Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts. 2023/07/20 21:15:53 ignoring optional flag "sandboxArg"="0" 2023/07/20 21:15:53 parsed 1 programs 2023/07/20 21:15:53 executed programs: 0 [ 67.656779][ T3737] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.912108][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.919625][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.927175][ T3748] bridge_slave_0: entered allmulticast mode [ 68.933969][ T3748] bridge_slave_0: entered promiscuous mode [ 68.995323][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.002450][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.009692][ T3748] bridge_slave_1: entered allmulticast mode [ 69.016321][ T3748] bridge_slave_1: entered promiscuous mode [ 69.149411][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.156771][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.163980][ T3752] bridge_slave_0: entered allmulticast mode [ 69.170602][ T3752] bridge_slave_0: entered promiscuous mode [ 69.184768][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.191890][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.199649][ T3760] bridge_slave_0: entered allmulticast mode [ 69.206551][ T3760] bridge_slave_0: entered promiscuous mode [ 69.218527][ T3750] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.225809][ T3750] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.232971][ T3750] bridge_slave_0: entered allmulticast mode [ 69.239422][ T3750] bridge_slave_0: entered promiscuous mode [ 69.245841][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.252896][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.260177][ T3752] bridge_slave_1: entered allmulticast mode [ 69.266575][ T3752] bridge_slave_1: entered promiscuous mode [ 69.281218][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.288466][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.295864][ T3760] bridge_slave_1: entered allmulticast mode [ 69.302240][ T3760] bridge_slave_1: entered promiscuous mode [ 69.320173][ T3750] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.327449][ T3750] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.334718][ T3750] bridge_slave_1: entered allmulticast mode [ 69.341159][ T3750] bridge_slave_1: entered promiscuous mode [ 69.367236][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.374431][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.381612][ T3756] bridge_slave_0: entered allmulticast mode [ 69.388383][ T3756] bridge_slave_0: entered promiscuous mode [ 69.419078][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.426334][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.433540][ T3756] bridge_slave_1: entered allmulticast mode [ 69.440258][ T3756] bridge_slave_1: entered promiscuous mode [ 69.464913][ T3748] team0: Port device team_slave_0 added [ 69.472440][ T3748] team0: Port device team_slave_1 added [ 69.478498][ T3763] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.485964][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.493243][ T3763] bridge_slave_0: entered allmulticast mode [ 69.500450][ T3763] bridge_slave_0: entered promiscuous mode [ 69.564801][ T3763] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.571922][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.579181][ T3763] bridge_slave_1: entered allmulticast mode [ 69.586349][ T3763] bridge_slave_1: entered promiscuous mode [ 69.654883][ T3750] team0: Port device team_slave_0 added [ 69.665250][ T3750] team0: Port device team_slave_1 added [ 69.781478][ T3760] team0: Port device team_slave_0 added [ 69.835112][ T3760] team0: Port device team_slave_1 added [ 69.845866][ T3752] team0: Port device team_slave_0 added [ 69.883755][ T3752] team0: Port device team_slave_1 added [ 69.932583][ T3756] team0: Port device team_slave_0 added [ 69.946124][ T3748] hsr_slave_0: entered promiscuous mode [ 69.960307][ T3748] hsr_slave_1: entered promiscuous mode [ 69.979836][ T3756] team0: Port device team_slave_1 added [ 70.070250][ T3763] team0: Port device team_slave_0 added [ 70.101269][ T3750] hsr_slave_0: entered promiscuous mode [ 70.109716][ T3750] hsr_slave_1: entered promiscuous mode [ 70.116821][ T3750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.124609][ T3750] Cannot create hsr debugfs directory [ 70.130979][ T3763] team0: Port device team_slave_1 added [ 70.240423][ T3760] hsr_slave_0: entered promiscuous mode [ 70.247984][ T3760] hsr_slave_1: entered promiscuous mode [ 70.254470][ T3760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.262059][ T3760] Cannot create hsr debugfs directory [ 70.321807][ T3752] hsr_slave_0: entered promiscuous mode [ 70.329012][ T3752] hsr_slave_1: entered promiscuous mode [ 70.335321][ T3752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.342906][ T3752] Cannot create hsr debugfs directory [ 70.395845][ T3756] hsr_slave_0: entered promiscuous mode [ 70.402535][ T3756] hsr_slave_1: entered promiscuous mode [ 70.409349][ T3756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.417191][ T3756] Cannot create hsr debugfs directory [ 70.564349][ T3763] hsr_slave_0: entered promiscuous mode [ 70.584267][ T3763] hsr_slave_1: entered promiscuous mode [ 70.590585][ T3763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.598427][ T3763] Cannot create hsr debugfs directory [ 70.686888][ T3748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.729126][ T3748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.743213][ T3748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.821076][ T3748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.861694][ T3750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.912803][ T3760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.930411][ T3750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.939987][ T3750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.961948][ T3750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.972971][ T3760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.988991][ T3760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.009312][ T3760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.039710][ T3752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.061760][ T3752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.087781][ T3752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.156153][ T3752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.176560][ T3756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.221198][ T3756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.271600][ T3756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.326684][ T3756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.589035][ T3763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.636286][ T3763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.676071][ T3763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.705834][ T3763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.722767][ T3748] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.743087][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.750259][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.762492][ T3760] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.776411][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.783684][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.829935][ T3748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.840592][ T3748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.862271][ T3760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.872830][ T3760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.889780][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.896941][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.905903][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.913100][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.957914][ T3750] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.056441][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.063619][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.072172][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.079597][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.095279][ T3750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.132003][ T3752] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.196560][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.203707][ T3313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.258564][ T3752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.269267][ T3752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.294406][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.301632][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.347882][ T3756] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.401844][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.409115][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.476562][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.483744][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.545509][ T3756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.556267][ T3756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.585355][ T3763] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.605813][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.613059][ T3313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.687176][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.694419][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.711082][ T3763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.560492][ T3748] veth0_vlan: entered promiscuous mode [ 77.603218][ T3748] veth1_vlan: entered promiscuous mode [ 77.647127][ T3750] veth0_vlan: entered promiscuous mode [ 77.697844][ T3750] veth1_vlan: entered promiscuous mode [ 77.864478][ T3760] veth0_vlan: entered promiscuous mode [ 77.884777][ T3752] veth0_vlan: entered promiscuous mode [ 77.910651][ T3760] veth1_vlan: entered promiscuous mode [ 77.927489][ T3752] veth1_vlan: entered promiscuous mode [ 78.277471][ T3763] veth0_vlan: entered promiscuous mode [ 78.324669][ T3763] veth1_vlan: entered promiscuous mode [ 78.522612][ T3756] veth0_vlan: entered promiscuous mode [ 78.577527][ T3756] veth1_vlan: entered promiscuous mode [ 78.698105][ T3748] veth0_macvtap: entered promiscuous mode [ 78.742979][ T3748] veth1_macvtap: entered promiscuous mode [ 78.944163][ T3750] veth0_macvtap: entered promiscuous mode [ 78.955123][ T3750] veth1_macvtap: entered promiscuous mode [ 79.091728][ T3752] veth0_macvtap: entered promiscuous mode [ 79.127316][ T3752] veth1_macvtap: entered promiscuous mode [ 79.181460][ T3760] veth0_macvtap: entered promiscuous mode [ 79.221159][ T3760] veth1_macvtap: entered promiscuous mode [ 79.660562][ T3763] veth0_macvtap: entered promiscuous mode [ 79.705989][ T3763] veth1_macvtap: entered promiscuous mode [ 79.776254][ T3756] veth0_macvtap: entered promiscuous mode [ 79.792322][ T3756] veth1_macvtap: entered promiscuous mode [ 80.059876][ T3315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.067898][ T3315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.136772][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.144737][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.156834][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.165389][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.245890][ T3939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.253930][ T3939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.566968][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.574937][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2023/07/20 21:16:06 executed programs: 6 [ 80.657063][ T3315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.665103][ T3315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.676344][ T3953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.684332][ T3953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.756537][ T3923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.764554][ T3923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.187852][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.196096][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.264266][ T3923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.272300][ T3923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.295865][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.303884][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.348225][ T3953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.356139][ T3953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.803531][ C0] ================================================================== [ 82.811821][ C0] BUG: KASAN: slab-use-after-free in __netif_receive_skb_core.constprop.0+0x3790/0x3bf0 [ 82.821563][ C0] Read of size 8 at addr ffff8881313be208 by task dhcpcd-run-hook/4933 [ 82.829805][ C0] [ 82.832120][ C0] CPU: 0 PID: 4933 Comm: dhcpcd-run-hook Not tainted 6.5.0-rc1-syzkaller #0 [ 82.840887][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 82.851026][ C0] Call Trace: [ 82.854299][ C0] [ 82.857138][ C0] dump_stack_lvl+0x8e/0xf0 [ 82.861732][ C0] print_report+0xc4/0x620 [ 82.866146][ C0] ? __virt_addr_valid+0x1fb/0x2b0 [ 82.871375][ C0] ? __phys_addr+0x9e/0x120 [ 82.875894][ C0] kasan_report+0xda/0x110 [ 82.880413][ C0] ? __netif_receive_skb_core.constprop.0+0x3790/0x3bf0 [ 82.887365][ C0] ? __netif_receive_skb_core.constprop.0+0x3790/0x3bf0 [ 82.894315][ C0] __netif_receive_skb_core.constprop.0+0x3790/0x3bf0 [ 82.901094][ C0] ? __update_load_avg_se+0x6d0/0xd50 [ 82.907707][ C0] ? do_xdp_generic+0x8f0/0x8f0 [ 82.912673][ C0] ? place_entity+0x297/0x380 [ 82.917367][ C0] __netif_receive_skb_one_core+0xaf/0x180 [ 82.923214][ C0] ? __netif_receive_skb_list_core+0x8a0/0x8a0 [ 82.929386][ C0] ? reacquire_held_locks+0x380/0x380 [ 82.934770][ C0] ? lock_acquire+0x12a/0x2b0 [ 82.939455][ C0] __netif_receive_skb+0x1f/0x1b0 [ 82.944671][ C0] process_backlog+0x1d8/0x5e0 [ 82.949496][ C0] ? process_backlog+0x1a3/0x5e0 [ 82.954476][ C0] __napi_poll+0xb4/0x690 [ 82.958924][ C0] net_rx_action+0x938/0xe60 [ 82.963535][ C0] ? do_raw_spin_unlock+0x173/0x230 [ 82.968779][ C0] ? napi_threaded_poll+0x790/0x790 [ 82.974007][ C0] ? rcu_report_dead+0x540/0x540 [ 82.978983][ C0] ? clockevents_program_event+0x262/0x300 [ 82.985089][ C0] __do_softirq+0x250/0x672 [ 82.989704][ C0] ? __lock_text_end+0xe/0xe [ 82.994297][ C0] irq_exit_rcu+0x85/0xe0 [ 82.998714][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 83.004372][ C0] [ 83.007300][ C0] [ 83.010225][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.016336][ C0] RIP: 0010:kasan_check_range+0x10d/0x190 [ 83.022416][ C0] Code: 00 00 7c 0b 44 89 c2 e8 61 ef ff ff 83 f0 01 5b 5d 41 5c c3 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 <74> f2 eb b6 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c 48 83 c0 [ 83.042462][ C0] RSP: 0018:ffffc900026c7688 EFLAGS: 00000246 [ 83.048535][ C0] RAX: ffffed1020f24c33 RBX: ffffed1020f24c34 RCX: ffffffff81bc5318 [ 83.056686][ C0] RDX: ffffed1020f24c34 RSI: 0000000000000008 RDI: ffff888107926198 [ 83.064658][ C0] RBP: ffffed1020f24c33 R08: 0000000000000001 R09: ffffed1020f24c33 [ 83.072717][ C0] R10: ffff88810792619f R11: 0000000000054000 R12: 0000000000000001 [ 83.080962][ C0] R13: dffffc0000000000 R14: 0000001347773b09 R15: 0000000004d500d7 [ 83.089126][ C0] ? __reset_page_owner+0x98/0x160 [ 83.094279][ C0] __reset_page_owner+0x98/0x160 [ 83.099229][ C0] free_unref_page_prepare+0x5a2/0xc50 [ 83.104692][ C0] ? __mem_cgroup_uncharge_list+0x116/0x170 [ 83.110683][ C0] free_unref_page_list+0xe6/0xaa0 [ 83.115800][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 83.120950][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x60 [ 83.126847][ C0] release_pages+0xc0f/0x11b0 [ 83.131537][ C0] ? put_pages_list+0x5a0/0x5a0 [ 83.136494][ C0] ? free_swap_cache+0xa4/0x3d0 [ 83.141445][ C0] tlb_batch_pages_flush+0x9a/0x170 [ 83.146672][ C0] tlb_finish_mmu+0x14b/0x7e0 [ 83.151459][ C0] exit_mmap+0x2db/0x8a0 [ 83.155725][ C0] ? do_vma_munmap+0x70/0x70 [ 83.160341][ C0] ? delayed_uprobe_remove+0x27/0x290 [ 83.165892][ C0] __mmput+0xdd/0x450 [ 83.169884][ C0] mmput+0x51/0x60 [ 83.173874][ C0] begin_new_exec+0x1134/0x2e10 [ 83.178742][ C0] load_elf_binary+0x847/0x4e80 [ 83.183617][ C0] ? load_misc_binary+0x833/0xb80 [ 83.188681][ C0] ? find_held_lock+0x2d/0x110 [ 83.193451][ C0] ? bprm_execve+0x77a/0x1770 [ 83.198148][ C0] ? elf_map+0x320/0x320 [ 83.202406][ C0] ? lock_acquire+0x12a/0x2b0 [ 83.207265][ C0] bprm_execve+0x796/0x1770 [ 83.211781][ C0] ? free_bprm+0x3f0/0x3f0 [ 83.216211][ C0] do_execveat_common.isra.0+0x5cb/0x750 [ 83.224815][ C0] __x64_sys_execve+0x8c/0xb0 [ 83.229503][ C0] do_syscall_64+0x38/0xb0 [ 83.233925][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.240088][ C0] RIP: 0033:0x7f938cde5ef7 [ 83.244595][ C0] Code: Unable to access opcode bytes at 0x7f938cde5ecd. [ 83.251712][ C0] RSP: 002b:00007ffc2f9ada38 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 83.260254][ C0] RAX: ffffffffffffffda RBX: 000055955f7e4ec0 RCX: 00007f938cde5ef7 [ 83.268402][ C0] RDX: 000055955f7e4f08 RSI: 000055955f7e4ec0 RDI: 000055955f7e4f98 [ 83.276376][ C0] RBP: 000055955f7e4f98 R08: 000055955f7e4f9d R09: 00007ffc2f9b2ed0 [ 83.284438][ C0] R10: 00007f938cfde088 R11: 0000000000000246 R12: 000055955f7e4f08 [ 83.292844][ C0] R13: 00007f938cf93904 R14: 000055955f7e4f08 R15: 0000000000000000 [ 83.300877][ C0] [ 83.303891][ C0] [ 83.306207][ C0] Allocated by task 4829: [ 83.310610][ C0] kasan_save_stack+0x33/0x50 [ 83.315300][ C0] kasan_set_track+0x25/0x30 [ 83.319985][ C0] __kasan_kmalloc+0xa2/0xb0 [ 83.324616][ C0] ingress_init+0x29b/0x500 [ 83.329216][ C0] qdisc_create+0x4f4/0x1060 [ 83.333804][ C0] tc_modify_qdisc+0x98f/0x1a00 [ 83.338652][ C0] rtnetlink_rcv_msg+0x48c/0xba0 [ 83.343689][ C0] netlink_rcv_skb+0x16b/0x440 [ 83.348578][ C0] netlink_unicast+0x539/0x800 [ 83.353362][ C0] netlink_sendmsg+0x932/0xe20 [ 83.358143][ C0] sock_sendmsg+0xd9/0x180 [ 83.362660][ C0] ____sys_sendmsg+0x67f/0x880 [ 83.367430][ C0] ___sys_sendmsg+0x135/0x1d0 [ 83.372111][ C0] __sys_sendmsg+0x117/0x1e0 [ 83.376848][ C0] do_syscall_64+0x38/0xb0 [ 83.381270][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.387257][ C0] [ 83.389570][ C0] Freed by task 4256: [ 83.393536][ C0] kasan_save_stack+0x33/0x50 [ 83.398221][ C0] kasan_set_track+0x25/0x30 [ 83.402817][ C0] kasan_save_free_info+0x2b/0x40 [ 83.407867][ C0] ____kasan_slab_free+0x15e/0x1b0 [ 83.413074][ C0] slab_free_freelist_hook+0x10b/0x1e0 [ 83.418621][ C0] kmem_cache_free_bulk.part.0+0x289/0x6f0 [ 83.424439][ C0] kvfree_rcu_bulk+0x430/0x560 [ 83.429201][ C0] kfree_rcu_monitor+0x463/0x1270 [ 83.434221][ C0] process_one_work+0xa0f/0x14b0 [ 83.439160][ C0] worker_thread+0xf3/0xe00 [ 83.443715][ C0] kthread+0x2aa/0x380 [ 83.447781][ C0] ret_from_fork+0x1f/0x30 [ 83.452200][ C0] [ 83.454603][ C0] Last potentially related work creation: [ 83.460306][ C0] kasan_save_stack+0x33/0x50 [ 83.465024][ C0] __kasan_record_aux_stack+0xbc/0xd0 [ 83.470427][ C0] kvfree_call_rcu+0x63/0x970 [ 83.475208][ C0] ingress_destroy+0x29f/0x330 [ 83.480161][ C0] qdisc_create+0xa04/0x1060 [ 83.484940][ C0] tc_modify_qdisc+0x98f/0x1a00 [ 83.489874][ C0] rtnetlink_rcv_msg+0x48c/0xba0 [ 83.494826][ C0] netlink_rcv_skb+0x16b/0x440 [ 83.499596][ C0] netlink_unicast+0x539/0x800 [ 83.504451][ C0] netlink_sendmsg+0x932/0xe20 [ 83.509303][ C0] sock_sendmsg+0xd9/0x180 [ 83.513724][ C0] ____sys_sendmsg+0x67f/0x880 [ 83.518494][ C0] ___sys_sendmsg+0x135/0x1d0 [ 83.523430][ C0] __sys_sendmsg+0x117/0x1e0 [ 83.528031][ C0] do_syscall_64+0x38/0xb0 [ 83.532549][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.538629][ C0] [ 83.540953][ C0] The buggy address belongs to the object at ffff8881313be000 [ 83.540953][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 83.555056][ C0] The buggy address is located 520 bytes inside of [ 83.555056][ C0] freed 2048-byte region [ffff8881313be000, ffff8881313be800) [ 83.569118][ C0] [ 83.571612][ C0] The buggy address belongs to the physical page: [ 83.578033][ C0] page:ffffea0004c4ee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1313b8 [ 83.588663][ C0] head:ffffea0004c4ee00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.597781][ C0] flags: 0x200000000010200(slab|head|node=0|zone=2) [ 83.604468][ C0] page_type: 0xffffffff() [ 83.608800][ C0] raw: 0200000000010200 ffff888100042000 dead000000000100 dead000000000122 [ 83.617484][ C0] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 83.626074][ C0] page dumped because: kasan: bad access detected [ 83.632485][ C0] page_owner tracks the page as allocated [ 83.638210][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2850, tgid 2850 (klogd), ts 74363736681, free_ts 74351423195 [ 83.660444][ C0] post_alloc_hook+0x281/0x2f0 [ 83.665220][ C0] get_page_from_freelist+0xcff/0x31a0 [ 83.671207][ C0] __alloc_pages+0x1d0/0x470 [ 83.675798][ C0] alloc_pages+0x21f/0x3e0 [ 83.680245][ C0] allocate_slab+0x24e/0x360 [ 83.684842][ C0] ___slab_alloc+0x7a7/0x1000 [ 83.689525][ C0] __slab_alloc.constprop.0+0x4d/0x90 [ 83.694921][ C0] __kmem_cache_alloc_node+0x143/0x390 [ 83.700476][ C0] kmalloc_trace+0x25/0xb0 [ 83.705068][ C0] syslog_print+0xf9/0x5b0 [ 83.709490][ C0] do_syslog+0x2d4/0x580 [ 83.713745][ C0] __x64_sys_syslog+0x74/0xb0 [ 83.718515][ C0] do_syscall_64+0x38/0xb0 [ 83.722937][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.728833][ C0] page last free stack trace: [ 83.733579][ C0] free_unref_page_prepare+0x5a2/0xc50 [ 83.739036][ C0] free_unref_page+0x33/0x350 [ 83.743713][ C0] __unfreeze_partials+0x1f1/0x210 [ 83.748832][ C0] qlist_free_all+0x6a/0x170 [ 83.753425][ C0] kasan_quarantine_reduce+0x17d/0x1b0 [ 83.759151][ C0] __kasan_slab_alloc+0x65/0x90 [ 83.764000][ C0] kmem_cache_alloc+0x1a1/0x3d0 [ 83.768952][ C0] getname_flags.part.0+0x50/0x4d0 [ 83.774065][ C0] getname_flags+0x9c/0xf0 [ 83.778487][ C0] vfs_fstatat+0x77/0xb0 [ 83.782736][ C0] __do_sys_newfstatat+0x98/0x110 [ 83.787766][ C0] do_syscall_64+0x38/0xb0 [ 83.792271][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.798167][ C0] [ 83.800492][ C0] Memory state around the buggy address: [ 83.806125][ C0] ffff8881313be100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.814183][ C0] ffff8881313be180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.822328][ C0] >ffff8881313be200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.830385][ C0] ^ [ 83.834705][ C0] ffff8881313be280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.842762][ C0] ffff8881313be300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.850819][ C0] ================================================================== [ 83.859208][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.866741][ C0] Kernel Offset: disabled [ 83.871315][ C0] Rebooting in 86400 seconds..