[....] Starting OpenBSD Secure Shell server: sshd[ 19.243790] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.962668] random: sshd: uninitialized urandom read (32 bytes read) [ 24.316099] sshd (4482) used greatest stack depth: 16248 bytes left [ 24.336766] random: sshd: uninitialized urandom read (32 bytes read) [ 25.048954] random: sshd: uninitialized urandom read (32 bytes read) [ 28.574557] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. [ 34.186776] random: sshd: uninitialized urandom read (32 bytes read) [ 34.301267] IPVS: ftp: loaded support on port[0] = 21 [ 34.302346] IPVS: ftp: loaded support on port[0] = 21 [ 34.311746] IPVS: ftp: loaded support on port[0] = 21 [ 34.315632] IPVS: ftp: loaded support on port[0] = 21 [ 34.322695] IPVS: ftp: loaded support on port[0] = 21 [ 34.323785] IPVS: ftp: loaded support on port[0] = 21 [ 34.333827] IPVS: ftp: loaded support on port[0] = 21 [ 34.341468] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 35.439394] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.445898] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.465836] device bridge_slave_0 entered promiscuous mode [ 35.500209] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.506623] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.525559] device bridge_slave_0 entered promiscuous mode [ 35.544608] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.550998] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.560849] device bridge_slave_1 entered promiscuous mode [ 35.607405] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.613824] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.628114] device bridge_slave_1 entered promiscuous mode [ 35.648600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.657799] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.664236] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.682234] device bridge_slave_0 entered promiscuous mode [ 35.689864] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.696238] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.703933] device bridge_slave_0 entered promiscuous mode [ 35.712541] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.718906] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.726251] device bridge_slave_0 entered promiscuous mode [ 35.735173] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.741549] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.749158] device bridge_slave_0 entered promiscuous mode [ 35.758537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.767109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.775950] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.782313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.797962] device bridge_slave_1 entered promiscuous mode [ 35.805887] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.812254] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.819958] device bridge_slave_0 entered promiscuous mode [ 35.827131] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.833496] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.844279] device bridge_slave_1 entered promiscuous mode [ 35.852250] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.858639] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.869894] device bridge_slave_0 entered promiscuous mode [ 35.877723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.892163] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.898523] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.910890] device bridge_slave_1 entered promiscuous mode [ 35.918822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.925941] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.932319] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.943399] device bridge_slave_1 entered promiscuous mode [ 35.950869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.958582] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.965062] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.978487] device bridge_slave_1 entered promiscuous mode [ 35.987009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.008012] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.014406] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.032464] device bridge_slave_1 entered promiscuous mode [ 36.044754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.053410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.069512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.081495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.101770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.109539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.124896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.144384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.177095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.185480] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.195989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.206280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.215514] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.270441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 36.277406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.328219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.338289] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.348932] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.357290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 36.381715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.400859] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.418823] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.427222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 36.434715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.451406] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.461742] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.472710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.482551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 36.490092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.506977] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.535064] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.549215] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.573577] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.607000] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.619325] team0: Port device team_slave_0 added [ 36.719235] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.733986] team0: Port device team_slave_1 added [ 36.773836] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.787085] team0: Port device team_slave_0 added [ 36.805453] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.816810] team0: Port device team_slave_0 added [ 36.835061] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.846706] team0: Port device team_slave_0 added [ 36.854703] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.862083] team0: Port device team_slave_0 added [ 36.875447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.904957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.914366] team0: Port device team_slave_1 added [ 36.929810] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.940462] team0: Port device team_slave_1 added [ 36.945869] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.953527] team0: Port device team_slave_1 added [ 36.959947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.970326] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.977858] team0: Port device team_slave_1 added [ 36.985911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.999394] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 37.010568] team0: Port device team_slave_0 added [ 37.017776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.028983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.037489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.048728] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 37.061170] team0: Port device team_slave_0 added [ 37.068884] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 37.080386] team0: Port device team_slave_0 added [ 37.090158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.099696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.113510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.121490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.129215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.136626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.144455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.156314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.164971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.172952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.181387] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.191065] team0: Port device team_slave_1 added [ 37.199172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.206237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.225561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.233622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.241563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.248965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.256750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.265869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.273543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.281715] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.289076] team0: Port device team_slave_1 added [ 37.296348] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.303690] team0: Port device team_slave_1 added [ 37.310887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.317943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.326304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.340209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.349568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.360254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.375835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.384234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.392978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.404309] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.413290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.432289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.445451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.453447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.461223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.468791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.476558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.485813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.495634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.505354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.514567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.528007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.534898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.544365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.560511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.572194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.579866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.587559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.595113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.602713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.610443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.617700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.625035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.638793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.650434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.659589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.672535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.682891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.697583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.727830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.742221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.749881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.758236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.765369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.773265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.784317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.793704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.806570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.831502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready RTNETLINK answers: Operation not supported [ 37.843643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.851511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.862745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.877839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.898145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.911831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.924843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.932924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 38.150675] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.157172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.164160] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.170532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.183504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 38.300409] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.306832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.313492] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.319853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.332227] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 38.523498] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.529935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.536626] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.542994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.553985] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.575984] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.582364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.589034] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.595423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.604986] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.618162] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.624547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.631201] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.637562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.655558] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.663526] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.669929] bridge0: port 2(bridge_slave_1) entered forwarding state RTNETLINK answers: Operation not supported [ 38.676589] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.682955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.691403] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.705448] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.711823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.718461] bridge0: port 1(bridge_slave_0) entered blocking state RTNETLINK answers: No buffer space available [ 38.724825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.740432] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available [ 38.793164] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.799555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.806202] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.812561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.825581] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 39.135650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.146537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.158494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.165730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.173356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 39.180604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.187956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.195417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 40.853591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.063312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.074632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.210762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.280220] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.286592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.297923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.317585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.337831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.373198] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.382777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.407437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.510334] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.536057] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.546910] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.578610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.595782] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.606427] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.627972] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.634655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.646459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.664597] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.789415] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.795645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.803365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.820692] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.827047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.838773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.858490] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.867781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.879399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.895496] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.904762] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.916941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.923325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.930807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.015275] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.022622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.037487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.055967] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.182459] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.203321] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.216282] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.222599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.231819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.248654] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.259409] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.455383] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.132760] protocol 0000 is buggy, dev sit0 [ 43.137435] ================================================================== [ 43.144886] BUG: KASAN: use-after-free in skb_release_data+0x19b/0x860 [ 43.151554] Write of size 4 at addr ffff8801c6bd8de0 by task syz-executor346/4514 [ 43.159163] [ 43.160798] CPU: 0 PID: 4514 Comm: syz-executor346 Not tainted 4.17.0-rc3+ #35 [ 43.168151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.177504] Call Trace: [ 43.180099] dump_stack+0x1b9/0x294 [ 43.183735] ? dump_stack_print_info.cold.2+0x52/0x52 [ 43.188929] ? printk+0x9e/0xba [ 43.192218] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 43.196981] ? kasan_check_write+0x14/0x20 [ 43.201240] print_address_description+0x6c/0x20b [ 43.206088] ? skb_release_data+0x19b/0x860 [ 43.210410] kasan_report.cold.7+0x242/0x2fe [ 43.214825] check_memory_region+0x13e/0x1b0 [ 43.219238] kasan_check_write+0x14/0x20 [ 43.223304] skb_release_data+0x19b/0x860 [ 43.227456] ? refcount_inc_not_zero+0x2d0/0x2d0 [ 43.232220] ? skb_tx_error+0x2f0/0x2f0 [ 43.236208] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 43.241746] ? sock_wfree+0xcc/0x180 [ 43.245467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 43.251012] skb_release_all+0x4a/0x60 [ 43.254903] kfree_skb+0x195/0x560 [ 43.258450] ? sit_tunnel_xmit+0x16b/0x30b0 [ 43.262784] ? __kfree_skb+0x20/0x20 [ 43.266500] ? alloc_skb_with_frags+0x760/0x760 [ 43.271183] ? graph_lock+0x170/0x170 [ 43.274990] ? packet_cached_dev_get+0x330/0x330 [ 43.279759] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 43.284962] sit_tunnel_xmit+0x16b/0x30b0 [ 43.289117] ? find_held_lock+0x36/0x1c0 [ 43.293193] ? ipip6_rcv+0x1d30/0x1d30 [ 43.297086] ? lock_downgrade+0x8e0/0x8e0 [ 43.300083] protocol 0000 is buggy, dev sit0 [ 43.301236] ? vprintk_default+0x28/0x30 [ 43.301254] ? vprintk_func+0x81/0xe7 [ 43.310987] protocol 0000 is buggy, dev sit0 [ 43.313489] ? kasan_check_read+0x11/0x20 [ 43.313502] ? rcu_is_watching+0x85/0x140 [ 43.313519] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 43.330162] protocol 0000 is buggy, dev sit0 [ 43.330916] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 43.340482] ? graph_lock+0x170/0x170 [ 43.344285] ? dev_queue_xmit_nit+0x8ec/0xb90 [ 43.345287] protocol 0000 is buggy, dev sit0 [ 43.348793] ? __lock_is_held+0xb5/0x140 [ 43.348816] dev_hard_start_xmit+0x264/0xc10 [ 43.361657] ? validate_xmit_skb_list+0x120/0x120 [ 43.366507] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 43.368556] protocol 0000 is buggy, dev sit0 [ 43.372042] ? netif_skb_features+0x696/0xb40 [ 43.372056] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 43.372075] ? validate_xmit_xfrm+0x1ef/0xdc0 [ 43.390598] ? lock_acquire+0x1dc/0x520 [ 43.394576] ? validate_xmit_skb+0x704/0xd90 [ 43.394849] protocol 0000 is buggy, dev sit0 [ 43.398984] ? netif_skb_features+0xb40/0xb40 [ 43.399006] __dev_queue_xmit+0x2724/0x34c0 [ 43.412200] ? netdev_pick_tx+0x2d0/0x2d0 [ 43.416355] ? debug_check_no_locks_freed+0x310/0x310 [ 43.419112] protocol 0000 is buggy, dev sit0 [ 43.421540] ? check_noncircular+0x20/0x20 [ 43.421566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 43.429723] protocol 0000 is buggy, dev sit0 [ 43.430189] ? refcount_add_not_zero+0x216/0x320 [ 43.430209] ? refcount_dec_if_one+0x170/0x170 [ 43.441374] protocol 0000 is buggy, dev sit0 [ 43.444858] ? alloc_skb_with_frags+0x4fe/0x760 [ 43.444884] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 43.464012] ? refcount_add+0x2f/0x70 [ 43.467818] ? skb_set_owner_w+0x24e/0x360 [ 43.472057] ? sock_alloc_send_pskb+0x7d1/0xae0 [ 43.476733] ? graph_lock+0x170/0x170 [ 43.480546] ? lock_downgrade+0x8e0/0x8e0 [ 43.484701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 43.490241] ? cap_capable+0x1f9/0x260 [ 43.494137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 43.499680] ? security_capable+0x99/0xc0 [ 43.503835] dev_queue_xmit+0x17/0x20 [ 43.507637] ? dev_queue_xmit+0x17/0x20 [ 43.511611] packet_sendmsg+0x40f8/0x6070 [ 43.515760] ? debug_check_no_locks_freed+0x310/0x310 [ 43.520953] ? __lock_acquire+0x7f5/0x5140 [ 43.525186] ? is_bpf_text_address+0xd7/0x170 [ 43.529683] ? kernel_text_address+0x79/0xf0 [ 43.534109] ? packet_getname+0x5f0/0x5f0 [ 43.538262] ? save_stack+0xa9/0xd0 [ 43.541890] ? save_stack+0x43/0xd0 [ 43.545519] ? kasan_kmalloc+0xc4/0xe0 [ 43.549408] ? kasan_slab_alloc+0x12/0x20 [ 43.553557] ? kmem_cache_alloc+0x12e/0x760 [ 43.557905] ? get_empty_filp+0x125/0x520 [ 43.562054] ? alloc_file+0x24/0x3e0 [ 43.565768] ? sock_alloc_file+0x1f3/0x4e0 [ 43.570004] ? __sys_socket+0x16f/0x250 [ 43.573980] ? __x64_sys_socket+0x73/0xb0 [ 43.578127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.583497] ? graph_lock+0x170/0x170 [ 43.587301] ? find_held_lock+0x36/0x1c0 [ 43.591368] ? find_held_lock+0x36/0x1c0 [ 43.595444] ? lock_downgrade+0x8e0/0x8e0 [ 43.599596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 43.605144] ? lock_release+0xa10/0xa10 [ 43.609125] ? check_same_owner+0x320/0x320 [ 43.613453] ? __check_object_size+0x95/0x5d9 [ 43.617963] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 43.623502] ? security_socket_sendmsg+0x94/0xc0 [ 43.628258] ? packet_getname+0x5f0/0x5f0 [ 43.632409] sock_sendmsg+0xd5/0x120 [ 43.636125] __sys_sendto+0x3d7/0x670 [ 43.639936] ? __ia32_sys_getpeername+0xb0/0xb0 [ 43.644604] ? __fd_install+0x2de/0x880 [ 43.648581] ? get_unused_fd_flags+0x190/0x190 [ 43.653173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 43.658712] ? alloc_file+0x44/0x3e0 [ 43.662432] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 43.667969] ? sock_alloc_file+0x2a4/0x4e0 [ 43.672214] ? __alloc_fd+0x700/0x700 [ 43.676021] ? fd_install+0x4d/0x60 [ 43.679652] ? __sys_socket+0x19f/0x250 [ 43.683634] ? move_addr_to_kernel+0x70/0x70 [ 43.688045] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 43.692891] __x64_sys_sendto+0xe1/0x1a0 [ 43.696956] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 43.701977] do_syscall_64+0x1b1/0x800 [ 43.705869] ? syscall_return_slowpath+0x5c0/0x5c0 [ 43.710799] ? syscall_return_slowpath+0x30f/0x5c0 [ 43.715732] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 43.721102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.725955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.731146] RIP: 0033:0x441b59 [ 43.734332] RSP: 002b:00007ffcb751dc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 43.742042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441b59 [ 43.749309] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 43.756575] RBP: 00000000006cd018 R08: 0000000020005fe4 R09: 000000000000001c [ 43.763845] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004027a0 [ 43.771109] R13: 0000000000402830 R14: 0000000000000000 R15: 0000000000000000 [ 43.778391] [ 43.780014] Allocated by task 4514: [ 43.783643] save_stack+0x43/0xd0 [ 43.787097] kasan_kmalloc+0xc4/0xe0 [ 43.790812] __kmalloc_node_track_caller+0x47/0x70 [ 43.795744] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 43.800497] __alloc_skb+0x14d/0x780 [ 43.804211] alloc_skb_with_frags+0x137/0x760 [ 43.808703] sock_alloc_send_pskb+0x87a/0xae0 [ 43.813196] packet_sendmsg+0x1b98/0x6070 [ 43.817349] sock_sendmsg+0xd5/0x120 [ 43.821065] __sys_sendto+0x3d7/0x670 [ 43.824867] __x64_sys_sendto+0xe1/0x1a0 [ 43.828928] do_syscall_64+0x1b1/0x800 [ 43.832816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.838004] [ 43.839623] Freed by task 4514: [ 43.842906] save_stack+0x43/0xd0 [ 43.846360] __kasan_slab_free+0x11a/0x170 [ 43.850593] kasan_slab_free+0xe/0x10 [ 43.854390] kfree+0xd9/0x260 [ 43.857494] skb_free_head+0x99/0xc0 [ 43.861206] skb_release_data+0x690/0x860 [ 43.865352] skb_release_all+0x4a/0x60 [ 43.869238] consume_skb+0x18b/0x550 [ 43.872951] packet_rcv+0x16a/0x1810 [ 43.876666] dev_queue_xmit_nit+0x891/0xb90 [ 43.880986] dev_hard_start_xmit+0x16b/0xc10 [ 43.885389] __dev_queue_xmit+0x2724/0x34c0 [ 43.889710] dev_queue_xmit+0x17/0x20 [ 43.893509] packet_sendmsg+0x40f8/0x6070 [ 43.897655] sock_sendmsg+0xd5/0x120 [ 43.901367] __sys_sendto+0x3d7/0x670 [ 43.905173] __x64_sys_sendto+0xe1/0x1a0 [ 43.909232] do_syscall_64+0x1b1/0x800 [ 43.913126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.918302] [ 43.919926] The buggy address belongs to the object at ffff8801c6bd8d00 [ 43.919926] which belongs to the cache kmalloc-512 of size 512 [ 43.932580] The buggy address is located 224 bytes inside of [ 43.932580] 512-byte region [ffff8801c6bd8d00, ffff8801c6bd8f00) [ 43.944445] The buggy address belongs to the page: [ 43.949372] page:ffffea00071af600 count:1 mapcount:0 mapping:ffff8801c6bd8080 index:0x0 [ 43.957514] flags: 0x2fffc0000000100(slab) [ 43.961751] raw: 02fffc0000000100 ffff8801c6bd8080 0000000000000000 0000000100000006 [ 43.969631] raw: ffffea0007658460 ffffea0007631d60 ffff8801da800940 0000000000000000 [ 43.977502] page dumped because: kasan: bad access detected [ 43.983201] [ 43.984818] Memory state around the buggy address: [ 43.989744] ffff8801c6bd8c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.997098] ffff8801c6bd8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.004459] >ffff8801c6bd8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.011811] ^ [ 44.018302] ffff8801c6bd8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.025656] ffff8801c6bd8e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.033004] ================================================================== [ 44.040355] Disabling lock debugging due to kernel taint [ 44.045843] Kernel panic - not syncing: panic_on_warn set ... [ 44.045843] [ 44.053210] CPU: 0 PID: 4514 Comm: syz-executor346 Tainted: G B 4.17.0-rc3+ #35 [ 44.061949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.071292] Call Trace: [ 44.073888] dump_stack+0x1b9/0x294 [ 44.077512] ? dump_stack_print_info.cold.2+0x52/0x52 [ 44.082702] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 44.087461] ? skb_release_data+0xc0/0x860 [ 44.091692] panic+0x22f/0x4de [ 44.094884] ? add_taint.cold.5+0x16/0x16 [ 44.099033] ? do_raw_spin_unlock+0x9e/0x2e0 [ 44.103438] ? do_raw_spin_unlock+0x9e/0x2e0 [ 44.107845] ? skb_release_data+0x19b/0x860 [ 44.112166] kasan_end_report+0x47/0x4f [ 44.116135] kasan_report.cold.7+0x76/0x2fe [ 44.120453] check_memory_region+0x13e/0x1b0 [ 44.124860] kasan_check_write+0x14/0x20 [ 44.128917] skb_release_data+0x19b/0x860 [ 44.133064] ? refcount_inc_not_zero+0x2d0/0x2d0 [ 44.137819] ? skb_tx_error+0x2f0/0x2f0 [ 44.141793] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.147324] ? sock_wfree+0xcc/0x180 [ 44.151035] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.156572] skb_release_all+0x4a/0x60 [ 44.160456] kfree_skb+0x195/0x560 [ 44.163991] ? sit_tunnel_xmit+0x16b/0x30b0 [ 44.168310] ? __kfree_skb+0x20/0x20 [ 44.172020] ? alloc_skb_with_frags+0x760/0x760 [ 44.176688] ? graph_lock+0x170/0x170 [ 44.180485] ? packet_cached_dev_get+0x330/0x330 [ 44.185239] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 44.190427] sit_tunnel_xmit+0x16b/0x30b0 [ 44.194570] ? find_held_lock+0x36/0x1c0 [ 44.198630] ? ipip6_rcv+0x1d30/0x1d30 [ 44.202516] ? lock_downgrade+0x8e0/0x8e0 [ 44.206660] ? vprintk_default+0x28/0x30 [ 44.210722] ? vprintk_func+0x81/0xe7 [ 44.214520] ? kasan_check_read+0x11/0x20 [ 44.218660] ? rcu_is_watching+0x85/0x140 [ 44.222802] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 44.227553] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 44.232739] ? graph_lock+0x170/0x170 [ 44.236538] ? dev_queue_xmit_nit+0x8ec/0xb90 [ 44.241032] ? __lock_is_held+0xb5/0x140 [ 44.245100] dev_hard_start_xmit+0x264/0xc10 [ 44.249515] ? validate_xmit_skb_list+0x120/0x120 [ 44.254357] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.259890] ? netif_skb_features+0x696/0xb40 [ 44.264383] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 44.269573] ? validate_xmit_xfrm+0x1ef/0xdc0 [ 44.274063] ? lock_acquire+0x1dc/0x520 [ 44.278037] ? validate_xmit_skb+0x704/0xd90 [ 44.282442] ? netif_skb_features+0xb40/0xb40 [ 44.286941] __dev_queue_xmit+0x2724/0x34c0 [ 44.291264] ? netdev_pick_tx+0x2d0/0x2d0 [ 44.295411] ? debug_check_no_locks_freed+0x310/0x310 [ 44.300595] ? check_noncircular+0x20/0x20 [ 44.304836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.310372] ? refcount_add_not_zero+0x216/0x320 [ 44.315132] ? refcount_dec_if_one+0x170/0x170 [ 44.319712] ? alloc_skb_with_frags+0x4fe/0x760 [ 44.324382] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.329918] ? refcount_add+0x2f/0x70 [ 44.333716] ? skb_set_owner_w+0x24e/0x360 [ 44.337949] ? sock_alloc_send_pskb+0x7d1/0xae0 [ 44.342617] ? graph_lock+0x170/0x170 [ 44.346417] ? lock_downgrade+0x8e0/0x8e0 [ 44.350565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.356102] ? cap_capable+0x1f9/0x260 [ 44.359989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.365524] ? security_capable+0x99/0xc0 [ 44.369673] dev_queue_xmit+0x17/0x20 [ 44.373471] ? dev_queue_xmit+0x17/0x20 [ 44.377443] packet_sendmsg+0x40f8/0x6070 [ 44.381589] ? debug_check_no_locks_freed+0x310/0x310 [ 44.386777] ? __lock_acquire+0x7f5/0x5140 [ 44.391008] ? is_bpf_text_address+0xd7/0x170 [ 44.395499] ? kernel_text_address+0x79/0xf0 [ 44.399910] ? packet_getname+0x5f0/0x5f0 [ 44.404057] ? save_stack+0xa9/0xd0 [ 44.407685] ? save_stack+0x43/0xd0 [ 44.411308] ? kasan_kmalloc+0xc4/0xe0 [ 44.415194] ? kasan_slab_alloc+0x12/0x20 [ 44.419338] ? kmem_cache_alloc+0x12e/0x760 [ 44.423655] ? get_empty_filp+0x125/0x520 [ 44.427796] ? alloc_file+0x24/0x3e0 [ 44.431507] ? sock_alloc_file+0x1f3/0x4e0 [ 44.435739] ? __sys_socket+0x16f/0x250 [ 44.439712] ? __x64_sys_socket+0x73/0xb0 [ 44.443860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.449218] ? graph_lock+0x170/0x170 [ 44.453016] ? find_held_lock+0x36/0x1c0 [ 44.457546] ? find_held_lock+0x36/0x1c0 [ 44.461609] ? lock_downgrade+0x8e0/0x8e0 [ 44.465756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.471290] ? lock_release+0xa10/0xa10 [ 44.475265] ? check_same_owner+0x320/0x320 [ 44.479583] ? __check_object_size+0x95/0x5d9 [ 44.484089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.489625] ? security_socket_sendmsg+0x94/0xc0 [ 44.494378] ? packet_getname+0x5f0/0x5f0 [ 44.498525] sock_sendmsg+0xd5/0x120 [ 44.502237] __sys_sendto+0x3d7/0x670 [ 44.506042] ? __ia32_sys_getpeername+0xb0/0xb0 [ 44.510716] ? __fd_install+0x2de/0x880 [ 44.514690] ? get_unused_fd_flags+0x190/0x190 [ 44.519272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.524805] ? alloc_file+0x44/0x3e0 [ 44.528518] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.534050] ? sock_alloc_file+0x2a4/0x4e0 [ 44.538292] ? __alloc_fd+0x700/0x700 [ 44.542096] ? fd_install+0x4d/0x60 [ 44.545722] ? __sys_socket+0x19f/0x250 [ 44.549696] ? move_addr_to_kernel+0x70/0x70 [ 44.554103] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 44.558947] __x64_sys_sendto+0xe1/0x1a0 [ 44.563005] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 44.568020] do_syscall_64+0x1b1/0x800 [ 44.571910] ? syscall_return_slowpath+0x5c0/0x5c0 [ 44.576842] ? syscall_return_slowpath+0x30f/0x5c0 [ 44.581768] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 44.587130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.591970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.597170] RIP: 0033:0x441b59 [ 44.600366] RSP: 002b:00007ffcb751dc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 44.608075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441b59 [ 44.615338] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 44.622601] RBP: 00000000006cd018 R08: 0000000020005fe4 R09: 000000000000001c [ 44.629865] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004027a0 [ 44.637130] R13: 0000000000402830 R14: 0000000000000000 R15: 0000000000000000 [ 44.644859] Dumping ftrace buffer: [ 44.648380] (ftrace buffer empty) [ 44.652069] Kernel Offset: disabled [ 44.655673] Rebooting in 86400 seconds..