[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.563377] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.639316] random: sshd: uninitialized urandom read (32 bytes read) [ 23.015438] random: sshd: uninitialized urandom read (32 bytes read) [ 23.829010] random: sshd: uninitialized urandom read (32 bytes read) [ 23.993618] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. [ 29.550585] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program [ 29.682299] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 29.707783] ================================================================== [ 29.715357] BUG: KASAN: slab-out-of-bounds in tcp_v6_syn_recv_sock+0x700/0x26b0 [ 29.722916] Write of size 160 at addr ffff8801b631b5d0 by task syz-executor318/4553 [ 29.730699] [ 29.732323] CPU: 0 PID: 4553 Comm: syz-executor318 Not tainted 4.18.0-rc1+ #114 [ 29.739750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.749093] Call Trace: [ 29.751668] [ 29.753814] dump_stack+0x1c9/0x2b4 [ 29.757439] ? dump_stack_print_info.cold.2+0x52/0x52 [ 29.762624] ? printk+0xa7/0xcf [ 29.765914] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 29.770670] ? tcp_v6_syn_recv_sock+0x700/0x26b0 [ 29.775424] print_address_description+0x6c/0x20b [ 29.780252] ? tcp_v6_syn_recv_sock+0x700/0x26b0 [ 29.784990] kasan_report.cold.7+0x242/0x2fe [ 29.789390] check_memory_region+0x13e/0x1b0 [ 29.793783] memcpy+0x37/0x50 [ 29.796962] tcp_v6_syn_recv_sock+0x700/0x26b0 [ 29.801529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.807056] ? inet6_sk_rx_dst_set+0x970/0x970 [ 29.811812] ? xfrm_policy_lookup+0x70/0x70 [ 29.816121] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 29.821326] ? ip6_dst_lookup_tail+0xbbb/0x1da0 [ 29.825992] ? trace_hardirqs_on+0xd/0x10 [ 29.830148] ? __local_bh_enable_ip+0x161/0x230 [ 29.834801] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 29.840334] ? ip6_dst_lookup_tail+0x3ca/0x1da0 [ 29.845099] ? __lock_is_held+0xb5/0x140 [ 29.849326] ? rcu_read_lock_sched_held+0x108/0x120 [ 29.854331] tcp_get_cookie_sock+0x115/0x590 [ 29.858727] ? cookie_ecn_ok+0x130/0x130 [ 29.862787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 29.868311] ? xfrm_lookup_route+0x64/0x1f0 [ 29.872630] ? ip6_dst_lookup_flow+0x1ce/0x270 [ 29.877209] ? ip6_dst_lookup+0x60/0x60 [ 29.881171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.886692] ? tcp_select_initial_window+0x2f8/0x3a0 [ 29.891793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 29.897320] cookie_v6_check+0x1829/0x26a0 [ 29.901550] ? cookie_v6_init_sequence+0xe0/0xe0 [ 29.906309] ? lock_downgrade+0x8f0/0x8f0 [ 29.910457] ? kasan_check_read+0x11/0x20 [ 29.914613] ? rcu_is_watching+0x8c/0x150 [ 29.918749] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 29.923169] ? sk_filter_trim_cap+0x47b/0xa60 [ 29.927684] ? tcp_v6_inbound_md5_hash+0x1bd/0x420 [ 29.932626] tcp_v6_do_rcv+0x1087/0x13a0 [ 29.936690] ? tcp_v6_do_rcv+0x1087/0x13a0 [ 29.940939] ? __sanitizer_cov_trace_cmp8+0x11/0x20 [ 29.945985] tcp_v6_rcv+0x35bb/0x3a70 [ 29.949801] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 29.954227] ? tcp_v6_reqsk_send_ack+0x380/0x380 [ 29.959019] ? __lock_is_held+0xb5/0x140 [ 29.963109] ip6_input_finish+0x407/0x1a40 [ 29.967362] ? ip6_rcv_finish+0xa30/0xa30 [ 29.971515] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 29.976553] ? nf_hook_slow+0x11e/0x1c0 [ 29.980540] ip6_input+0xe9/0x600 [ 29.984628] ? ip6_input_finish+0x1a40/0x1a40 [ 29.989118] ? ip6_rcv_finish+0xa30/0xa30 [ 29.993286] ip6_rcv_finish+0x2ab/0xa30 [ 29.997263] ? ip6_make_skb+0x600/0x600 [ 30.001236] ? kasan_check_read+0x11/0x20 [ 30.005382] ? rcu_is_watching+0x8c/0x150 [ 30.009525] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 30.013941] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 30.018975] ? nf_hook_slow+0x11e/0x1c0 [ 30.022965] ipv6_rcv+0xec0/0x2060 [ 30.026514] ? ip6_input+0x600/0x600 [ 30.030227] ? ip6_make_skb+0x600/0x600 [ 30.034198] ? __lock_is_held+0xb5/0x140 [ 30.038251] ? ip6_input+0x600/0x600 [ 30.041958] __netif_receive_skb_core+0x2488/0x3680 [ 30.046967] ? nf_ingress+0xa30/0xa30 [ 30.050769] ? __lock_acquire+0x7fc/0x5020 [ 30.054993] ? graph_lock+0x170/0x170 [ 30.058790] ? __lock_acquire+0x7fc/0x5020 [ 30.063025] ? debug_check_no_locks_freed+0x310/0x310 [ 30.068208] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 30.074270] ? __lock_acquire+0x7fc/0x5020 [ 30.078506] ? __lock_acquire+0x7fc/0x5020 [ 30.082732] ? attach_entity_load_avg+0x860/0x860 [ 30.087567] ? debug_check_no_locks_freed+0x310/0x310 [ 30.092749] ? debug_check_no_locks_freed+0x310/0x310 [ 30.097932] ? graph_lock+0x170/0x170 [ 30.101725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.107248] ? run_posix_cpu_timers+0x6c7/0x2580 [ 30.111993] ? find_held_lock+0x36/0x1c0 [ 30.116043] ? print_usage_bug+0xc0/0xc0 [ 30.120095] ? lock_acquire+0x1e4/0x540 [ 30.124060] ? process_backlog+0x1a6/0x760 [ 30.128298] ? kasan_check_read+0x11/0x20 [ 30.132433] ? rcu_is_watching+0x8c/0x150 [ 30.136578] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 30.140978] __netif_receive_skb+0x2c/0x1e0 [ 30.145288] process_backlog+0x219/0x760 [ 30.149363] net_rx_action+0x7da/0x1980 [ 30.153351] ? napi_complete_done+0x6c0/0x6c0 [ 30.157839] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 30.162864] ? trace_hardirqs_on+0xd/0x10 [ 30.166999] ? __run_timers+0xa37/0xc70 [ 30.170969] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 30.176319] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 30.181338] ? graph_lock+0x170/0x170 [ 30.185132] ? enqueue_hrtimer+0x18e/0x540 [ 30.189360] ? find_held_lock+0x36/0x1c0 [ 30.193408] ? print_usage_bug+0xc0/0xc0 [ 30.197459] ? graph_lock+0x170/0x170 [ 30.201263] ? lock_downgrade+0x8f0/0x8f0 [ 30.205402] ? __lock_is_held+0xb5/0x140 [ 30.209454] ? print_usage_bug+0xc0/0xc0 [ 30.213500] ? __do_softirq+0x780/0xb17 [ 30.217459] ? graph_lock+0x170/0x170 [ 30.221246] ? __irqentry_text_end+0x1f97a8/0x1f97a8 [ 30.226341] ? __lock_is_held+0xb5/0x140 [ 30.230394] __do_softirq+0x2e8/0xb17 [ 30.234185] ? __irqentry_text_end+0x1f97a8/0x1f97a8 [ 30.239274] ? irq_exit+0xbb/0x200 [ 30.242799] ? smp_apic_timer_interrupt+0x186/0x730 [ 30.247803] ? smp_call_function_single_interrupt+0x660/0x660 [ 30.253687] ? _raw_spin_unlock+0x22/0x30 [ 30.257836] ? handle_edge_irq+0x330/0x870 [ 30.262146] ? task_prio+0x50/0x50 [ 30.265678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.270521] do_softirq_own_stack+0x2a/0x40 [ 30.274823] [ 30.277052] do_softirq.part.17+0x14d/0x190 [ 30.281376] ? ip6_finish_output2+0xcb5/0x2820 [ 30.285945] __local_bh_enable_ip+0x1ec/0x230 [ 30.290438] ip6_finish_output2+0xce8/0x2820 [ 30.294853] ? ip6_flush_pending_frames+0xc0/0xc0 [ 30.299686] ? lock_downgrade+0x8f0/0x8f0 [ 30.303848] ? graph_lock+0x170/0x170 [ 30.307658] ? kasan_check_read+0x11/0x20 [ 30.311800] ? rcu_is_watching+0x8c/0x150 [ 30.315933] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 30.320344] ? __lock_is_held+0xb5/0x140 [ 30.324396] ip6_finish_output+0x5fe/0xbc0 [ 30.328625] ? ip6_finish_output+0x5fe/0xbc0 [ 30.333113] ip6_output+0x234/0x9d0 [ 30.336751] ? ip6_finish_output+0xbc0/0xbc0 [ 30.341157] ? ip6_fragment+0x3930/0x3930 [ 30.345292] ? __lock_is_held+0xb5/0x140 [ 30.349359] ip6_xmit+0xf51/0x23f0 [ 30.352884] ? rcu_is_watching+0x8c/0x150 [ 30.357036] ? ip6_finish_output2+0x2820/0x2820 [ 30.361690] ? inet6_csk_route_socket+0x708/0x1030 [ 30.366602] ? debug_check_no_locks_freed+0x310/0x310 [ 30.371779] ? find_held_lock+0x1/0x1c0 [ 30.375743] ? pudp_huge_clear_flush+0x230/0x230 [ 30.380483] ? ip6_append_data+0x2e0/0x2e0 [ 30.384701] ? lock_acquire+0x1e4/0x540 [ 30.388666] ? inet6_csk_xmit+0x137/0x630 [ 30.392817] ? __lock_is_held+0xb5/0x140 [ 30.396873] inet6_csk_xmit+0x377/0x630 [ 30.400850] ? inet6_csk_update_pmtu+0x190/0x190 [ 30.405604] ? tcp_schedule_loss_probe+0x510/0x510 [ 30.410529] tcp_transmit_skb+0x1bf9/0x3f10 [ 30.414859] ? __tcp_select_window+0x9f0/0x9f0 [ 30.419426] ? print_usage_bug+0xc0/0xc0 [ 30.423482] ? kernel_text_address+0x79/0xf0 [ 30.427877] ? __kernel_text_address+0xd/0x40 [ 30.432372] ? unwind_get_return_address+0x61/0xa0 [ 30.437292] ? __lock_acquire+0x7fc/0x5020 [ 30.441536] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 30.446549] ? tcp_small_queue_check.isra.27+0x35a/0x490 [ 30.451994] ? tcp_rtx_synack+0x6f0/0x6f0 [ 30.456159] ? kvm_clock_read+0x25/0x30 [ 30.460116] ? kvm_sched_clock_read+0x9/0x20 [ 30.464511] ? sched_clock+0x31/0x40 [ 30.468221] ? sched_clock_cpu+0x1b/0x180 [ 30.472357] tcp_write_xmit+0x1641/0x5c20 [ 30.476526] ? tcp_transmit_skb+0x3f10/0x3f10 [ 30.481024] ? graph_lock+0x170/0x170 [ 30.484813] ? __sk_mem_raise_allocated+0x88a/0x1600 [ 30.489907] ? graph_lock+0x170/0x170 [ 30.493692] ? sk_busy_loop_end+0x1c0/0x1c0 [ 30.498000] ? __kmalloc_node_track_caller+0x47/0x70 [ 30.503094] ? find_held_lock+0x36/0x1c0 [ 30.507144] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 30.512158] ? iov_iter_advance+0x2ec/0x14e0 [ 30.516552] ? check_same_owner+0x340/0x340 [ 30.520861] __tcp_push_pending_frames+0xb2/0x290 [ 30.525702] tcp_push+0x638/0x8c0 [ 30.529139] ? kasan_check_write+0x14/0x20 [ 30.533360] ? tcp_enter_memory_pressure+0x120/0x120 [ 30.538449] ? _copy_from_iter_full+0x2bc/0xd20 [ 30.543108] ? usercopy_warn+0x120/0x120 [ 30.547151] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 30.552164] ? tcp_rate_check_app_limited+0x121/0x470 [ 30.557341] ? iov_iter_advance+0x14e0/0x14e0 [ 30.561832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 30.567356] ? __sk_mem_schedule+0xac/0xe0 [ 30.571578] tcp_sendmsg_locked+0x188d/0x3f00 [ 30.576073] ? tcp_sendpage+0x60/0x60 [ 30.579862] ? rcu_is_watching+0x8c/0x150 [ 30.584010] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 30.588413] ? print_usage_bug+0xc0/0xc0 [ 30.592466] ? find_held_lock+0x36/0x1c0 [ 30.596515] ? lock_acquire+0x1e4/0x540 [ 30.600473] ? tcp_sendmsg+0x21/0x50 [ 30.604182] ? mark_held_locks+0xc9/0x160 [ 30.610237] ? __local_bh_enable_ip+0x161/0x230 [ 30.614894] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.619896] ? lock_sock_nested+0x9f/0x120 [ 30.624134] ? __local_bh_enable_ip+0x161/0x230 [ 30.628790] tcp_sendmsg+0x2f/0x50 [ 30.632321] inet_sendmsg+0x1a1/0x690 [ 30.636107] ? ipip_gro_receive+0x100/0x100 [ 30.640417] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 30.645974] ? security_socket_sendmsg+0x94/0xc0 [ 30.650715] ? ipip_gro_receive+0x100/0x100 [ 30.655032] sock_sendmsg+0xd5/0x120 [ 30.658734] __sys_sendto+0x3d7/0x670 [ 30.662524] ? __ia32_sys_getpeername+0xb0/0xb0 [ 30.667178] ? graph_lock+0x170/0x170 [ 30.670977] ? lock_downgrade+0x8f0/0x8f0 [ 30.675109] ? finish_task_switch+0x18a/0x890 [ 30.679593] ? kasan_check_read+0x11/0x20 [ 30.683726] ? do_raw_spin_unlock+0xa7/0x2f0 [ 30.688120] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 30.692693] __x64_sys_sendto+0xe1/0x1a0 [ 30.696739] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.701744] do_syscall_64+0x1b9/0x820 [ 30.705627] ? syscall_return_slowpath+0x5e0/0x5e0 [ 30.710555] ? syscall_return_slowpath+0x31d/0x5e0 [ 30.715473] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 30.720919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.725760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 30.730958] RIP: 0033:0x445c99 [ 30.734128] Code: e8 5c e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 51 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 30.753356] RSP: 002b:00007feaf2650da8 EFLAGS: 00000216 ORIG_RAX: 000000000000002c [ 30.761062] RAX: ffffffffffffffda RBX: 00000000006dac5c RCX: 0000000000445c99 [ 30.768404] RDX: 00000000fffffdf7 RSI: 0000000020000280 RDI: 0000000000000004 [ 30.775674] RBP: 00000000006dac58 R08: 0000000020000000 R09: 000000000000001c [ 30.782925] R10: 0000000020000003 R11: 0000000000000216 R12: 0000000000000000 [ 30.790177] R13: 00007ffe5aa0339f R14: 00007feaf26519c0 R15: 0000000000000001 [ 30.797448] [ 30.799076] Allocated by task 4553: [ 30.802697] save_stack+0x43/0xd0 [ 30.806152] kasan_kmalloc+0xc4/0xe0 [ 30.809852] kasan_slab_alloc+0x12/0x20 [ 30.813817] kmem_cache_alloc+0x12e/0x760 [ 30.817948] sk_prot_alloc+0x69/0x2e0 [ 30.821730] sk_clone_lock+0x15a/0x17d0 [ 30.825700] inet_csk_clone_lock+0x99/0x510 [ 30.830012] tcp_create_openreq_child+0x9c/0x2030 [ 30.835022] tcp_v6_syn_recv_sock+0x265/0x26b0 [ 30.839591] tcp_get_cookie_sock+0x115/0x590 [ 30.843984] cookie_v6_check+0x1829/0x26a0 [ 30.848204] tcp_v6_do_rcv+0x1087/0x13a0 [ 30.852249] tcp_v6_rcv+0x35bb/0x3a70 [ 30.856045] ip6_input_finish+0x407/0x1a40 [ 30.860264] ip6_input+0xe9/0x600 [ 30.863716] ip6_rcv_finish+0x2ab/0xa30 [ 30.867674] ipv6_rcv+0xec0/0x2060 [ 30.871211] __netif_receive_skb_core+0x2488/0x3680 [ 30.876209] __netif_receive_skb+0x2c/0x1e0 [ 30.880524] process_backlog+0x219/0x760 [ 30.884568] net_rx_action+0x7da/0x1980 [ 30.888528] __do_softirq+0x2e8/0xb17 [ 30.892306] [ 30.893915] Freed by task 0: [ 30.896918] (stack is not available) [ 30.900608] [ 30.902221] The buggy address belongs to the object at ffff8801b631ab80 [ 30.902221] which belongs to the cache TCP of size 2640 [ 30.914263] The buggy address is located 0 bytes to the right of [ 30.914263] 2640-byte region [ffff8801b631ab80, ffff8801b631b5d0) [ 30.926642] The buggy address belongs to the page: [ 30.931553] page:ffffea0006d8c680 count:1 mapcount:0 mapping:ffff8801d4480e00 index:0xffff8801b631bffe compound_mapcount: 0 [ 30.942810] flags: 0x2fffc0000008100(slab|head) [ 30.947465] raw: 02fffc0000008100 ffffea0007338888 ffffea0006b8b088 ffff8801d4480e00 [ 30.955333] raw: ffff8801b631bffe ffff8801b631a080 0000000100000002 0000000000000000 [ 30.963228] page dumped because: kasan: bad access detected [ 30.968925] [ 30.970543] Memory state around the buggy address: [ 30.975467] ffff8801b631b480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.982812] ffff8801b631b500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.990152] >ffff8801b631b580: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 30.997488] ^ [ 31.003441] ffff8801b631b600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.010786] ffff8801b631b680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.018133] ================================================================== [ 31.025479] Disabling lock debugging due to kernel taint [ 31.030988] Kernel panic - not syncing: panic_on_warn set ... [ 31.030988] [ 31.038360] CPU: 0 PID: 4553 Comm: syz-executor318 Tainted: G B 4.18.0-rc1+ #114 [ 31.047177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.056507] Call Trace: [ 31.059068] [ 31.061210] dump_stack+0x1c9/0x2b4 [ 31.064820] ? dump_stack_print_info.cold.2+0x52/0x52 [ 31.070342] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 31.075081] panic+0x238/0x4e7 [ 31.078267] ? add_taint.cold.5+0x16/0x16 [ 31.082402] ? do_raw_spin_unlock+0xa7/0x2f0 [ 31.086799] ? tcp_v6_syn_recv_sock+0x700/0x26b0 [ 31.091534] kasan_end_report+0x47/0x4f [ 31.095490] kasan_report.cold.7+0x76/0x2fe [ 31.099796] check_memory_region+0x13e/0x1b0 [ 31.104188] memcpy+0x37/0x50 [ 31.107277] tcp_v6_syn_recv_sock+0x700/0x26b0 [ 31.111849] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 31.117382] ? inet6_sk_rx_dst_set+0x970/0x970 [ 31.121947] ? xfrm_policy_lookup+0x70/0x70 [ 31.126276] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 31.131276] ? ip6_dst_lookup_tail+0xbbb/0x1da0 [ 31.135929] ? trace_hardirqs_on+0xd/0x10 [ 31.140058] ? __local_bh_enable_ip+0x161/0x230 [ 31.144721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 31.150239] ? ip6_dst_lookup_tail+0x3ca/0x1da0 [ 31.154914] ? __lock_is_held+0xb5/0x140 [ 31.158962] ? rcu_read_lock_sched_held+0x108/0x120 [ 31.163965] tcp_get_cookie_sock+0x115/0x590 [ 31.168385] ? cookie_ecn_ok+0x130/0x130 [ 31.172428] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 31.177947] ? xfrm_lookup_route+0x64/0x1f0 [ 31.182262] ? ip6_dst_lookup_flow+0x1ce/0x270 [ 31.186831] ? ip6_dst_lookup+0x60/0x60 [ 31.190787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 31.196305] ? tcp_select_initial_window+0x2f8/0x3a0 [ 31.201389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 31.206924] cookie_v6_check+0x1829/0x26a0 [ 31.211319] ? cookie_v6_init_sequence+0xe0/0xe0 [ 31.216062] ? lock_downgrade+0x8f0/0x8f0 [ 31.220193] ? kasan_check_read+0x11/0x20 [ 31.224322] ? rcu_is_watching+0x8c/0x150 [ 31.228461] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 31.232866] ? sk_filter_trim_cap+0x47b/0xa60 [ 31.237348] ? tcp_v6_inbound_md5_hash+0x1bd/0x420 [ 31.242259] tcp_v6_do_rcv+0x1087/0x13a0 [ 31.246304] ? tcp_v6_do_rcv+0x1087/0x13a0 [ 31.250518] ? __sanitizer_cov_trace_cmp8+0x11/0x20 [ 31.255515] tcp_v6_rcv+0x35bb/0x3a70 [ 31.259310] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 31.263707] ? tcp_v6_reqsk_send_ack+0x380/0x380 [ 31.268458] ? __lock_is_held+0xb5/0x140 [ 31.272504] ip6_input_finish+0x407/0x1a40 [ 31.276725] ? ip6_rcv_finish+0xa30/0xa30 [ 31.280858] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 31.285875] ? nf_hook_slow+0x11e/0x1c0 [ 31.289918] ip6_input+0xe9/0x600 [ 31.293353] ? ip6_input_finish+0x1a40/0x1a40 [ 31.297832] ? ip6_rcv_finish+0xa30/0xa30 [ 31.301966] ip6_rcv_finish+0x2ab/0xa30 [ 31.305936] ? ip6_make_skb+0x600/0x600 [ 31.309897] ? kasan_check_read+0x11/0x20 [ 31.314026] ? rcu_is_watching+0x8c/0x150 [ 31.318156] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 31.322545] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 31.327546] ? nf_hook_slow+0x11e/0x1c0 [ 31.331503] ipv6_rcv+0xec0/0x2060 [ 31.335118] ? ip6_input+0x600/0x600 [ 31.338815] ? ip6_make_skb+0x600/0x600 [ 31.342777] ? __lock_is_held+0xb5/0x140 [ 31.346821] ? ip6_input+0x600/0x600 [ 31.350532] __netif_receive_skb_core+0x2488/0x3680 [ 31.355533] ? nf_ingress+0xa30/0xa30 [ 31.359320] ? __lock_acquire+0x7fc/0x5020 [ 31.363534] ? graph_lock+0x170/0x170 [ 31.367318] ? __lock_acquire+0x7fc/0x5020 [ 31.371541] ? debug_check_no_locks_freed+0x310/0x310 [ 31.376711] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 31.382757] ? __lock_acquire+0x7fc/0x5020 [ 31.386976] ? __lock_acquire+0x7fc/0x5020 [ 31.391191] ? attach_entity_load_avg+0x860/0x860 [ 31.396023] ? debug_check_no_locks_freed+0x310/0x310 [ 31.401195] ? debug_check_no_locks_freed+0x310/0x310 [ 31.406366] ? graph_lock+0x170/0x170 [ 31.410151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 31.415673] ? run_posix_cpu_timers+0x6c7/0x2580 [ 31.420412] ? find_held_lock+0x36/0x1c0 [ 31.424468] ? print_usage_bug+0xc0/0xc0 [ 31.428512] ? lock_acquire+0x1e4/0x540 [ 31.432483] ? process_backlog+0x1a6/0x760 [ 31.436705] ? kasan_check_read+0x11/0x20 [ 31.440839] ? rcu_is_watching+0x8c/0x150 [ 31.444981] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 31.449376] __netif_receive_skb+0x2c/0x1e0 [ 31.453686] process_backlog+0x219/0x760 [ 31.457819] net_rx_action+0x7da/0x1980 [ 31.461788] ? napi_complete_done+0x6c0/0x6c0 [ 31.466283] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 31.471309] ? trace_hardirqs_on+0xd/0x10 [ 31.475440] ? __run_timers+0xa37/0xc70 [ 31.479410] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 31.484756] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 31.489761] ? graph_lock+0x170/0x170 [ 31.493543] ? enqueue_hrtimer+0x18e/0x540 [ 31.497764] ? find_held_lock+0x36/0x1c0 [ 31.501809] ? print_usage_bug+0xc0/0xc0 [ 31.505852] ? graph_lock+0x170/0x170 [ 31.509649] ? lock_downgrade+0x8f0/0x8f0 [ 31.513794] ? __lock_is_held+0xb5/0x140 [ 31.517841] ? print_usage_bug+0xc0/0xc0 [ 31.521896] ? __do_softirq+0x780/0xb17 [ 31.525855] ? graph_lock+0x170/0x170 [ 31.529726] ? __irqentry_text_end+0x1f97a8/0x1f97a8 [ 31.534820] ? __lock_is_held+0xb5/0x140 [ 31.538866] __do_softirq+0x2e8/0xb17 [ 31.542650] ? __irqentry_text_end+0x1f97a8/0x1f97a8 [ 31.547753] ? irq_exit+0xbb/0x200 [ 31.551273] ? smp_apic_timer_interrupt+0x186/0x730 [ 31.556269] ? smp_call_function_single_interrupt+0x660/0x660 [ 31.562146] ? _raw_spin_unlock+0x22/0x30 [ 31.566277] ? handle_edge_irq+0x330/0x870 [ 31.570505] ? task_prio+0x50/0x50 [ 31.574031] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 31.578856] do_softirq_own_stack+0x2a/0x40 [ 31.583162] [ 31.585382] do_softirq.part.17+0x14d/0x190 [ 31.589697] ? ip6_finish_output2+0xcb5/0x2820 [ 31.594259] __local_bh_enable_ip+0x1ec/0x230 [ 31.598748] ip6_finish_output2+0xce8/0x2820 [ 31.603140] ? ip6_flush_pending_frames+0xc0/0xc0 [ 31.607967] ? lock_downgrade+0x8f0/0x8f0 [ 31.612098] ? graph_lock+0x170/0x170 [ 31.615880] ? kasan_check_read+0x11/0x20 [ 31.620010] ? rcu_is_watching+0x8c/0x150 [ 31.624137] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 31.628530] ? __lock_is_held+0xb5/0x140 [ 31.632575] ip6_finish_output+0x5fe/0xbc0 [ 31.636800] ? ip6_finish_output+0x5fe/0xbc0 [ 31.641203] ip6_output+0x234/0x9d0 [ 31.644822] ? ip6_finish_output+0xbc0/0xbc0 [ 31.649212] ? ip6_fragment+0x3930/0x3930 [ 31.653353] ? __lock_is_held+0xb5/0x140 [ 31.657399] ip6_xmit+0xf51/0x23f0 [ 31.660920] ? rcu_is_watching+0x8c/0x150 [ 31.665231] ? ip6_finish_output2+0x2820/0x2820 [ 31.669881] ? inet6_csk_route_socket+0x708/0x1030 [ 31.674793] ? debug_check_no_locks_freed+0x310/0x310 [ 31.679974] ? find_held_lock+0x1/0x1c0 [ 31.683935] ? pudp_huge_clear_flush+0x230/0x230 [ 31.688687] ? ip6_append_data+0x2e0/0x2e0 [ 31.692905] ? lock_acquire+0x1e4/0x540 [ 31.696859] ? inet6_csk_xmit+0x137/0x630 [ 31.701002] ? __lock_is_held+0xb5/0x140 [ 31.705050] inet6_csk_xmit+0x377/0x630 [ 31.709018] ? inet6_csk_update_pmtu+0x190/0x190 [ 31.713757] ? tcp_schedule_loss_probe+0x510/0x510 [ 31.718681] tcp_transmit_skb+0x1bf9/0x3f10 [ 31.722992] ? __tcp_select_window+0x9f0/0x9f0 [ 31.727572] ? print_usage_bug+0xc0/0xc0 [ 31.731722] ? kernel_text_address+0x79/0xf0 [ 31.736115] ? __kernel_text_address+0xd/0x40 [ 31.740609] ? unwind_get_return_address+0x61/0xa0 [ 31.745521] ? __lock_acquire+0x7fc/0x5020 [ 31.749738] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 31.754737] ? tcp_small_queue_check.isra.27+0x35a/0x490 [ 31.760179] ? tcp_rtx_synack+0x6f0/0x6f0 [ 31.764321] ? kvm_clock_read+0x25/0x30 [ 31.768275] ? kvm_sched_clock_read+0x9/0x20 [ 31.772674] ? sched_clock+0x31/0x40 [ 31.776370] ? sched_clock_cpu+0x1b/0x180 [ 31.780500] tcp_write_xmit+0x1641/0x5c20 [ 31.784633] ? tcp_transmit_skb+0x3f10/0x3f10 [ 31.789112] ? graph_lock+0x170/0x170 [ 31.792899] ? __sk_mem_raise_allocated+0x88a/0x1600 [ 31.797985] ? graph_lock+0x170/0x170 [ 31.801773] ? sk_busy_loop_end+0x1c0/0x1c0 [ 31.806077] ? __kmalloc_node_track_caller+0x47/0x70 [ 31.811163] ? find_held_lock+0x36/0x1c0 [ 31.815208] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 31.820232] ? iov_iter_advance+0x2ec/0x14e0 [ 31.824656] ? check_same_owner+0x340/0x340 [ 31.828963] __tcp_push_pending_frames+0xb2/0x290 [ 31.833919] tcp_push+0x638/0x8c0 [ 31.837357] ? kasan_check_write+0x14/0x20 [ 31.841723] ? tcp_enter_memory_pressure+0x120/0x120 [ 31.846807] ? _copy_from_iter_full+0x2bc/0xd20 [ 31.851464] ? usercopy_warn+0x120/0x120 [ 31.855507] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 31.860605] ? tcp_rate_check_app_limited+0x121/0x470 [ 31.865790] ? iov_iter_advance+0x14e0/0x14e0 [ 31.870268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 31.875788] ? __sk_mem_schedule+0xac/0xe0 [ 31.880009] tcp_sendmsg_locked+0x188d/0x3f00 [ 31.884503] ? tcp_sendpage+0x60/0x60 [ 31.888295] ? rcu_is_watching+0x8c/0x150 [ 31.892422] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 31.896814] ? print_usage_bug+0xc0/0xc0 [ 31.900858] ? find_held_lock+0x36/0x1c0 [ 31.904901] ? lock_acquire+0x1e4/0x540 [ 31.908854] ? tcp_sendmsg+0x21/0x50 [ 31.912554] ? mark_held_locks+0xc9/0x160 [ 31.916685] ? __local_bh_enable_ip+0x161/0x230 [ 31.921341] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 31.926336] ? lock_sock_nested+0x9f/0x120 [ 31.930551] ? __local_bh_enable_ip+0x161/0x230 [ 31.935202] tcp_sendmsg+0x2f/0x50 [ 31.938729] inet_sendmsg+0x1a1/0x690 [ 31.942510] ? ipip_gro_receive+0x100/0x100 [ 31.946812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 31.952330] ? security_socket_sendmsg+0x94/0xc0 [ 31.957071] ? ipip_gro_receive+0x100/0x100 [ 31.961381] sock_sendmsg+0xd5/0x120 [ 31.965088] __sys_sendto+0x3d7/0x670 [ 31.968882] ? __ia32_sys_getpeername+0xb0/0xb0 [ 31.973545] ? graph_lock+0x170/0x170 [ 31.977346] ? lock_downgrade+0x8f0/0x8f0 [ 31.981485] ? finish_task_switch+0x18a/0x890 [ 31.986569] ? kasan_check_read+0x11/0x20 [ 31.990710] ? do_raw_spin_unlock+0xa7/0x2f0 [ 31.995102] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 31.999678] __x64_sys_sendto+0xe1/0x1a0 [ 32.003744] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.008758] do_syscall_64+0x1b9/0x820 [ 32.012638] ? syscall_return_slowpath+0x5e0/0x5e0 [ 32.017558] ? syscall_return_slowpath+0x31d/0x5e0 [ 32.022485] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 32.027848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 32.032696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 32.037876] RIP: 0033:0x445c99 [ 32.041048] Code: e8 5c e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 51 00 00 c3 66 2e 0f 1f 84 00 00 00 00 [ 32.060221] RSP: 002b:00007feaf2650da8 EFLAGS: 00000216 ORIG_RAX: 000000000000002c [ 32.067945] RAX: ffffffffffffffda RBX: 00000000006dac5c RCX: 0000000000445c99 [ 32.075217] RDX: 00000000fffffdf7 RSI: 0000000020000280 RDI: 0000000000000004 [ 32.082494] RBP: 00000000006dac58 R08: 0000000020000000 R09: 000000000000001c [ 32.089757] R10: 0000000020000003 R11: 0000000000000216 R12: 0000000000000000 [ 32.097024] R13: 00007ffe5aa0339f R14: 00007feaf26519c0 R15: 0000000000000001 [ 32.104818] Dumping ftrace buffer: [ 32.108364] (ftrace buffer empty) [ 32.112058] Kernel Offset: disabled [ 32.115690] Rebooting in 86400 seconds..