 46.522678] ? trace_hardirqs_on+0x9a/0x310 [ 46.526974] ? trace_hardirqs_on+0xb4/0x310 [ 46.531267] ? trace_hardirqs_on+0xb4/0x310 [ 46.535565] kasan_end_report+0x47/0x4f [ 46.539513] kasan_report.cold.9+0x76/0x309 [ 46.543805] ? tun_net_xmit+0x197e/0x1be0 [ 46.547927] __asan_report_load8_noabort+0x14/0x20 [ 46.552828] tun_net_xmit+0x197e/0x1be0 [ 46.556775] ? rcu_read_lock_sched_held+0x108/0x120 [ 46.561767] ? tun_xdp_act.isra.49+0xa00/0xa00 [ 46.566325] ? print_usage_bug+0xc0/0xc0 [ 46.570358] ? find_held_lock+0x36/0x1c0 [ 46.574402] ? graph_lock+0x270/0x270 [ 46.578179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.583694] ? check_preemption_disabled+0x48/0x280 [ 46.588687] ? __lock_is_held+0xb5/0x140 [ 46.592723] dev_hard_start_xmit+0x286/0xc80 [ 46.597107] ? dev_direct_xmit+0x6a0/0x6a0 [ 46.601318] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 46.606833] ? validate_xmit_xfrm+0x41c/0xef0 [ 46.611306] ? validate_xmit_skb+0x849/0xf70 [ 46.615692] ? netif_skb_features+0xb50/0xb50 [ 46.620170] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 46.625244] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 46.630326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.635840] ? check_preemption_disabled+0x48/0x280 [ 46.640837] ? validate_xmit_skb_list+0xf4/0x140 [ 46.645569] sch_direct_xmit+0x48b/0x1130 [ 46.649697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.655210] ? check_preemption_disabled+0x48/0x280 [ 46.660204] ? dev_watchdog+0xb10/0xb10 [ 46.664151] ? __lock_is_held+0xb5/0x140 [ 46.668193] __qdisc_run+0x624/0x19f0 [ 46.671979] ? sch_direct_xmit+0x1130/0x1130 [ 46.676360] ? lock_acquire+0x1ed/0x520 [ 46.680326] ? dev_queue_xmit+0x17/0x20 [ 46.684286] ? lock_release+0xa00/0xa00 [ 46.688237] ? mini_qdisc_pair_init+0x160/0x160 [ 46.692887] __dev_queue_xmit+0x190c/0x3ac0 [ 46.697280] ? dev_queue_xmit+0x17/0x20 [ 46.701242] ? netdev_pick_tx+0x300/0x300 [ 46.705367] ? __lock_acquire+0x62f/0x4c20 [ 46.709593] ? check_preemption_disabled+0x48/0x280 [ 46.714587] ? kasan_check_read+0x11/0x20 [ 46.718711] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 46.723964] ? mark_held_locks+0x130/0x130 [ 46.728174] ? fib_rules_lookup+0x54c/0xcd0 [ 46.732469] ? fib_rules_net_exit+0x120/0x120 [ 46.737026] ? kasan_check_read+0x11/0x20 [ 46.741147] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 46.746395] ? print_usage_bug+0xc0/0xc0 [ 46.750433] ? graph_lock+0x270/0x270 [ 46.754207] ? __lock_acquire+0x62f/0x4c20 [ 46.758426] ? graph_lock+0x270/0x270 [ 46.762204] ? print_usage_bug+0xc0/0xc0 [ 46.766242] ? ipv6_chk_mcast_addr+0x350/0x940 [ 46.770803] ? find_held_lock+0x36/0x1c0 [ 46.774841] ? mark_held_locks+0xc7/0x130 [ 46.778998] ? ip6_finish_output2+0x14f0/0x2930 [ 46.783646] ? ip6_finish_output2+0x14f0/0x2930 [ 46.788294] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 46.792858] ? trace_hardirqs_on+0xbd/0x310 [ 46.797167] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 46.802604] dev_queue_xmit+0x17/0x20 [ 46.806382] ? dev_queue_xmit+0x17/0x20 [ 46.810336] ip6_finish_output2+0x144e/0x2930 [ 46.814806] ? __do_softirq+0x30c/0xb2e [ 46.818762] ? find_held_lock+0x36/0x1c0 [ 46.822799] ? ip6_forward_finish+0x580/0x580 [ 46.827285] ? ip6_mtu+0x39c/0x520 [ 46.830808] ? lock_downgrade+0x900/0x900 [ 46.834933] ? check_preemption_disabled+0x48/0x280 [ 46.839944] ? kasan_check_read+0x11/0x20 [ 46.844072] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 46.849325] ? rcu_read_unlock_special+0x370/0x370 [ 46.854233] ? ip6_mtu+0x160/0x520 [ 46.857754] ? find_match+0x10a0/0x10a0 [ 46.861705] ? kasan_check_read+0x11/0x20 [ 46.865829] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 46.871088] ip6_finish_output+0x583/0xc50 [ 46.875298] ? ip6_finish_output+0x583/0xc50 [ 46.879682] ip6_output+0x232/0x9d0 [ 46.883283] ? ip6_finish_output+0xc50/0xc50 [ 46.887673] ? ip6_fragment+0x3850/0x3850 [ 46.891806] ? ip6_mtu_from_fib6+0x770/0x770 [ 46.896193] mld_sendpack+0xac9/0xfa0 [ 46.899979] ? nf_hook.constprop.40+0x860/0x860 [ 46.904624] ? _raw_read_unlock_bh+0x30/0x40 [ 46.909007] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 46.914431] ? __local_bh_enable_ip+0x160/0x260 [ 46.919077] mld_send_initial_cr.part.32+0x114/0x160 [ 46.924166] mld_dad_timer_expire+0x42/0x1b0 [ 46.928549] call_timer_fn+0x272/0x920 [ 46.932410] ? mld_send_initial_cr.part.32+0x160/0x160 [ 46.937664] ? process_timeout+0x40/0x40 [ 46.941703] ? __run_timers+0x7da/0xc70 [ 46.945654] ? _raw_spin_unlock_irq+0x27/0x80 [ 46.950124] ? _raw_spin_unlock_irq+0x27/0x80 [ 46.954592] ? mld_send_initial_cr.part.32+0x160/0x160 [ 46.959857] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 46.964417] ? trace_hardirqs_on+0xbd/0x310 [ 46.968713] ? kasan_check_read+0x11/0x20 [ 46.972839] ? __run_timers+0x7da/0xc70 [ 46.976786] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 46.982219] ? mld_send_initial_cr.part.32+0x160/0x160 [ 46.987473] __run_timers+0x7e5/0xc70 [ 46.991258] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 46.996602] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 47.001603] ? graph_lock+0x270/0x270 [ 47.005390] ? enqueue_hrtimer+0x1a5/0x560 [ 47.009603] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 47.014769] ? find_held_lock+0x36/0x1c0 [ 47.018810] ? pvclock_read_flags+0x160/0x160 [ 47.023299] ? clockevents_program_event+0x158/0x370 [ 47.028380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.033893] ? check_preemption_disabled+0x48/0x280 [ 47.038888] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 47.044403] ? rcu_pm_notify+0xc0/0xc0 [ 47.048279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.053792] ? check_preemption_disabled+0x48/0x280 [ 47.058784] run_timer_softirq+0x52/0xb0 [ 47.062821] ? rcu_read_lock_sched_held+0x108/0x120 [ 47.067816] __do_softirq+0x30c/0xb2e [ 47.071607] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 47.076688] ? pvclock_read_flags+0x160/0x160 [ 47.081155] ? lapic_next_event+0x5a/0x90 [ 47.085282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.090800] ? kvm_clock_read+0x18/0x30 [ 47.094759] ? kvm_sched_clock_read+0x9/0x20 [ 47.099159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.104672] ? check_preemption_disabled+0x48/0x280 [ 47.109667] irq_exit+0x17f/0x1c0 [ 47.113099] smp_apic_timer_interrupt+0x1cb/0x760 [ 47.117914] ? smp_call_function_single_interrupt+0x650/0x650 [ 47.123781] ? interrupt_entry+0xb5/0xc0 [ 47.127841] ? trace_hardirqs_off_caller+0xbb/0x310 [ 47.132842] ? trace_hardirqs_off_caller+0xbb/0x310 [ 47.137838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 47.142651] ? trace_hardirqs_on_caller+0x310/0x310 [ 47.147645] ? trace_hardirqs_on_caller+0x310/0x310 [ 47.152648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 47.157465] apic_timer_interrupt+0xf/0x20 [ 47.161684] [ 47.163901] RIP: 0010:native_safe_halt+0x6/0x10 [ 47.168549] Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 a3 84 c9 f9 48 8b 45 d8 e9 ca fe ff ff 48 89 df e8 92 84 c9 f9 eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 47.187425] RSP: 0018:ffffffff89607c20 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 47.195113] RAX: dffffc0000000000 RBX: 1ffffffff12c0f88 RCX: 0000000000000000 [ 47.202359] RDX: 1ffffffff12e4969 RSI: 0000000000000001 RDI: ffffffff89724b48 [ 47.209609] RBP: ffffffff89607c20 R08: ffffffff8967aec0 R09: 0000000000000000 [ 47.216856] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89607ce0 [ 47.224099] R13: ffffffff8a3a3260 R14: 0000000000000000 R15: 0000000000000000 [ 47.231353] default_idle+0xbf/0x490 [ 47.235047] ? rcu_dynticks_eqs_enter+0x4f/0x80 [ 47.239691] ? __sched_text_end+0x1/0x1 [ 47.243640] ? rcu_idle_enter+0x39a/0x530 [ 47.247760] ? rcu_eqs_special_set+0x1c0/0x1c0 [ 47.252312] ? tsc_verify_tsc_adjust+0x137/0x460 [ 47.257040] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 47.262469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.267984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.273509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.279043] arch_cpu_idle+0x10/0x20 [ 47.282733] default_idle_call+0x6d/0x90 [ 47.286763] do_idle+0x3db/0x5b0 [ 47.290102] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 47.295527] ? arch_cpu_idle_exit+0x70/0x70 [ 47.299830] ? check_preemption_disabled+0x48/0x280 [ 47.304827] cpu_startup_entry+0x18/0x20 [ 47.308862] rest_init+0x243/0x372 [ 47.312385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.317900] arch_call_rest_init+0xe/0x1b [ 47.322034] start_kernel+0x873/0x8ae [ 47.325816] ? mem_encrypt_init+0xb/0xb [ 47.329769] ? early_idt_handler_common+0x3b/0x60 [ 47.334585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.340100] ? x86_family+0x3e/0x50 [ 47.343702] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 47.349214] x86_64_start_reservations+0x29/0x2b [ 47.353941] x86_64_start_kernel+0x76/0x79 [ 47.358150] secondary_startup_64+0xa4/0xb0 [ 47.363389] Kernel Offset: disabled [ 47.367005] Rebooting in 86400 seconds..