IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
list_add corruption. prev->next should be next (ffffffff8a1dca60), but was ffff8881d86fa2b0. (prev=ffff8881d5086ff0).
------------[ cut here ]------------
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
kernel BUG at lib/list_debug.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 6410 Comm: sh Not tainted 4.20.0-rc6-next-20181210+ #164
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_add_valid.cold.2+0x23/0x2a lib/list_debug.c:26
Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00
RSP: 0000:ffff8881dac06dc0 EFLAGS: 00010286
RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005
RBP: ffff8881dac06dd8 R08: ffff8881b66744c0 R09: ffffed103b585020
R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881b5e36730
R13: ffff8881b5e364c0 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0
FS:  0000000000000000(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f33c89cb2b8 CR3: 00000001d8fe6000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 neigh_alloc net/core/neighbour.c:395 [inline]
 ___neigh_create+0x14b7/0x2600 net/core/neighbour.c:553
 __neigh_create+0x30/0x40 net/core/neighbour.c:640
 ip6_finish_output2+0xa64/0x2940 net/ipv6/ip6_output.c:117
bridge0: port 2(bridge_slave_1) entered blocking state
 ip6_finish_output+0x58c/0xc60 net/ipv6/ip6_output.c:154
bridge0: port 2(bridge_slave_1) entered forwarding state
bridge0: port 1(bridge_slave_0) entered blocking state
 NF_HOOK_COND include/linux/netfilter.h:278 [inline]
 ip6_output+0x232/0x9d0 net/ipv6/ip6_output.c:171
bridge0: port 1(bridge_slave_0) entered forwarding state
IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
 dst_output include/net/dst.h:444 [inline]
 NF_HOOK include/linux/netfilter.h:289 [inline]
 mld_sendpack+0xad5/0xfa0 net/ipv6/mcast.c:1683
 mld_send_cr net/ipv6/mcast.c:1979 [inline]
 mld_ifc_timer_expire+0x447/0x8a0 net/ipv6/mcast.c:2478
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1325
 expire_timers kernel/time/timer.c:1362 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1681
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1694
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:check_memory_region+0x0/0x1b0 mm/kasan/generic.c:344
Code: 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 f2 be f8 00 00 00 48 89 e5 e8 ff e9 1c 06 5d c3 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 <48> 85 f6 0f 84 3c 01 00 00 48 b8 ff ff ff ff ff 7f ff ff 55 0f b6
RSP: 0000:ffff88818fb3f510 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 1ffff11031f67eb7 RBX: 0000000000000000 RCX: ffffffff819e2b9c
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea00076b7ef4
RBP: ffff88818fb3f518 R08: ffff8881b66744c0 R09: ffffed103b585b5f
R10: ffffed103b585b5f R11: ffff8881dac2dafb R12: ffffea00076b7ef4
R13: ffff88818fb3f658 R14: ffff88818fb3f958 R15: dffffc0000000000
 atomic_read include/generated/atomic-instrumented.h:26 [inline]
 atomic_fetch_add_unless include/generated/atomic-fallback.h:1086 [inline]
 atomic_add_unless include/generated/atomic-fallback.h:1111 [inline]
 page_ref_add_unless include/linux/page_ref.h:157 [inline]
 get_page_unless_zero include/linux/mm.h:593 [inline]
 page_cache_get_speculative include/linux/pagemap.h:186 [inline]
 filemap_map_pages+0x55c/0x1a20 mm/filemap.c:2617
 do_fault_around mm/memory.c:3386 [inline]
 do_read_fault mm/memory.c:3420 [inline]
 do_fault mm/memory.c:3551 [inline]
 handle_pte_fault mm/memory.c:3782 [inline]
 __handle_mm_fault+0x456b/0x5b70 mm/memory.c:3906
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3943
 do_user_addr_fault arch/x86/mm/fault.c:1475 [inline]
 __do_page_fault+0x5f6/0xd70 arch/x86/mm/fault.c:1541
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1572
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0033:0x7f33c8d60f84
Code: 10 4d 89 4b 18 5b 5d c3 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 08 48 8b 87 98 02 00 00 48 85 c0 74 5f 48 8b 40 08 <8b> 08 89 8f ec 02 00 00 8b 50 08 44 8b 40 04 8d 72 ff 85 d6 75 72
RSP: 002b:00007ffd9e1eea60 EFLAGS: 00010206
RAX: 00007f33c89cb2b8 RBX: 00007f33c8f764c0 RCX: 00007f33c8d6e1d7
RDX: 0000000000000000 RSI: 0000000000000010 RDI: 00007f33c8f764c0
RBP: 00007ffd9e1eebd0 R08: 0000000070000029 R09: 000000006ffffdff
R10: 000000006ffffeff R11: 0000000000000206 R12: 00007ffd9e1eecb8
R13: 000000006fffff48 R14: 00007ffd9e1ee920 R15: 00007ffd9e1ee8c0
Modules linked in:
---[ end trace 9db30673056dfebd ]---
RIP: 0010:__list_add_valid.cold.2+0x23/0x2a lib/list_debug.c:26
Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00
RSP: 0000:ffff8881dac06dc0 EFLAGS: 00010286
RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005
RBP: ffff8881dac06dd8 R08: ffff8881b66744c0 R09: ffffed103b585020
kobject: 'veth1_to_bridge' (00000000dc004f19): kobject_add_internal: parent: 'net', set: 'devices'
R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881b5e36730
R13: ffff8881b5e364c0 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0
kobject: 'veth1_to_bridge' (00000000dc004f19): kobject_uevent_env
FS:  0000000000000000(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f33c89cb2b8 CR3: 00000001d8fe6000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
kobject: 'veth1_to_bridge' (00000000dc004f19): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bridge'
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
kobject: 'queues' (00000000be4b1f9e): kobject_add_internal: parent: 'veth1_to_bridge', set: '<NULL>'