[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 98.171275][ T27] audit: type=1800 audit(1581758636.874:25): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 98.202675][ T27] audit: type=1800 audit(1581758636.874:26): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 98.260157][ T27] audit: type=1800 audit(1581758636.874:27): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. syzkaller login: [ 106.720833][ T9628] IPVS: ftp: loaded support on port[0] = 21 [ 106.769307][ T9628] chnl_net:caif_netlink_parms(): no params data found [ 106.804412][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.811884][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.820086][ T9628] device bridge_slave_0 entered promiscuous mode [ 106.828920][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.836290][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.844013][ T9628] device bridge_slave_1 entered promiscuous mode [ 106.860361][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.870955][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.889139][ T9628] team0: Port device team_slave_0 added [ 106.896215][ T9628] team0: Port device team_slave_1 added [ 106.909944][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.916954][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.942974][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.956173][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.963239][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.989311][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.074368][ T9628] device hsr_slave_0 entered promiscuous mode [ 107.143249][ T9628] device hsr_slave_1 entered promiscuous mode [ 107.269872][ T9628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.325794][ T9628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.394700][ T9628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.465677][ T9628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.515743][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.522917][ T9628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.530435][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.537577][ T9628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.577305][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.590050][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.599631][ T2763] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.607910][ T2763] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.616021][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 107.628430][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.639290][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.647881][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.654949][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.668516][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.676995][ T2767] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.684080][ T2767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.704280][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.713438][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.727327][ T9628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.738110][ T9628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.750356][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.758858][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.767367][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.776818][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.793354][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.800752][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.812472][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.831242][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.841215][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.862559][ T9628] device veth0_vlan entered promiscuous mode [ 107.872665][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.881124][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.890190][ T9628] device veth1_vlan entered promiscuous mode [ 107.898387][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.906239][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.914326][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.935418][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.944628][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.953744][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.964401][ T9628] device veth0_macvtap entered promiscuous mode [ 107.974029][ T9628] device veth1_macvtap entered promiscuous mode [ 107.989789][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.997237][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.006797][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.014737][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.023281][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.035229][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.044195][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.052767][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 108.242802][ T2767] ================================================================== [ 108.250991][ T2767] BUG: KASAN: use-after-free in l3mdev_master_ifindex_rcu+0x132/0x150 [ 108.259150][ T2767] Read of size 4 at addr ffff8880943ba21c by task kworker/1:21/2767 [ 108.267097][ T2767] [ 108.269408][ T2767] CPU: 1 PID: 2767 Comm: kworker/1:21 Not tainted 5.6.0-rc1-syzkaller #0 [ 108.277795][ T2767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.287923][ T2767] Workqueue: ipv6_addrconf addrconf_dad_work [ 108.293888][ T2767] Call Trace: [ 108.298031][ T2767] dump_stack+0x197/0x210 [ 108.302346][ T2767] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 108.308146][ T2767] print_address_description.constprop.0.cold+0xd4/0x30b [ 108.315174][ T2767] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 108.320960][ T2767] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 108.326746][ T2767] __kasan_report.cold+0x1b/0x32 [ 108.331688][ T2767] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 108.337522][ T2767] kasan_report+0x12/0x20 [ 108.341835][ T2767] __asan_report_load4_noabort+0x14/0x20 [ 108.347463][ T2767] l3mdev_master_ifindex_rcu+0x132/0x150 [ 108.353434][ T2767] ipv6_dev_get_saddr+0x7b8/0xc50 [ 108.358579][ T2767] ? inet6_dump_ifaddr+0x30/0x30 [ 108.363501][ T2767] ? mark_held_locks+0xf0/0xf0 [ 108.368259][ T2767] ? ip6_dst_lookup_tail+0x170/0x1f20 [ 108.373626][ T2767] ? __kasan_check_read+0x11/0x20 [ 108.378651][ T2767] ip6_dst_lookup_tail+0x1218/0x1f20 [ 108.383926][ T2767] ? ip6_append_data+0x330/0x330 [ 108.388846][ T2767] ? __kasan_check_read+0x11/0x20 [ 108.393847][ T2767] ? __lock_acquire+0x8a0/0x4a00 [ 108.399302][ T2767] ? unwind_next_frame.part.0+0x1a9/0xa20 [ 108.405000][ T2767] ? unwind_dump+0x100/0x100 [ 108.409581][ T2767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.415802][ T2767] ? dst_cache_per_cpu_get.isra.0+0x232/0x4b0 [ 108.421865][ T2767] ip6_dst_lookup_flow+0x8c/0x1d0 [ 108.426883][ T2767] ? ip6_dst_lookup+0x70/0x70 [ 108.431552][ T2767] ? ip6_dst_lookup+0x70/0x70 [ 108.436213][ T2767] geneve_get_v6_dst+0x3e1/0x880 [ 108.441136][ T2767] geneve_xmit+0x2b4/0x30f0 [ 108.445632][ T2767] ? __kasan_check_read+0x11/0x20 [ 108.450644][ T2767] ? geneve_gro_receive+0xa80/0xa80 [ 108.455820][ T2767] ? skb_network_protocol+0xf6/0x4a0 [ 108.461082][ T2767] ? __debug_object_init+0x4e6/0xee0 [ 108.466357][ T2767] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 108.471882][ T2767] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 108.490168][ T2767] ? validate_xmit_xfrm+0x425/0xf40 [ 108.513595][ T2767] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 108.519731][ T2767] dev_hard_start_xmit+0x1a3/0x9b0 [ 108.524911][ T2767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.531134][ T2767] __dev_queue_xmit+0x2b05/0x35c0 [ 108.536139][ T2767] ? __kasan_check_read+0x11/0x20 [ 108.541142][ T2767] ? __lock_acquire+0x16f2/0x4a00 [ 108.562518][ T2767] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 108.567791][ T2767] ? ip6_finish_output2+0x109a/0x25c0 [ 108.573152][ T2767] ? __kasan_check_read+0x11/0x20 [ 108.578176][ T2767] ? mark_lock+0xc2/0x1220 [ 108.582600][ T2767] ? mark_held_locks+0xa4/0xf0 [ 108.587353][ T2767] dev_queue_xmit+0x18/0x20 [ 108.591847][ T2767] ? dev_queue_xmit+0x18/0x20 [ 108.601463][ T2767] neigh_resolve_output+0x5c4/0x990 [ 108.606658][ T2767] ip6_finish_output2+0x109a/0x25c0 [ 108.611846][ T2767] ? ip6_frag_next+0xb20/0xb20 [ 108.616588][ T2767] ? lock_downgrade+0x920/0x920 [ 108.621430][ T2767] ? __kasan_check_read+0x11/0x20 [ 108.626446][ T2767] __ip6_finish_output+0x444/0xaa0 [ 108.631758][ T2767] ? __ip6_finish_output+0x444/0xaa0 [ 108.637029][ T2767] ip6_finish_output+0x38/0x1f0 [ 108.641866][ T2767] ip6_output+0x25e/0x880 [ 108.646181][ T2767] ? ip6_finish_output+0x1f0/0x1f0 [ 108.651275][ T2767] ? __ip6_finish_output+0xaa0/0xaa0 [ 108.656655][ T2767] ndisc_send_skb+0xf1f/0x1490 [ 108.661405][ T2767] ? nf_hook.constprop.0+0x560/0x560 [ 108.666678][ T2767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.672929][ T2767] ? skb_set_owner_w+0x265/0x410 [ 108.678568][ T2767] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 108.684617][ T2767] ndisc_send_ns+0x3a9/0x850 [ 108.689184][ T2767] ? mark_held_locks+0xa4/0xf0 [ 108.693931][ T2767] ? ndisc_netdev_event+0x5e0/0x5e0 [ 108.699104][ T2767] ? lockdep_hardirqs_on+0x421/0x5e0 [ 108.704625][ T2767] ? addrconf_dad_work+0xb2c/0x11d0 [ 108.709801][ T2767] ? trace_hardirqs_on+0x67/0x240 [ 108.714819][ T2767] ? addrconf_dad_work+0xb2c/0x11d0 [ 108.720005][ T2767] addrconf_dad_work+0xbf3/0x11d0 [ 108.725017][ T2767] ? addrconf_dad_completed+0xbb0/0xbb0 [ 108.730545][ T2767] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 108.736507][ T2767] ? trace_hardirqs_on+0x67/0x240 [ 108.741517][ T2767] process_one_work+0xa05/0x17a0 [ 108.746435][ T2767] ? mark_held_locks+0xf0/0xf0 [ 108.751207][ T2767] ? pwq_dec_nr_in_flight+0x320/0x320 [ 108.756621][ T2767] ? lock_acquire+0x190/0x410 [ 108.761291][ T2767] worker_thread+0x98/0xe40 [ 108.765788][ T2767] kthread+0x361/0x430 [ 108.769837][ T2767] ? process_one_work+0x17a0/0x17a0 [ 108.775012][ T2767] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 108.780713][ T2767] ret_from_fork+0x24/0x30 [ 108.785115][ T2767] [ 108.787422][ T2767] Allocated by task 9628: [ 108.791732][ T2767] save_stack+0x23/0x90 [ 108.795865][ T2767] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 108.801474][ T2767] kasan_kmalloc+0x9/0x10 [ 108.805781][ T2767] __kmalloc_node+0x4e/0x70 [ 108.810259][ T2767] kvmalloc_node+0x68/0x100 [ 108.814738][ T2767] alloc_netdev_mqs+0x98/0xe40 [ 108.819476][ T2767] rtnl_create_link+0x22d/0xaf0 [ 108.824301][ T2767] __rtnl_newlink+0xf9f/0x1790 [ 108.829043][ T2767] rtnl_newlink+0x69/0xa0 [ 108.833350][ T2767] rtnetlink_rcv_msg+0x45e/0xaf0 [ 108.838264][ T2767] netlink_rcv_skb+0x177/0x450 [ 108.843002][ T2767] rtnetlink_rcv+0x1d/0x30 [ 108.847399][ T2767] netlink_unicast+0x59e/0x7e0 [ 108.852152][ T2767] netlink_sendmsg+0x91c/0xea0 [ 108.856890][ T2767] sock_sendmsg+0xd7/0x130 [ 108.861385][ T2767] __sys_sendto+0x262/0x380 [ 108.865867][ T2767] __x64_sys_sendto+0xe1/0x1a0 [ 108.870608][ T2767] do_syscall_64+0xfa/0x790 [ 108.875087][ T2767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 108.880965][ T2767] [ 108.883271][ T2767] Freed by task 9628: [ 108.887488][ T2767] save_stack+0x23/0x90 [ 108.891618][ T2767] __kasan_slab_free+0x102/0x150 [ 108.896531][ T2767] kasan_slab_free+0xe/0x10 [ 108.901011][ T2767] kfree+0x10a/0x2c0 [ 108.904885][ T2767] __netdev_name_node_alt_destroy+0x1ff/0x2a0 [ 108.910927][ T2767] netdev_name_node_alt_destroy+0x57/0x80 [ 108.916624][ T2767] rtnl_linkprop.isra.0+0x575/0x6f0 [ 108.921798][ T2767] rtnl_dellinkprop+0x46/0x60 [ 108.926468][ T2767] rtnetlink_rcv_msg+0x45e/0xaf0 [ 108.931407][ T2767] netlink_rcv_skb+0x177/0x450 [ 108.936203][ T2767] rtnetlink_rcv+0x1d/0x30 [ 108.940605][ T2767] netlink_unicast+0x59e/0x7e0 [ 108.945346][ T2767] netlink_sendmsg+0x91c/0xea0 [ 108.950088][ T2767] sock_sendmsg+0xd7/0x130 [ 108.954480][ T2767] ____sys_sendmsg+0x753/0x880 [ 108.959220][ T2767] ___sys_sendmsg+0x100/0x170 [ 108.963875][ T2767] __sys_sendmsg+0x105/0x1d0 [ 108.968444][ T2767] __x64_sys_sendmsg+0x78/0xb0 [ 108.973185][ T2767] do_syscall_64+0xfa/0x790 [ 108.977664][ T2767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 108.983537][ T2767] [ 108.985847][ T2767] The buggy address belongs to the object at ffff8880943ba000 [ 108.985847][ T2767] which belongs to the cache kmalloc-4k of size 4096 [ 108.999904][ T2767] The buggy address is located 540 bytes inside of [ 108.999904][ T2767] 4096-byte region [ffff8880943ba000, ffff8880943bb000) [ 109.013239][ T2767] The buggy address belongs to the page: [ 109.018854][ T2767] page:ffffea000250ee80 refcount:1 mapcount:0 mapping:ffff8880aa402000 index:0x0 compound_mapcount: 0 [ 109.029757][ T2767] flags: 0xfffe0000010200(slab|head) [ 109.035034][ T2767] raw: 00fffe0000010200 ffffea0002555988 ffffea00021aca88 ffff8880aa402000 [ 109.043599][ T2767] raw: 0000000000000000 ffff8880943ba000 0000000100000001 0000000000000000 [ 109.052155][ T2767] page dumped because: kasan: bad access detected [ 109.058553][ T2767] [ 109.060857][ T2767] Memory state around the buggy address: [ 109.066462][ T2767] ffff8880943ba100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.074499][ T2767] ffff8880943ba180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.082557][ T2767] >ffff8880943ba200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.090600][ T2767] ^ [ 109.095426][ T2767] ffff8880943ba280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.103463][ T2767] ffff8880943ba300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.111506][ T2767] ================================================================== [ 109.119545][ T2767] Disabling lock debugging due to kernel taint [ 109.125731][ T2767] Kernel panic - not syncing: panic_on_warn set ... [ 109.132361][ T2767] CPU: 1 PID: 2767 Comm: kworker/1:21 Tainted: G B 5.6.0-rc1-syzkaller #0 [ 109.142157][ T2767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.152208][ T2767] Workqueue: ipv6_addrconf addrconf_dad_work [ 109.158166][ T2767] Call Trace: [ 109.161444][ T2767] dump_stack+0x197/0x210 [ 109.165761][ T2767] panic+0x2e3/0x75c [ 109.169636][ T2767] ? add_taint.cold+0x16/0x16 [ 109.174305][ T2767] ? trace_hardirqs_on+0x5e/0x240 [ 109.179324][ T2767] ? trace_hardirqs_on+0x5e/0x240 [ 109.184350][ T2767] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 109.190144][ T2767] end_report+0x47/0x4f [ 109.194295][ T2767] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 109.200087][ T2767] __kasan_report.cold+0xe/0x32 [ 109.204932][ T2767] ? l3mdev_master_ifindex_rcu+0x132/0x150 [ 109.210723][ T2767] kasan_report+0x12/0x20 [ 109.215041][ T2767] __asan_report_load4_noabort+0x14/0x20 [ 109.220662][ T2767] l3mdev_master_ifindex_rcu+0x132/0x150 [ 109.226286][ T2767] ipv6_dev_get_saddr+0x7b8/0xc50 [ 109.231316][ T2767] ? inet6_dump_ifaddr+0x30/0x30 [ 109.236246][ T2767] ? mark_held_locks+0xf0/0xf0 [ 109.241093][ T2767] ? ip6_dst_lookup_tail+0x170/0x1f20 [ 109.246471][ T2767] ? __kasan_check_read+0x11/0x20 [ 109.251485][ T2767] ip6_dst_lookup_tail+0x1218/0x1f20 [ 109.256770][ T2767] ? ip6_append_data+0x330/0x330 [ 109.261695][ T2767] ? __kasan_check_read+0x11/0x20 [ 109.266704][ T2767] ? __lock_acquire+0x8a0/0x4a00 [ 109.271629][ T2767] ? unwind_next_frame.part.0+0x1a9/0xa20 [ 109.277335][ T2767] ? unwind_dump+0x100/0x100 [ 109.281912][ T2767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 109.288140][ T2767] ? dst_cache_per_cpu_get.isra.0+0x232/0x4b0 [ 109.294209][ T2767] ip6_dst_lookup_flow+0x8c/0x1d0 [ 109.299234][ T2767] ? ip6_dst_lookup+0x70/0x70 [ 109.303908][ T2767] ? ip6_dst_lookup+0x70/0x70 [ 109.308571][ T2767] geneve_get_v6_dst+0x3e1/0x880 [ 109.313496][ T2767] geneve_xmit+0x2b4/0x30f0 [ 109.317986][ T2767] ? __kasan_check_read+0x11/0x20 [ 109.322998][ T2767] ? geneve_gro_receive+0xa80/0xa80 [ 109.328180][ T2767] ? skb_network_protocol+0xf6/0x4a0 [ 109.333462][ T2767] ? __debug_object_init+0x4e6/0xee0 [ 109.338743][ T2767] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 109.344288][ T2767] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 109.350254][ T2767] ? validate_xmit_xfrm+0x425/0xf40 [ 109.355438][ T2767] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 109.361583][ T2767] dev_hard_start_xmit+0x1a3/0x9b0 [ 109.366791][ T2767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 109.373020][ T2767] __dev_queue_xmit+0x2b05/0x35c0 [ 109.378204][ T2767] ? __kasan_check_read+0x11/0x20 [ 109.383214][ T2767] ? __lock_acquire+0x16f2/0x4a00 [ 109.388227][ T2767] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 109.393509][ T2767] ? ip6_finish_output2+0x109a/0x25c0 [ 109.398871][ T2767] ? __kasan_check_read+0x11/0x20 [ 109.403881][ T2767] ? mark_lock+0xc2/0x1220 [ 109.408284][ T2767] ? mark_held_locks+0xa4/0xf0 [ 109.413045][ T2767] dev_queue_xmit+0x18/0x20 [ 109.417533][ T2767] ? dev_queue_xmit+0x18/0x20 [ 109.422198][ T2767] neigh_resolve_output+0x5c4/0x990 [ 109.427390][ T2767] ip6_finish_output2+0x109a/0x25c0 [ 109.432582][ T2767] ? ip6_frag_next+0xb20/0xb20 [ 109.437333][ T2767] ? lock_downgrade+0x920/0x920 [ 109.442174][ T2767] ? __kasan_check_read+0x11/0x20 [ 109.447187][ T2767] __ip6_finish_output+0x444/0xaa0 [ 109.452284][ T2767] ? __ip6_finish_output+0x444/0xaa0 [ 109.457557][ T2767] ip6_finish_output+0x38/0x1f0 [ 109.462406][ T2767] ip6_output+0x25e/0x880 [ 109.466722][ T2767] ? ip6_finish_output+0x1f0/0x1f0 [ 109.471818][ T2767] ? __ip6_finish_output+0xaa0/0xaa0 [ 109.477096][ T2767] ndisc_send_skb+0xf1f/0x1490 [ 109.481896][ T2767] ? nf_hook.constprop.0+0x560/0x560 [ 109.487189][ T2767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 109.493424][ T2767] ? skb_set_owner_w+0x265/0x410 [ 109.498355][ T2767] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 109.504062][ T2767] ndisc_send_ns+0x3a9/0x850 [ 109.508638][ T2767] ? mark_held_locks+0xa4/0xf0 [ 109.513389][ T2767] ? ndisc_netdev_event+0x5e0/0x5e0 [ 109.518570][ T2767] ? lockdep_hardirqs_on+0x421/0x5e0 [ 109.523845][ T2767] ? addrconf_dad_work+0xb2c/0x11d0 [ 109.529036][ T2767] ? trace_hardirqs_on+0x67/0x240 [ 109.534059][ T2767] ? addrconf_dad_work+0xb2c/0x11d0 [ 109.539250][ T2767] addrconf_dad_work+0xbf3/0x11d0 [ 109.544266][ T2767] ? addrconf_dad_completed+0xbb0/0xbb0 [ 109.549810][ T2767] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 109.555778][ T2767] ? trace_hardirqs_on+0x67/0x240 [ 109.560793][ T2767] process_one_work+0xa05/0x17a0 [ 109.565717][ T2767] ? mark_held_locks+0xf0/0xf0 [ 109.570471][ T2767] ? pwq_dec_nr_in_flight+0x320/0x320 [ 109.575826][ T2767] ? lock_acquire+0x190/0x410 [ 109.580496][ T2767] worker_thread+0x98/0xe40 [ 109.584994][ T2767] kthread+0x361/0x430 [ 109.589046][ T2767] ? process_one_work+0x17a0/0x17a0 [ 109.594233][ T2767] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 109.599939][ T2767] ret_from_fork+0x24/0x30 [ 109.605736][ T2767] Kernel Offset: disabled [ 109.610060][ T2767] Rebooting in 86400 seconds..