[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 85.266596][ T27] audit: type=1800 audit(1581649296.329:25): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 85.286709][ T27] audit: type=1800 audit(1581649296.329:26): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 85.350337][ T27] audit: type=1800 audit(1581649296.329:27): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts. syzkaller login: [ 97.661272][ T9778] IPVS: ftp: loaded support on port[0] = 21 [ 97.718491][ T9778] chnl_net:caif_netlink_parms(): no params data found [ 97.757439][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.765216][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.773202][ T9778] device bridge_slave_0 entered promiscuous mode [ 97.781729][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.789563][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.797308][ T9778] device bridge_slave_1 entered promiscuous mode [ 97.815277][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.826387][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.847586][ T9778] team0: Port device team_slave_0 added [ 97.855386][ T9778] team0: Port device team_slave_1 added [ 97.870727][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.877791][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.903847][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.916111][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.923785][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.955320][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.011940][ T9778] device hsr_slave_0 entered promiscuous mode [ 98.080052][ T9778] device hsr_slave_1 entered promiscuous mode [ 98.194515][ T9778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.252973][ T9778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.311613][ T9778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.371652][ T9778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.435937][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.443533][ T9778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.452257][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.461242][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.505639][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.521098][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.535364][ T3148] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.543946][ T3148] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.553523][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 98.573984][ T9778] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.585906][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.595893][ T2846] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.603414][ T2846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.616474][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.625924][ T3148] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.633314][ T3148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.661799][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.672825][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.681994][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.691058][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.704186][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.715394][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.736506][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.745467][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.758889][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.780976][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.791061][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.815140][ T9778] device veth0_vlan entered promiscuous mode [ 98.826787][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.836482][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.845024][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.852978][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.865965][ T9778] device veth1_vlan entered promiscuous mode [ 98.891547][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.900304][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.908624][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.917985][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.930433][ T9778] device veth0_macvtap entered promiscuous mode [ 98.940661][ T9778] device veth1_macvtap entered promiscuous mode [ 98.958455][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.967020][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.975656][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.985002][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.994747][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.007895][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.016705][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.026498][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 99.422938][ T2846] ================================================================== [ 99.432154][ T2846] BUG: KASAN: use-after-free in l3mdev_master_ifindex_rcu+0x132/0x150 [ 99.440862][ T2846] Read of size 4 at addr ffff8880a61d821c by task kworker/0:6/2846 [ 99.448835][ T2846] [ 99.451207][ T2846] CPU: 0 PID: 2846 Comm: kworker/0:6 Not tainted 5.5.0-syzkaller #0 [ 99.459699][ T2846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.470848][ T2846] Workqueue: ipv6_addrconf addrconf_dad_work [ 99.478119][ T2846] Call Trace: [ 99.481676][ T2846] dump_stack+0x197/0x210 [ 99.486004][ T2846] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 99.491908][ T2846] print_address_description.constprop.0.cold+0xd4/0x30b [ 99.498932][ T2846] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 99.504862][ T2846] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 99.510708][ T2846] __kasan_report.cold+0x1b/0x32 [ 99.515915][ T2846] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 99.521764][ T2846] kasan_report+0x12/0x20 [ 99.526534][ T2846] __asan_report_load4_noabort+0x14/0x20 [ 99.532268][ T2846] l3mdev_master_ifindex_rcu+0x132/0x150 [ 99.537953][ T2846] ipv6_dev_get_saddr+0x7b8/0xc50 [ 99.542990][ T2846] ? inet6_dump_ifaddr+0x30/0x30 [ 99.548027][ T2846] ? mark_held_locks+0xf0/0xf0 [ 99.553006][ T2846] ? ip6_dst_lookup_tail+0x170/0x1f20 [ 99.559009][ T2846] ? __kasan_check_read+0x11/0x20 [ 99.564262][ T2846] ip6_dst_lookup_tail+0x1218/0x1f20 [ 99.570848][ T2846] ? ip6_append_data+0x330/0x330 [ 99.575797][ T2846] ? __kasan_check_read+0x11/0x20 [ 99.580829][ T2846] ? __lock_acquire+0x8a0/0x4a00 [ 99.587008][ T2846] ? unwind_next_frame.part.0+0x1a9/0xa20 [ 99.592744][ T2846] ? unwind_dump+0x100/0x100 [ 99.597521][ T2846] ? __dev_queue_xmit+0xbb5/0x35c0 [ 99.602829][ T2846] ? dst_cache_per_cpu_get.isra.0+0x232/0x4b0 [ 99.609354][ T2846] ip6_dst_lookup_flow+0x8c/0x1d0 [ 99.614414][ T2846] ? ip6_dst_lookup+0x70/0x70 [ 99.619119][ T2846] ? ip6_dst_lookup+0x70/0x70 [ 99.624063][ T2846] geneve_get_v6_dst+0x3e1/0x880 [ 99.629029][ T2846] geneve_xmit+0x2b4/0x30f0 [ 99.633724][ T2846] ? __kasan_check_read+0x11/0x20 [ 99.639024][ T2846] ? geneve_gro_receive+0xa80/0xa80 [ 99.644455][ T2846] ? skb_network_protocol+0xf6/0x4a0 [ 99.649916][ T2846] ? __debug_object_init+0x4e6/0xee0 [ 99.655275][ T2846] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 99.660831][ T2846] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 99.666812][ T2846] ? validate_xmit_xfrm+0x425/0xf40 [ 99.672013][ T2846] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 99.678193][ T2846] dev_hard_start_xmit+0x1a3/0x9b0 [ 99.683317][ T2846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.690550][ T2846] __dev_queue_xmit+0x2b05/0x35c0 [ 99.695603][ T2846] ? __kasan_check_read+0x11/0x20 [ 99.702323][ T2846] ? __lock_acquire+0x16f2/0x4a00 [ 99.707566][ T2846] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 99.713228][ T2846] ? ip6_finish_output2+0x109a/0x25c0 [ 99.718615][ T2846] ? __kasan_check_read+0x11/0x20 [ 99.723644][ T2846] ? mark_lock+0xc2/0x1220 [ 99.728145][ T2846] ? mark_held_locks+0xa4/0xf0 [ 99.732983][ T2846] dev_queue_xmit+0x18/0x20 [ 99.737541][ T2846] ? dev_queue_xmit+0x18/0x20 [ 99.742221][ T2846] neigh_resolve_output+0x5c4/0x990 [ 99.747557][ T2846] ip6_finish_output2+0x109a/0x25c0 [ 99.752773][ T2846] ? ip6_frag_next+0xb20/0xb20 [ 99.757537][ T2846] ? lock_downgrade+0x920/0x920 [ 99.762402][ T2846] ? __kasan_check_read+0x11/0x20 [ 99.767875][ T2846] __ip6_finish_output+0x444/0xaa0 [ 99.772992][ T2846] ? __ip6_finish_output+0x444/0xaa0 [ 99.778461][ T2846] ip6_finish_output+0x38/0x1f0 [ 99.783318][ T2846] ip6_output+0x25e/0x880 [ 99.787713][ T2846] ? ip6_finish_output+0x1f0/0x1f0 [ 99.792834][ T2846] ? __ip6_finish_output+0xaa0/0xaa0 [ 99.798220][ T2846] ndisc_send_skb+0xf1f/0x1490 [ 99.803339][ T2846] ? nf_hook.constprop.0+0x560/0x560 [ 99.808645][ T2846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.814890][ T2846] ? skb_set_owner_w+0x265/0x410 [ 99.820014][ T2846] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 99.825914][ T2846] ndisc_send_ns+0x3a9/0x850 [ 99.830506][ T2846] ? mark_held_locks+0xa4/0xf0 [ 99.835280][ T2846] ? ndisc_netdev_event+0x5e0/0x5e0 [ 99.841220][ T2846] ? lockdep_hardirqs_on+0x421/0x5e0 [ 99.846668][ T2846] ? addrconf_dad_work+0xb2c/0x11d0 [ 99.851920][ T2846] ? trace_hardirqs_on+0x67/0x240 [ 99.856951][ T2846] ? addrconf_dad_work+0xb2c/0x11d0 [ 99.862163][ T2846] addrconf_dad_work+0xbf3/0x11d0 [ 99.867288][ T2846] ? addrconf_dad_completed+0xbb0/0xbb0 [ 99.873078][ T2846] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 99.879195][ T2846] ? trace_hardirqs_on+0x67/0x240 [ 99.884274][ T2846] process_one_work+0xa05/0x17a0 [ 99.889273][ T2846] ? mark_held_locks+0xf0/0xf0 [ 99.894071][ T2846] ? pwq_dec_nr_in_flight+0x320/0x320 [ 99.899591][ T2846] ? lock_acquire+0x190/0x410 [ 99.904454][ T2846] worker_thread+0x98/0xe40 [ 99.909078][ T2846] kthread+0x361/0x430 [ 99.913156][ T2846] ? process_one_work+0x17a0/0x17a0 [ 99.918354][ T2846] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 99.924168][ T2846] ret_from_fork+0x24/0x30 [ 99.928772][ T2846] [ 99.931253][ T2846] Allocated by task 9778: [ 99.935933][ T2846] save_stack+0x23/0x90 [ 99.940129][ T2846] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 99.946807][ T2846] kasan_kmalloc+0x9/0x10 [ 99.951283][ T2846] __kmalloc_node+0x4e/0x70 [ 99.955988][ T2846] kvmalloc_node+0x68/0x100 [ 99.960649][ T2846] alloc_netdev_mqs+0x98/0xe40 [ 99.965590][ T2846] rtnl_create_link+0x22d/0xaf0 [ 99.970461][ T2846] __rtnl_newlink+0xf9f/0x1790 [ 99.975301][ T2846] rtnl_newlink+0x69/0xa0 [ 99.979648][ T2846] rtnetlink_rcv_msg+0x45e/0xaf0 [ 99.984724][ T2846] netlink_rcv_skb+0x177/0x450 [ 99.989487][ T2846] rtnetlink_rcv+0x1d/0x30 [ 99.993904][ T2846] netlink_unicast+0x59e/0x7e0 [ 99.999702][ T2846] netlink_sendmsg+0x91c/0xea0 [ 100.004539][ T2846] sock_sendmsg+0xd7/0x130 [ 100.008955][ T2846] __sys_sendto+0x262/0x380 [ 100.013755][ T2846] __x64_sys_sendto+0xe1/0x1a0 [ 100.018687][ T2846] do_syscall_64+0xfa/0x790 [ 100.023718][ T2846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.030380][ T2846] [ 100.033324][ T2846] Freed by task 9778: [ 100.037315][ T2846] save_stack+0x23/0x90 [ 100.041603][ T2846] __kasan_slab_free+0x102/0x150 [ 100.046866][ T2846] kasan_slab_free+0xe/0x10 [ 100.051394][ T2846] kfree+0x10a/0x2c0 [ 100.055361][ T2846] __netdev_name_node_alt_destroy+0x1ff/0x2a0 [ 100.061537][ T2846] netdev_name_node_alt_destroy+0x57/0x80 [ 100.067268][ T2846] rtnl_linkprop.isra.0+0x575/0x6f0 [ 100.072739][ T2846] rtnl_dellinkprop+0x46/0x60 [ 100.077568][ T2846] rtnetlink_rcv_msg+0x45e/0xaf0 [ 100.082746][ T2846] netlink_rcv_skb+0x177/0x450 [ 100.087516][ T2846] rtnetlink_rcv+0x1d/0x30 [ 100.091934][ T2846] netlink_unicast+0x59e/0x7e0 [ 100.096701][ T2846] netlink_sendmsg+0x91c/0xea0 [ 100.101526][ T2846] sock_sendmsg+0xd7/0x130 [ 100.106094][ T2846] ____sys_sendmsg+0x753/0x880 [ 100.110975][ T2846] ___sys_sendmsg+0x100/0x170 [ 100.115879][ T2846] __sys_sendmsg+0x105/0x1d0 [ 100.120804][ T2846] __x64_sys_sendmsg+0x78/0xb0 [ 100.125743][ T2846] do_syscall_64+0xfa/0x790 [ 100.130254][ T2846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.136832][ T2846] [ 100.139170][ T2846] The buggy address belongs to the object at ffff8880a61d8000 [ 100.139170][ T2846] which belongs to the cache kmalloc-4k of size 4096 [ 100.153776][ T2846] The buggy address is located 540 bytes inside of [ 100.153776][ T2846] 4096-byte region [ffff8880a61d8000, ffff8880a61d9000) [ 100.167303][ T2846] The buggy address belongs to the page: [ 100.173238][ T2846] page:ffffea0002987600 refcount:1 mapcount:0 mapping:ffff8880aa402000 index:0x0 compound_mapcount: 0 [ 100.184177][ T2846] flags: 0xfffe0000010200(slab|head) [ 100.189508][ T2846] raw: 00fffe0000010200 ffffea00029c7808 ffffea00029e2788 ffff8880aa402000 [ 100.198552][ T2846] raw: 0000000000000000 ffff8880a61d8000 0000000100000001 0000000000000000 [ 100.207220][ T2846] page dumped because: kasan: bad access detected [ 100.213625][ T2846] [ 100.215950][ T2846] Memory state around the buggy address: [ 100.221578][ T2846] ffff8880a61d8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.229974][ T2846] ffff8880a61d8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.238367][ T2846] >ffff8880a61d8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.247198][ T2846] ^ [ 100.252627][ T2846] ffff8880a61d8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.260697][ T2846] ffff8880a61d8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.268754][ T2846] ================================================================== [ 100.277455][ T2846] Disabling lock debugging due to kernel taint [ 100.283876][ T2846] Kernel panic - not syncing: panic_on_warn set ... [ 100.290568][ T2846] CPU: 0 PID: 2846 Comm: kworker/0:6 Tainted: G B 5.5.0-syzkaller #0 [ 100.300028][ T2846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.310238][ T2846] Workqueue: ipv6_addrconf addrconf_dad_work [ 100.317119][ T2846] Call Trace: [ 100.320503][ T2846] dump_stack+0x197/0x210 [ 100.324851][ T2846] panic+0x2e3/0x75c [ 100.328872][ T2846] ? add_taint.cold+0x16/0x16 [ 100.333550][ T2846] ? trace_hardirqs_on+0x5e/0x240 [ 100.338569][ T2846] ? trace_hardirqs_on+0x5e/0x240 [ 100.343700][ T2846] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 100.349509][ T2846] end_report+0x47/0x4f [ 100.353775][ T2846] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 100.359624][ T2846] __kasan_report.cold+0xe/0x32 [ 100.364477][ T2846] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 100.370282][ T2846] kasan_report+0x12/0x20 [ 100.374610][ T2846] __asan_report_load4_noabort+0x14/0x20 [ 100.380521][ T2846] l3mdev_master_ifindex_rcu+0x132/0x150 [ 100.387116][ T2846] ipv6_dev_get_saddr+0x7b8/0xc50 [ 100.392562][ T2846] ? inet6_dump_ifaddr+0x30/0x30 [ 100.397885][ T2846] ? mark_held_locks+0xf0/0xf0 [ 100.402714][ T2846] ? ip6_dst_lookup_tail+0x170/0x1f20 [ 100.408094][ T2846] ? __kasan_check_read+0x11/0x20 [ 100.413430][ T2846] ip6_dst_lookup_tail+0x1218/0x1f20 [ 100.418728][ T2846] ? ip6_append_data+0x330/0x330 [ 100.423700][ T2846] ? __kasan_check_read+0x11/0x20 [ 100.428778][ T2846] ? __lock_acquire+0x8a0/0x4a00 [ 100.433909][ T2846] ? unwind_next_frame.part.0+0x1a9/0xa20 [ 100.439623][ T2846] ? unwind_dump+0x100/0x100 [ 100.444211][ T2846] ? __dev_queue_xmit+0xbb5/0x35c0 [ 100.449358][ T2846] ? dst_cache_per_cpu_get.isra.0+0x232/0x4b0 [ 100.455427][ T2846] ip6_dst_lookup_flow+0x8c/0x1d0 [ 100.460463][ T2846] ? ip6_dst_lookup+0x70/0x70 [ 100.465224][ T2846] ? ip6_dst_lookup+0x70/0x70 [ 100.469897][ T2846] geneve_get_v6_dst+0x3e1/0x880 [ 100.474841][ T2846] geneve_xmit+0x2b4/0x30f0 [ 100.479427][ T2846] ? __kasan_check_read+0x11/0x20 [ 100.484575][ T2846] ? geneve_gro_receive+0xa80/0xa80 [ 100.489925][ T2846] ? skb_network_protocol+0xf6/0x4a0 [ 100.495262][ T2846] ? __debug_object_init+0x4e6/0xee0 [ 100.500896][ T2846] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 100.506436][ T2846] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 100.512413][ T2846] ? validate_xmit_xfrm+0x425/0xf40 [ 100.517797][ T2846] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 100.524084][ T2846] dev_hard_start_xmit+0x1a3/0x9b0 [ 100.529204][ T2846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.535498][ T2846] __dev_queue_xmit+0x2b05/0x35c0 [ 100.540534][ T2846] ? __kasan_check_read+0x11/0x20 [ 100.545579][ T2846] ? __lock_acquire+0x16f2/0x4a00 [ 100.550619][ T2846] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 100.556084][ T2846] ? ip6_finish_output2+0x109a/0x25c0 [ 100.561804][ T2846] ? __kasan_check_read+0x11/0x20 [ 100.566901][ T2846] ? mark_lock+0xc2/0x1220 [ 100.571937][ T2846] ? mark_held_locks+0xa4/0xf0 [ 100.576793][ T2846] dev_queue_xmit+0x18/0x20 [ 100.581321][ T2846] ? dev_queue_xmit+0x18/0x20 [ 100.586655][ T2846] neigh_resolve_output+0x5c4/0x990 [ 100.592047][ T2846] ip6_finish_output2+0x109a/0x25c0 [ 100.598544][ T2846] ? ip6_frag_next+0xb20/0xb20 [ 100.603349][ T2846] ? lock_downgrade+0x920/0x920 [ 100.608438][ T2846] ? __kasan_check_read+0x11/0x20 [ 100.613487][ T2846] __ip6_finish_output+0x444/0xaa0 [ 100.619032][ T2846] ? __ip6_finish_output+0x444/0xaa0 [ 100.624890][ T2846] ip6_finish_output+0x38/0x1f0 [ 100.630222][ T2846] ip6_output+0x25e/0x880 [ 100.634569][ T2846] ? ip6_finish_output+0x1f0/0x1f0 [ 100.639818][ T2846] ? __ip6_finish_output+0xaa0/0xaa0 [ 100.645163][ T2846] ndisc_send_skb+0xf1f/0x1490 [ 100.650054][ T2846] ? nf_hook.constprop.0+0x560/0x560 [ 100.655592][ T2846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.661898][ T2846] ? skb_set_owner_w+0x265/0x410 [ 100.667511][ T2846] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 100.673260][ T2846] ndisc_send_ns+0x3a9/0x850 [ 100.677981][ T2846] ? mark_held_locks+0xa4/0xf0 [ 100.683128][ T2846] ? ndisc_netdev_event+0x5e0/0x5e0 [ 100.689451][ T2846] ? lockdep_hardirqs_on+0x421/0x5e0 [ 100.694918][ T2846] ? addrconf_dad_work+0xb2c/0x11d0 [ 100.700435][ T2846] ? trace_hardirqs_on+0x67/0x240 [ 100.705473][ T2846] ? addrconf_dad_work+0xb2c/0x11d0 [ 100.710907][ T2846] addrconf_dad_work+0xbf3/0x11d0 [ 100.716089][ T2846] ? addrconf_dad_completed+0xbb0/0xbb0 [ 100.721651][ T2846] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 100.727899][ T2846] ? trace_hardirqs_on+0x67/0x240 [ 100.733068][ T2846] process_one_work+0xa05/0x17a0 [ 100.738160][ T2846] ? mark_held_locks+0xf0/0xf0 [ 100.743097][ T2846] ? pwq_dec_nr_in_flight+0x320/0x320 [ 100.748793][ T2846] ? lock_acquire+0x190/0x410 [ 100.753530][ T2846] worker_thread+0x98/0xe40 [ 100.758038][ T2846] kthread+0x361/0x430 [ 100.762300][ T2846] ? process_one_work+0x17a0/0x17a0 [ 100.767684][ T2846] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 100.773877][ T2846] ret_from_fork+0x24/0x30 [ 100.779967][ T2846] Kernel Offset: disabled [ 100.784529][ T2846] Rebooting in 86400 seconds..