INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes Warning: Permanently added 'ci-android-49-kasan-gce-0,10.128.0.51' (ECDSA) to the list of known hosts. 2017/09/24 05:18:45 parsed 1 programs 2017/09/24 05:18:45 executed programs: 0 [ 131.256986] dev_remove_pack: ffff8801cd31e500 not found [ 135.428856] ================================================================== [ 135.436424] BUG: KASAN: use-after-free in do_raw_spin_lock+0x1ac/0x1e0 at addr ffff8801cd31decc [ 135.445223] Read of size 4 by task sshd/3284 [ 135.449598] CPU: 0 PID: 3284 Comm: sshd Not tainted 4.9.51-g47589a5 #53 [ 135.456312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.465634] ffff8801c48c6e10 ffffffff81d93069 ffff8801da002000 ffff8801cd31dd80 [ 135.473597] ffff8801cd31e580 ffffed0039a63bd9 ffff8801cd31decc ffff8801c48c6e38 [ 135.481548] ffffffff8153cc6c ffffed0039a63bd9 ffff8801da002000 0000000000000000 [ 135.489499] Call Trace: [ 135.492056] [] dump_stack+0xc1/0x128 [ 135.497389] [] kasan_object_err+0x1c/0x70 [ 135.503154] [] kasan_report.part.1+0x21c/0x500 [ 135.509351] [] ? do_raw_spin_lock+0x1ac/0x1e0 [ 135.515460] [] __asan_report_load4_noabort+0x29/0x30 [ 135.522174] [] do_raw_spin_lock+0x1ac/0x1e0 [ 135.528112] [] _raw_spin_lock_bh+0x42/0x50 [ 135.533959] [] ? packet_rcv_has_room+0x25/0xb0 [ 135.540154] [] packet_rcv_has_room+0x25/0xb0 [ 135.546173] [] fanout_demux_rollover+0x26f/0x4d0 [ 135.552543] [] packet_rcv_fanout+0x4ce/0x620 [ 135.558565] [] dev_queue_xmit_nit+0x1b9/0x870 [ 135.564671] [] ? __netdev_pick_tx+0x700/0x700 [ 135.570779] [] dev_hard_start_xmit+0xa6/0x8a0 [ 135.576887] [] sch_direct_xmit+0x2bc/0x5d0 [ 135.582751] [] ? dev_deactivate_queue.constprop.28+0x150/0x150 [ 135.590332] [] ? dev_queue_xmit+0x17/0x20 [ 135.596090] [] __dev_queue_xmit+0x15fd/0x1e60 [ 135.602198] [] ? dev_queue_xmit+0x17/0x20 [ 135.607956] [] ? netdev_pick_tx+0x300/0x300 [ 135.613890] [] ? nf_ct_deliver_cached_events+0x26c/0x5f0 [ 135.620951] [] ? nf_ct_deliver_cached_events+0x89/0x5f0 [ 135.627928] [] ? ip_finish_output+0x6b1/0xa00 [ 135.634035] [] dev_queue_xmit+0x17/0x20 [ 135.639623] [] ip_finish_output2+0xbe8/0x1060 [ 135.645729] [] ? ip_finish_output+0x6b1/0xa00 [ 135.651834] [] ? dst_output+0x150/0x150 [ 135.657421] [] ? nf_hook_slow+0x131/0x1e0 [ 135.663179] [] ip_finish_output+0x6b1/0xa00 [ 135.669114] [] ip_output+0x1ca/0x610 [ 135.674441] [] ? ip_output+0x2f6/0x610 [ 135.679940] [] ? ip_mc_output+0xd50/0xd50 [ 135.685709] [] ? ip_fragment.constprop.56+0x200/0x200 [ 135.692510] [] ip_local_out+0x95/0x170 [ 135.698009] [] ip_queue_xmit+0x884/0x1760 [ 135.703768] [] ? ip_queue_xmit+0x3f/0x1760 [ 135.709616] [] ? __tcp_v4_send_check+0x1be/0x350 [ 135.715985] [] tcp_transmit_skb+0x1782/0x2d80 [ 135.722094] [] ? bictcp_cong_avoid+0xef0/0xef0 [ 135.728289] [] ? __tcp_select_window+0x510/0x510 [ 135.734655] [] ? remove_wait_queue+0x14/0x40 [ 135.740674] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 135.747653] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 135.754543] [] tcp_write_xmit+0xbd6/0x4a00 [ 135.760392] [] ? kasan_slab_alloc+0x12/0x20 [ 135.766328] [] ? mfill_zeropage+0x6f0/0x740 [ 135.772262] [] __tcp_push_pending_frames+0xa0/0x240 [ 135.778889] [] ? copy_from_iter+0x2d0/0x960 [ 135.784823] [] tcp_push+0x3fc/0x5d0 [ 135.790069] [] tcp_sendmsg+0xb89/0x2e30 [ 135.795658] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 135.802634] [] ? assoc_array_gc+0x12d0/0x1300 [ 135.808741] [] ? tcp_sendpage+0x1910/0x1910 [ 135.814676] [] ? sock_has_perm+0x292/0x3e0 [ 135.820520] [] ? sock_has_perm+0x9f/0x3e0 [ 135.826279] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 135.833345] [] ? inet_sendmsg+0x73/0x4c0 [ 135.839016] [] ? inet_sendmsg+0x201/0x4c0 [ 135.844773] [] inet_sendmsg+0x2bc/0x4c0 [ 135.850360] [] ? inet_sendmsg+0x73/0x4c0 [ 135.856034] [] ? inet_recvmsg+0x4c0/0x4c0 [ 135.861797] [] sock_sendmsg+0xca/0x110 [ 135.867296] [] sock_write_iter+0x226/0x3b0 [ 135.873145] [] ? avc_has_perm_noaudit+0x450/0x450 [ 135.879600] [] ? sock_sendmsg+0x110/0x110 [ 135.885358] [] ? iov_iter_init+0xaf/0x1d0 [ 135.891123] [] __vfs_write+0x4bf/0x680 [ 135.896621] [] ? default_llseek+0x290/0x290 [ 135.902557] [] ? __set_current_blocked+0x80/0xa0 [ 135.908923] [] ? selinux_file_permission+0x82/0x460 [ 135.915551] [] ? rw_verify_area+0xe5/0x2b0 [ 135.921398] [] vfs_write+0x170/0x4e0 [ 135.926725] [] SyS_write+0xd9/0x1b0 [ 135.931965] [] ? SyS_read+0x1b0/0x1b0 [ 135.937379] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 135.943923] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 135.950466] Object at ffff8801cd31dd80, in cache kmalloc-2048 size: 2048 [ 135.957263] Allocated: [ 135.959724] PID = 3436 [ 135.962188] save_stack_trace+0x16/0x20 [ 135.966126] save_stack+0x43/0xd0 [ 135.969539] kasan_kmalloc+0xad/0xe0 [ 135.973216] __kmalloc+0x11d/0x310 [ 135.976719] sk_prot_alloc+0x101/0x2a0 [ 135.980568] sk_alloc+0x3a/0x3a0 [ 135.983900] packet_create+0xf0/0x8e0 [ 135.987662] __sock_create+0x3ab/0x640 [ 135.991513] SyS_socket+0xf0/0x1b0 [ 135.995017] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 135.999733] Freed: [ 136.001846] PID = 3436 [ 136.004306] save_stack_trace+0x16/0x20 [ 136.008240] save_stack+0x43/0xd0 [ 136.011657] kasan_slab_free+0x73/0xc0 [ 136.015505] kfree+0xf0/0x2f0 [ 136.018574] __sk_destruct+0x47f/0x570 [ 136.022424] sk_destruct+0x47/0x80 [ 136.025925] __sk_free+0x57/0x230 [ 136.029341] sk_free+0x23/0x30 [ 136.032497] packet_release+0x732/0xa20 [ 136.036433] sock_release+0x8d/0x1e0 [ 136.040110] sock_close+0x16/0x20 [ 136.043524] __fput+0x28c/0x6e0 [ 136.046765] ____fput+0x15/0x20 [ 136.050006] task_work_run+0x115/0x190 [ 136.053860] do_exit+0x82e/0x2a50 [ 136.057281] do_group_exit+0x108/0x320 [ 136.061133] get_signal+0x55c/0x1600 [ 136.064812] do_signal+0x87/0x1960 [ 136.068316] exit_to_usermode_loop+0xe5/0x130 [ 136.072773] syscall_return_slowpath+0x1a0/0x1e0 [ 136.077494] entry_SYSCALL_64_fastpath+0xc4/0xc6 [ 136.082208] Memory state around the buggy address: [ 136.087099] ffff8801cd31dd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.094419] ffff8801cd31de00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.101739] >ffff8801cd31de80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.109057] ^ [ 136.114727] ffff8801cd31df00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.122047] ffff8801cd31df80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.129365] ================================================================== [ 136.136740] ================================================================== [ 136.144065] BUG: KASAN: use-after-free in do_raw_spin_lock+0x1d3/0x1e0 at addr ffff8801cd31ded8 [ 136.152863] Read of size 8 by task sshd/3284 [ 136.157235] CPU: 0 PID: 3284 Comm: sshd Tainted: G B 4.9.51-g47589a5 #53 [ 136.165164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.174487] ffff8801c48c6e10 ffffffff81d93069 ffff8801da002000 ffff8801cd31dd80 [ 136.182438] ffff8801cd31e580 ffffed0039a63bdb ffff8801cd31ded8 ffff8801c48c6e38 [ 136.190392] ffffffff8153cc6c ffffed0039a63bdb ffff8801da002000 0000000000000000 [ 136.198335] Call Trace: [ 136.200890] [] dump_stack+0xc1/0x128 [ 136.206228] [] kasan_object_err+0x1c/0x70 [ 136.211993] [] kasan_report.part.1+0x21c/0x500 [ 136.218188] [] ? do_raw_spin_lock+0x1d3/0x1e0 [ 136.224295] [] __asan_report_load8_noabort+0x29/0x30 [ 136.231009] [] do_raw_spin_lock+0x1d3/0x1e0 [ 136.236948] [] _raw_spin_lock_bh+0x42/0x50 [ 136.242799] [] ? packet_rcv_has_room+0x25/0xb0 [ 136.248992] [] packet_rcv_has_room+0x25/0xb0 [ 136.255012] [] fanout_demux_rollover+0x26f/0x4d0 [ 136.261380] [] packet_rcv_fanout+0x4ce/0x620 [ 136.267402] [] dev_queue_xmit_nit+0x1b9/0x870 [ 136.273509] [] ? __netdev_pick_tx+0x700/0x700 [ 136.279624] [] dev_hard_start_xmit+0xa6/0x8a0 [ 136.285736] [] sch_direct_xmit+0x2bc/0x5d0 [ 136.291583] [] ? dev_deactivate_queue.constprop.28+0x150/0x150 [ 136.299163] [] ? dev_queue_xmit+0x17/0x20 [ 136.304922] [] __dev_queue_xmit+0x15fd/0x1e60 [ 136.311027] [] ? dev_queue_xmit+0x17/0x20 [ 136.316788] [] ? netdev_pick_tx+0x300/0x300 [ 136.322722] [] ? nf_ct_deliver_cached_events+0x26c/0x5f0 [ 136.329788] [] ? nf_ct_deliver_cached_events+0x89/0x5f0 [ 136.336763] [] ? ip_finish_output+0x6b1/0xa00 [ 136.342868] [] dev_queue_xmit+0x17/0x20 [ 136.348453] [] ip_finish_output2+0xbe8/0x1060 [ 136.354559] [] ? ip_finish_output+0x6b1/0xa00 [ 136.360664] [] ? dst_output+0x150/0x150 [ 136.366249] [] ? nf_hook_slow+0x131/0x1e0 [ 136.372008] [] ip_finish_output+0x6b1/0xa00 [ 136.377938] [] ip_output+0x1ca/0x610 [ 136.383263] [] ? ip_output+0x2f6/0x610 [ 136.388760] [] ? ip_mc_output+0xd50/0xd50 [ 136.394521] [] ? ip_fragment.constprop.56+0x200/0x200 [ 136.401727] [] ip_local_out+0x95/0x170 [ 136.407226] [] ip_queue_xmit+0x884/0x1760 [ 136.412984] [] ? ip_queue_xmit+0x3f/0x1760 [ 136.418833] [] ? __tcp_v4_send_check+0x1be/0x350 [ 136.425203] [] tcp_transmit_skb+0x1782/0x2d80