[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 89.780689][T10623] sshd (10623) used greatest stack depth: 22776 bytes left [ 89.972226][ T28] audit: type=1400 audit(1582058896.696:37): avc: denied { watch } for pid=10650 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16180 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. syzkaller login: [ 99.853014][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 99.853029][ T28] audit: type=1400 audit(1582058906.576:42): avc: denied { map } for pid=10748 comm="syz-executor914" path="/root/syz-executor914617326" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 99.877933][T10749] IPVS: ftp: loaded support on port[0] = 21 [ 99.938634][T10749] chnl_net:caif_netlink_parms(): no params data found [ 99.978532][T10749] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.986272][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.994444][T10749] device bridge_slave_0 entered promiscuous mode [ 100.003794][T10749] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.011117][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.018835][T10749] device bridge_slave_1 entered promiscuous mode [ 100.037647][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.049399][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.069892][T10749] team0: Port device team_slave_0 added [ 100.077910][T10749] team0: Port device team_slave_1 added [ 100.094849][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.102125][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.128367][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.141829][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.148954][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.175178][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.232257][T10749] device hsr_slave_0 entered promiscuous mode [ 100.270152][T10749] device hsr_slave_1 entered promiscuous mode [ 100.376322][ T28] audit: type=1400 audit(1582058907.096:43): avc: denied { create } for pid=10749 comm="syz-executor914" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 100.380567][T10749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.408558][ T28] audit: type=1400 audit(1582058907.096:44): avc: denied { write } for pid=10749 comm="syz-executor914" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 100.433997][ T28] audit: type=1400 audit(1582058907.096:45): avc: denied { read } for pid=10749 comm="syz-executor914" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 100.474055][T10749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.532884][T10749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.592516][T10749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.647551][T10749] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.655042][T10749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.663096][T10749] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.670222][T10749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.722463][T10749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.738465][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.748750][ T2790] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.757155][ T2790] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.765390][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 100.778795][T10749] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.791463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.801008][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.808592][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.833129][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.843202][ T2739] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.850708][ T2739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.858715][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.869765][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.880802][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.894810][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.906970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.918896][T10749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.947593][T10749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.955711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.964854][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.985387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.995190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.017047][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.026427][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.037816][T10749] device veth0_vlan entered promiscuous mode [ 101.049488][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.057967][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.074122][T10749] device veth1_vlan entered promiscuous mode [ 101.099196][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.107387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.115679][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.124674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.136859][T10749] device veth0_macvtap entered promiscuous mode [ 101.148038][T10749] device veth1_macvtap entered promiscuous mode [ 101.167885][T10749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.175826][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.184746][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.193612][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.202778][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.216353][T10749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.224548][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.234184][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 101.400114][ C0] ================================================================== [ 101.409482][ C0] BUG: KASAN: use-after-free in find_match+0xb39/0xc90 [ 101.416441][ C0] Read of size 8 at addr ffff888080a02320 by task kworker/0:3/2739 [ 101.424333][ C0] [ 101.427412][ C0] CPU: 0 PID: 2739 Comm: kworker/0:3 Not tainted 5.6.0-rc2-syzkaller #0 [ 101.436065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.446409][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 101.452383][ C0] Call Trace: [ 101.455786][ C0] [ 101.458799][ C0] dump_stack+0x197/0x210 [ 101.464125][ C0] ? find_match+0xb39/0xc90 [ 101.468627][ C0] print_address_description.constprop.0.cold+0xd4/0x30b [ 101.475663][ C0] ? find_match+0xb39/0xc90 [ 101.480156][ C0] ? find_match+0xb39/0xc90 [ 101.484744][ C0] __kasan_report.cold+0x1b/0x32 [ 101.489701][ C0] ? find_match+0xb39/0xc90 [ 101.494221][ C0] kasan_report+0x12/0x20 [ 101.498544][ C0] __asan_report_load8_noabort+0x14/0x20 [ 101.504164][ C0] find_match+0xb39/0xc90 [ 101.508473][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 101.513486][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 101.519309][ C0] __find_rr_leaf+0x14e/0x750 [ 101.523992][ C0] ? nexthop_is_blackhole+0x690/0x690 [ 101.529484][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 101.535631][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 101.540648][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 101.546700][ C0] fib6_table_lookup+0x697/0xdb0 [ 101.551642][ C0] ? rt6_age_exceptions+0x130/0x130 [ 101.556837][ C0] ? __kasan_check_read+0x11/0x20 [ 101.561856][ C0] ip6_pol_route+0x1f6/0xa70 [ 101.566530][ C0] ? ip6_pol_route_lookup+0x12e0/0x12e0 [ 101.572079][ C0] ? flow_hash_from_keys+0x2c4/0x8c0 [ 101.577353][ C0] ip6_pol_route_input+0x65/0x80 [ 101.582293][ C0] fib6_rule_lookup+0x133/0x7d0 [ 101.587148][ C0] ? ip6_pol_route+0xa70/0xa70 [ 101.591908][ C0] ? fib6_lookup+0x340/0x340 [ 101.596504][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 101.602856][ C0] ? ipvlan_ht_addr_lookup+0x2df/0x450 [ 101.608340][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 101.614236][ C0] ip6_route_input_lookup+0xb7/0xd0 [ 101.619483][ C0] ip6_route_input+0x5f0/0xa40 [ 101.624242][ C0] ? ip6_route_check_nh+0x670/0x670 [ 101.629439][ C0] ? ipvlan_link_new.cold+0x45/0x45 [ 101.634634][ C0] ? slab_prepare_cpu+0x88/0xa0 [ 101.639484][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 101.644494][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 101.650305][ C0] ip6_rcv_finish_core.isra.0+0x174/0x590 [ 101.656016][ C0] ? ipvlan_nf_input+0x190/0x190 [ 101.661075][ C0] ip6_rcv_finish+0x17a/0x310 [ 101.665763][ C0] ipv6_rcv+0x10e/0x420 [ 101.670048][ C0] ? ip6_rcv_core.isra.0+0x1c30/0x1c30 [ 101.675522][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 101.680530][ C0] ? ip6_rcv_finish_core.isra.0+0x590/0x590 [ 101.686427][ C0] ? ip6_rcv_core.isra.0+0x1c30/0x1c30 [ 101.691879][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 101.697772][ C0] ? __netif_receive_skb_core+0x30b0/0x30b0 [ 101.703651][ C0] ? lock_acquire+0x190/0x410 [ 101.708320][ C0] ? process_backlog+0x1b5/0x780 [ 101.713245][ C0] __netif_receive_skb+0x2c/0x1d0 [ 101.718256][ C0] process_backlog+0x226/0x780 [ 101.723014][ C0] ? net_rx_action+0x27b/0x1120 [ 101.727848][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 101.733122][ C0] net_rx_action+0x508/0x1120 [ 101.737789][ C0] ? napi_busy_loop+0x970/0x970 [ 101.742646][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 101.748211][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 101.754192][ C0] ? ip6_finish_output2+0x10d3/0x25c0 [ 101.759566][ C0] ? trace_hardirqs_on+0x67/0x240 [ 101.764583][ C0] __do_softirq+0x262/0x98c [ 101.769146][ C0] ? ip6_finish_output2+0x10d3/0x25c0 [ 101.774531][ C0] do_softirq_own_stack+0x2a/0x40 [ 101.779686][ C0] [ 101.782619][ C0] do_softirq.part.0+0x11a/0x170 [ 101.787585][ C0] __local_bh_enable_ip+0x211/0x270 [ 101.792806][ C0] ip6_finish_output2+0x1101/0x25c0 [ 101.798152][ C0] ? ip6_frag_next+0xb20/0xb20 [ 101.802980][ C0] ? lock_downgrade+0x920/0x920 [ 101.807836][ C0] ? __kasan_check_read+0x11/0x20 [ 101.812875][ C0] __ip6_finish_output+0x444/0xaa0 [ 101.817987][ C0] ? __ip6_finish_output+0x444/0xaa0 [ 101.823279][ C0] ip6_finish_output+0x38/0x1f0 [ 101.828135][ C0] ip6_output+0x25e/0x880 [ 101.832563][ C0] ? ip6_finish_output+0x1f0/0x1f0 [ 101.837946][ C0] ? __ip6_finish_output+0xaa0/0xaa0 [ 101.843403][ C0] ndisc_send_skb+0xf1f/0x1490 [ 101.848165][ C0] ? nf_hook.constprop.0+0x560/0x560 [ 101.853449][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.859694][ C0] ? skb_set_owner_w+0x265/0x410 [ 101.864814][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 101.870543][ C0] ndisc_send_ns+0x3a9/0x850 [ 101.875126][ C0] ? mark_held_locks+0xa4/0xf0 [ 101.880074][ C0] ? ndisc_netdev_event+0x5e0/0x5e0 [ 101.885263][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 101.890549][ C0] ? addrconf_dad_work+0xb2c/0x11d0 [ 101.895748][ C0] ? trace_hardirqs_on+0x67/0x240 [ 101.900780][ C0] ? addrconf_dad_work+0xb2c/0x11d0 [ 101.905970][ C0] addrconf_dad_work+0xbf3/0x11d0 [ 101.910988][ C0] ? addrconf_dad_completed+0xbb0/0xbb0 [ 101.916531][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 101.923275][ C0] ? trace_hardirqs_on+0x67/0x240 [ 101.928306][ C0] process_one_work+0xa05/0x17a0 [ 101.933321][ C0] ? mark_held_locks+0xf0/0xf0 [ 101.938084][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 101.943445][ C0] ? lock_acquire+0x190/0x410 [ 101.948115][ C0] worker_thread+0x98/0xe40 [ 101.952627][ C0] ? trace_hardirqs_on+0x67/0x240 [ 101.957654][ C0] kthread+0x361/0x430 [ 101.961743][ C0] ? process_one_work+0x17a0/0x17a0 [ 101.966930][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 101.972637][ C0] ret_from_fork+0x24/0x30 [ 101.977044][ C0] [ 101.979352][ C0] Allocated by task 10749: [ 101.983764][ C0] save_stack+0x23/0x90 [ 101.987901][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 101.993521][ C0] kasan_kmalloc+0x9/0x10 [ 101.997829][ C0] __kmalloc_node+0x4e/0x70 [ 102.002335][ C0] kvmalloc_node+0x68/0x100 [ 102.006820][ C0] alloc_netdev_mqs+0x98/0xe40 [ 102.011652][ C0] vti6_init_net+0x244/0x810 [ 102.016219][ C0] ops_init+0xb3/0x420 [ 102.020270][ C0] setup_net+0x2d5/0x8b0 [ 102.024492][ C0] copy_net_ns+0x29e/0x5a0 [ 102.028911][ C0] create_new_namespaces+0x403/0xb50 [ 102.034177][ C0] unshare_nsproxy_namespaces+0xc2/0x200 [ 102.039801][ C0] ksys_unshare+0x444/0x980 [ 102.044283][ C0] __x64_sys_unshare+0x31/0x40 [ 102.049026][ C0] do_syscall_64+0xfa/0x790 [ 102.053512][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 102.059390][ C0] [ 102.061709][ C0] Freed by task 10749: [ 102.065772][ C0] save_stack+0x23/0x90 [ 102.069934][ C0] __kasan_slab_free+0x102/0x150 [ 102.074895][ C0] kasan_slab_free+0xe/0x10 [ 102.079632][ C0] kfree+0x10a/0x2c0 [ 102.083536][ C0] __netdev_name_node_alt_destroy+0x1ff/0x2a0 [ 102.089680][ C0] netdev_name_node_alt_destroy+0x57/0x80 [ 102.095412][ C0] rtnl_linkprop.isra.0+0x575/0x6f0 [ 102.100619][ C0] rtnl_dellinkprop+0x46/0x60 [ 102.105281][ C0] rtnetlink_rcv_msg+0x45e/0xaf0 [ 102.110229][ C0] netlink_rcv_skb+0x177/0x450 [ 102.115180][ C0] rtnetlink_rcv+0x1d/0x30 [ 102.119604][ C0] netlink_unicast+0x59e/0x7e0 [ 102.124363][ C0] netlink_sendmsg+0x91c/0xea0 [ 102.129127][ C0] sock_sendmsg+0xd7/0x130 [ 102.135533][ C0] ____sys_sendmsg+0x753/0x880 [ 102.140276][ C0] ___sys_sendmsg+0x100/0x170 [ 102.145253][ C0] __sys_sendmsg+0x105/0x1d0 [ 102.149923][ C0] __x64_sys_sendmsg+0x78/0xb0 [ 102.154693][ C0] do_syscall_64+0xfa/0x790 [ 102.159215][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 102.165087][ C0] [ 102.167405][ C0] The buggy address belongs to the object at ffff888080a02000 [ 102.167405][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 102.181460][ C0] The buggy address is located 800 bytes inside of [ 102.181460][ C0] 4096-byte region [ffff888080a02000, ffff888080a03000) [ 102.195118][ C0] The buggy address belongs to the page: [ 102.200744][ C0] page:ffffea0002028080 refcount:1 mapcount:0 mapping:ffff8880aa402000 index:0x0 compound_mapcount: 0 [ 102.211932][ C0] flags: 0xfffe0000010200(slab|head) [ 102.218163][ C0] raw: 00fffe0000010200 ffffea0002028008 ffffea0002445108 ffff8880aa402000 [ 102.226839][ C0] raw: 0000000000000000 ffff888080a02000 0000000100000001 0000000000000000 [ 102.235547][ C0] page dumped because: kasan: bad access detected [ 102.241979][ C0] [ 102.244319][ C0] Memory state around the buggy address: [ 102.250062][ C0] ffff888080a02200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.258114][ C0] ffff888080a02280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.266176][ C0] >ffff888080a02300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.274408][ C0] ^ [ 102.279519][ C0] ffff888080a02380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.287729][ C0] ffff888080a02400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.295865][ C0] ================================================================== [ 102.304013][ C0] Disabling lock debugging due to kernel taint [ 102.310293][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 102.317369][ C0] CPU: 0 PID: 2739 Comm: kworker/0:3 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 102.328718][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.338799][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 102.344869][ C0] Call Trace: [ 102.348149][ C0] [ 102.351015][ C0] dump_stack+0x197/0x210 [ 102.355351][ C0] panic+0x2e3/0x75c [ 102.359386][ C0] ? add_taint.cold+0x16/0x16 [ 102.364234][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 102.369529][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 102.374562][ C0] ? find_match+0xb39/0xc90 [ 102.379842][ C0] end_report+0x47/0x4f [ 102.384013][ C0] ? find_match+0xb39/0xc90 [ 102.388543][ C0] __kasan_report.cold+0xe/0x32 [ 102.393395][ C0] ? find_match+0xb39/0xc90 [ 102.398050][ C0] kasan_report+0x12/0x20 [ 102.402415][ C0] __asan_report_load8_noabort+0x14/0x20 [ 102.408071][ C0] find_match+0xb39/0xc90 [ 102.412688][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 102.417726][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 102.423550][ C0] __find_rr_leaf+0x14e/0x750 [ 102.428274][ C0] ? nexthop_is_blackhole+0x690/0x690 [ 102.433659][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 102.439825][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 102.444874][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 102.450942][ C0] fib6_table_lookup+0x697/0xdb0 [ 102.456016][ C0] ? rt6_age_exceptions+0x130/0x130 [ 102.461239][ C0] ? __kasan_check_read+0x11/0x20 [ 102.466316][ C0] ip6_pol_route+0x1f6/0xa70 [ 102.471278][ C0] ? ip6_pol_route_lookup+0x12e0/0x12e0 [ 102.477007][ C0] ? flow_hash_from_keys+0x2c4/0x8c0 [ 102.482578][ C0] ip6_pol_route_input+0x65/0x80 [ 102.487689][ C0] fib6_rule_lookup+0x133/0x7d0 [ 102.492550][ C0] ? ip6_pol_route+0xa70/0xa70 [ 102.497333][ C0] ? fib6_lookup+0x340/0x340 [ 102.501926][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 102.508180][ C0] ? ipvlan_ht_addr_lookup+0x2df/0x450 [ 102.513675][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 102.519706][ C0] ip6_route_input_lookup+0xb7/0xd0 [ 102.524915][ C0] ip6_route_input+0x5f0/0xa40 [ 102.529691][ C0] ? ip6_route_check_nh+0x670/0x670 [ 102.534896][ C0] ? ipvlan_link_new.cold+0x45/0x45 [ 102.540118][ C0] ? slab_prepare_cpu+0x88/0xa0 [ 102.545069][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 102.550204][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 102.556031][ C0] ip6_rcv_finish_core.isra.0+0x174/0x590 [ 102.561755][ C0] ? ipvlan_nf_input+0x190/0x190 [ 102.566708][ C0] ip6_rcv_finish+0x17a/0x310 [ 102.571524][ C0] ipv6_rcv+0x10e/0x420 [ 102.575808][ C0] ? ip6_rcv_core.isra.0+0x1c30/0x1c30 [ 102.581278][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 102.586338][ C0] ? ip6_rcv_finish_core.isra.0+0x590/0x590 [ 102.592351][ C0] ? ip6_rcv_core.isra.0+0x1c30/0x1c30 [ 102.597819][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 102.603725][ C0] ? __netif_receive_skb_core+0x30b0/0x30b0 [ 102.609624][ C0] ? lock_acquire+0x190/0x410 [ 102.614312][ C0] ? process_backlog+0x1b5/0x780 [ 102.619261][ C0] __netif_receive_skb+0x2c/0x1d0 [ 102.624388][ C0] process_backlog+0x226/0x780 [ 102.629317][ C0] ? net_rx_action+0x27b/0x1120 [ 102.634167][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 102.639513][ C0] net_rx_action+0x508/0x1120 [ 102.644215][ C0] ? napi_busy_loop+0x970/0x970 [ 102.649080][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 102.654621][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 102.660626][ C0] ? ip6_finish_output2+0x10d3/0x25c0 [ 102.666009][ C0] ? trace_hardirqs_on+0x67/0x240 [ 102.671044][ C0] __do_softirq+0x262/0x98c [ 102.675580][ C0] ? ip6_finish_output2+0x10d3/0x25c0 [ 102.680961][ C0] do_softirq_own_stack+0x2a/0x40 [ 102.685986][ C0] [ 102.688919][ C0] do_softirq.part.0+0x11a/0x170 [ 102.693987][ C0] __local_bh_enable_ip+0x211/0x270 [ 102.699196][ C0] ip6_finish_output2+0x1101/0x25c0 [ 102.704524][ C0] ? ip6_frag_next+0xb20/0xb20 [ 102.709292][ C0] ? lock_downgrade+0x920/0x920 [ 102.714284][ C0] ? __kasan_check_read+0x11/0x20 [ 102.719319][ C0] __ip6_finish_output+0x444/0xaa0 [ 102.724492][ C0] ? __ip6_finish_output+0x444/0xaa0 [ 102.729804][ C0] ip6_finish_output+0x38/0x1f0 [ 102.734661][ C0] ip6_output+0x25e/0x880 [ 102.739002][ C0] ? ip6_finish_output+0x1f0/0x1f0 [ 102.744131][ C0] ? __ip6_finish_output+0xaa0/0xaa0 [ 102.749462][ C0] ndisc_send_skb+0xf1f/0x1490 [ 102.754253][ C0] ? nf_hook.constprop.0+0x560/0x560 [ 102.759569][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 102.765822][ C0] ? skb_set_owner_w+0x265/0x410 [ 102.770775][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 102.776619][ C0] ndisc_send_ns+0x3a9/0x850 [ 102.781234][ C0] ? mark_held_locks+0xa4/0xf0 [ 102.786013][ C0] ? ndisc_netdev_event+0x5e0/0x5e0 [ 102.791353][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 102.796652][ C0] ? addrconf_dad_work+0xb2c/0x11d0 [ 102.801982][ C0] ? trace_hardirqs_on+0x67/0x240 [ 102.807012][ C0] ? addrconf_dad_work+0xb2c/0x11d0 [ 102.812227][ C0] addrconf_dad_work+0xbf3/0x11d0 [ 102.817254][ C0] ? addrconf_dad_completed+0xbb0/0xbb0 [ 102.822813][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 102.828798][ C0] ? trace_hardirqs_on+0x67/0x240 [ 102.833834][ C0] process_one_work+0xa05/0x17a0 [ 102.838764][ C0] ? mark_held_locks+0xf0/0xf0 [ 102.843672][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 102.849034][ C0] ? lock_acquire+0x190/0x410 [ 102.853763][ C0] worker_thread+0x98/0xe40 [ 102.858271][ C0] ? trace_hardirqs_on+0x67/0x240 [ 102.863317][ C0] kthread+0x361/0x430 [ 102.867420][ C0] ? process_one_work+0x17a0/0x17a0 [ 102.872732][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 102.878470][ C0] ret_from_fork+0x24/0x30 [ 102.884402][ C0] Kernel Offset: disabled [ 102.888809][ C0] Rebooting in 86400 seconds..