[ 40.580916] IPVS: ftp: loaded support on port[0] = 21 [ 41.718833] can: request_module (can-proto-0) failed. [ 41.728583] can: request_module (can-proto-0) failed. [ 41.737108] can: request_module (can-proto-0) failed. [ 41.892515] audit: type=1400 audit(1578832538.280:38): avc: denied { create } for pid=6839 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.918339] audit: type=1400 audit(1578832538.280:39): avc: denied { create } for pid=6839 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.942765] audit: type=1400 audit(1578832538.280:40): avc: denied { create } for pid=6839 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 42.099754] random: sshd: uninitialized urandom read (32 bytes read) [ 42.913770] random: sshd: uninitialized urandom read (32 bytes read) [ 43.117213] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. 2020/01/12 12:35:45 parsed 1 programs 2020/01/12 12:35:45 executed programs: 0 [ 49.047410] IPVS: ftp: loaded support on port[0] = 21 [ 49.804937] chnl_net:caif_netlink_parms(): no params data found [ 49.833359] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.839886] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.846871] device bridge_slave_0 entered promiscuous mode [ 49.854175] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.860656] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.861566] IPVS: ftp: loaded support on port[0] = 21 [ 49.872905] device bridge_slave_1 entered promiscuous mode [ 49.894678] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.906993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.927425] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.934658] team0: Port device team_slave_0 added [ 49.943237] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.950608] team0: Port device team_slave_1 added [ 49.957761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.966855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.979467] IPVS: ftp: loaded support on port[0] = 21 [ 50.041780] device hsr_slave_0 entered promiscuous mode [ 50.080249] device hsr_slave_1 entered promiscuous mode [ 50.123590] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.131006] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.162109] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.168652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.175547] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.181903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.222010] IPVS: ftp: loaded support on port[0] = 21 [ 50.238620] chnl_net:caif_netlink_parms(): no params data found [ 50.337122] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.343525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.352573] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.358928] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.366035] device bridge_slave_0 entered promiscuous mode [ 50.375998] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.383109] chnl_net:caif_netlink_parms(): no params data found [ 50.392029] IPVS: ftp: loaded support on port[0] = 21 [ 50.398856] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.405640] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.412967] device bridge_slave_1 entered promiscuous mode [ 50.429802] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.436215] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.456736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.464591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.473242] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.502878] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.510955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.518553] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.524906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.554987] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.564093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.571980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.579354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.606780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.618087] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.626478] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.633453] device bridge_slave_0 entered promiscuous mode [ 50.669270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.683737] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.690953] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.697841] device bridge_slave_1 entered promiscuous mode [ 50.711721] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.718734] team0: Port device team_slave_0 added [ 50.725015] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.732314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.748391] IPVS: ftp: loaded support on port[0] = 21 [ 50.761327] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.769158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.776312] team0: Port device team_slave_1 added [ 50.782455] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.789936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.797984] chnl_net:caif_netlink_parms(): no params data found [ 50.815980] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.839798] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.847264] team0: Port device team_slave_0 added [ 50.853510] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 50.887292] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.894666] team0: Port device team_slave_1 added [ 50.900657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.909289] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.938716] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.945360] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.952771] device bridge_slave_0 entered promiscuous mode [ 50.992789] device hsr_slave_0 entered promiscuous mode [ 51.040290] device hsr_slave_1 entered promiscuous mode [ 51.100701] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.107807] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.164847] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.171473] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.178241] device bridge_slave_1 entered promiscuous mode [ 51.191011] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 51.261996] device hsr_slave_0 entered promiscuous mode [ 51.300255] device hsr_slave_1 entered promiscuous mode [ 51.342962] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.355194] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.363138] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.379935] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.388329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.395280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.404539] chnl_net:caif_netlink_parms(): no params data found [ 51.418179] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.425917] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.453027] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.460551] team0: Port device team_slave_0 added [ 51.481095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.487708] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.498664] team0: Port device team_slave_1 added [ 51.504140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.571966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.588465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.596682] chnl_net:caif_netlink_parms(): no params data found [ 51.611570] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.618006] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.625394] device bridge_slave_0 entered promiscuous mode [ 51.632709] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.639048] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.646223] device bridge_slave_1 entered promiscuous mode [ 51.694771] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.742381] device hsr_slave_0 entered promiscuous mode [ 51.760299] device hsr_slave_1 entered promiscuous mode [ 51.828589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.842331] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 51.857594] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.865301] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.876005] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.883215] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.895034] device bridge_slave_0 entered promiscuous mode [ 51.921124] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 51.934687] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.941665] ================================================================== [ 51.941711] BUG: KASAN: use-after-free in __alloc_skb+0x308/0x500 [ 51.941715] Write of size 36 at addr ffff88819acbd000 by task syz-executor.5/6940 [ 51.941717] [ 51.941725] CPU: 0 PID: 6940 Comm: syz-executor.5 Not tainted 4.14.164-syzkaller #0 [ 51.941728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.941731] Call Trace: [ 51.941734] [ 51.941742] dump_stack+0xf7/0x13b [ 51.941748] ? __alloc_skb+0x308/0x500 [ 51.941757] print_address_description.cold.7+0x9/0x1c9 [ 51.941762] ? __alloc_skb+0x308/0x500 [ 51.941768] kasan_report.cold.8+0x11a/0x2d3 [ 51.941776] check_memory_region+0x13e/0x1b0 [ 51.941782] memset+0x23/0x40 [ 51.941788] __alloc_skb+0x308/0x500 [ 51.941794] ? skb_trim+0x160/0x160 [ 51.941802] ? trace_hardirqs_on+0x10/0x10 [ 51.941808] ? trace_hardirqs_off+0x10/0x10 [ 51.941817] alloc_skb_with_frags+0x75/0x490 [ 51.941829] sock_alloc_send_pskb+0x53a/0x710 [ 51.941841] ? sock_wmalloc+0xe0/0xe0 [ 51.941845] ? trace_hardirqs_off+0x10/0x10 [ 51.941857] sock_alloc_send_skb+0x13/0x20 [ 51.941864] mld_newpack+0x1c5/0x8d0 [ 51.941873] ? ip6_mc_hdr.isra.24.constprop.42+0x630/0x630 [ 51.941883] ? trace_hardirqs_on+0x10/0x10 [ 51.941890] ? trace_hardirqs_off+0x10/0x10 [ 51.941898] add_grhead.isra.26+0x27b/0x380 [ 51.941905] add_grec+0xb1e/0xdc0 [ 51.941918] ? mld_sendpack+0xc60/0xc60 [ 51.941924] ? trace_hardirqs_off+0x10/0x10 [ 51.941934] mld_ifc_timer_expire+0x2f7/0x720 [ 51.941948] call_timer_fn+0x142/0x570 [ 51.941954] ? mld_dad_timer_expire+0x140/0x140 [ 51.941960] ? __next_timer_interrupt+0x100/0x100 [ 51.941968] ? trace_hardirqs_on_caller+0x19e/0x580 [ 51.941974] ? mld_dad_timer_expire+0x140/0x140 [ 51.941979] ? mld_dad_timer_expire+0x140/0x140 [ 51.941986] run_timer_softirq+0xc99/0x1210 [ 51.941995] ? add_timer+0xab0/0xab0 [ 51.941999] ? __lock_is_held+0xb5/0x140 [ 51.942014] __do_softirq+0x246/0x9b0 [ 51.942028] irq_exit+0x15f/0x1a0 [ 51.942034] smp_apic_timer_interrupt+0x149/0x5d0 [ 51.942041] apic_timer_interrupt+0x96/0xa0 [ 51.942044] [ 51.942050] RIP: 0010:console_unlock+0x90d/0xe30 [ 51.942053] RSP: 0018:ffff8880820ced30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 51.942060] RAX: 1ffffffff0fe2d31 RBX: 0000000000000200 RCX: 1ffff11010553586 [ 51.942064] RDX: 0000000000000000 RSI: ffff888082a9ac10 RDI: 0000000000000282 [ 51.942067] RBP: ffff8880820ceda8 R08: ffff888082a9ac30 R09: 0000000000000000 [ 51.942070] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000000 [ 51.942074] R13: 0000000000000000 R14: ffffffff8859e740 R15: ffffffff8859e710 [ 51.942089] ? vprintk_emit+0x1ab/0x4e0 [ 51.942099] vprintk_emit+0x1b4/0x4e0 [ 51.942109] vprintk_default+0x1a/0x20 [ 51.942114] vprintk_func+0x49/0x12c [ 51.942120] printk+0x91/0xab [ 51.942126] ? show_regs_print_info+0x5d/0x5d [ 51.942133] ? trace_hardirqs_on_caller+0x40c/0x580 [ 51.942138] ? addrconf_notify+0x11a/0x1b10 [ 51.942143] ? trace_hardirqs_on+0xd/0x10 [ 51.942150] addrconf_notify+0x174/0x1b10 [ 51.942161] ? inet6_ifinfo_notify+0x100/0x100 [ 51.942171] ? team_port_get_rtnl.isra.33+0x84/0xd0 [ 51.942178] ? mirred_device_event+0x37/0x190 [ 51.942187] notifier_call_chain+0xd6/0x150 [ 51.942197] raw_notifier_call_chain+0x11/0x20 [ 51.942203] call_netdevice_notifiers_info+0x4b/0x60 [ 51.942210] dev_open+0xd9/0xf0 [ 51.942215] ? __dev_open+0x290/0x290 [ 51.942223] ? memcpy+0x45/0x50 [ 51.942229] team_add_slave+0x982/0x1890 [ 51.942240] ? team_nl_cmd_options_get+0x2f0/0x2f0 [ 51.942245] ? trace_hardirqs_on_caller+0x40c/0x580 [ 51.942256] do_set_master+0x163/0x1f0 [ 51.942263] do_setlink+0x9dd/0x2c50 [ 51.942269] ? __lock_acquire+0x6a4/0x4500 [ 51.942273] ? trace_hardirqs_off+0x10/0x10 [ 51.942282] ? rtnl_register+0x20/0x20 [ 51.942287] ? trace_hardirqs_on+0x10/0x10 [ 51.942296] ? trace_hardirqs_on+0x10/0x10 [ 51.942302] ? trace_hardirqs_off+0x10/0x10 [ 51.942310] ? __lock_acquire+0x6a4/0x4500 [ 51.942316] ? trace_hardirqs_off+0x10/0x10 [ 51.942322] ? __lock_is_held+0xb5/0x140 [ 51.942332] ? trace_hardirqs_off+0x10/0x10 [ 51.942339] ? __lock_acquire+0x6a4/0x4500 [ 51.942358] rtnl_newlink+0xe0c/0x1390 [ 51.942373] ? rtnl_link_unregister+0x270/0x270 [ 51.942378] ? find_held_lock+0x36/0x1d0 [ 51.942387] ? find_held_lock+0x36/0x1d0 [ 51.942399] ? __mutex_lock+0x8b7/0x14c0 [ 51.942405] ? lock_downgrade+0x7f0/0x7f0 [ 51.942415] ? do_raw_spin_unlock+0x16a/0x250 [ 51.942448] rtnetlink_rcv_msg+0x34c/0x9e0 [ 51.942456] ? rtnl_bridge_getlink+0x760/0x760 [ 51.942463] ? find_held_lock+0x36/0x1d0 [ 51.942475] netlink_rcv_skb+0x133/0x370 [ 51.942482] ? rtnl_bridge_getlink+0x760/0x760 [ 51.942488] ? netlink_ack+0xa00/0xa00 [ 51.942497] ? netlink_deliver_tap+0x8e/0x920 [ 51.942506] rtnetlink_rcv+0x10/0x20 [ 51.942512] netlink_unicast+0x40b/0x600 [ 51.942521] ? netlink_attachskb+0x6d0/0x6d0 [ 51.942533] netlink_sendmsg+0x730/0xbd0 [ 51.942542] ? netlink_unicast+0x600/0x600 [ 51.942550] ? selinux_socket_sendmsg+0x31/0x40 [ 51.942557] ? security_socket_sendmsg+0x6a/0xa0 [ 51.942563] ? netlink_unicast+0x600/0x600 [ 51.942569] sock_sendmsg+0xb5/0xf0 [ 51.942576] SYSC_sendto+0x1e3/0x2c0 [ 51.942582] ? SYSC_connect+0x2a0/0x2a0 [ 51.942589] ? finish_task_switch+0x178/0x650 [ 51.942595] ? lock_downgrade+0x7f0/0x7f0 [ 51.942601] ? _raw_spin_unlock_irq+0x27/0x80 [ 51.942608] ? trace_hardirqs_on_caller+0x40c/0x580 [ 51.942614] ? _raw_spin_unlock_irq+0x60/0x80 [ 51.942625] ? __schedule+0x788/0x1d20 [ 51.942629] ? _raw_spin_unlock_irq+0x27/0x80 [ 51.942638] ? firmware_map_remove+0x177/0x177 [ 51.942648] ? do_syscall_64+0x4c/0x5b0 [ 51.942655] ? SyS_getpeername+0x10/0x10 [ 51.942661] SyS_sendto+0x9/0x10 [ 51.942666] do_syscall_64+0x1c7/0x5b0 [ 51.942671] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.942680] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.942685] RIP: 0033:0x414603 [ 51.942688] RSP: 002b:00007fff42865318 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 51.942694] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414603 [ 51.942698] RDX: 0000000000000028 RSI: 0000000000a72250 RDI: 0000000000000003 [ 51.942701] RBP: 0000000000000000 R08: 00007fff42865320 R09: 000000000000000c [ 51.942704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.942707] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 51.942719] [ 51.942722] The buggy address belongs to the page: [ 51.942727] page:ffffea00066b2f40 count:0 mapcount:0 mapping: (null) index:0x0 [ 51.942733] flags: 0x57ffe0000000000() [ 51.942739] raw: 057ffe0000000000 0000000000000000 0000000000000000 00000000ffffffff [ 51.942745] raw: ffffea00066b2f60 ffffea00066b2f60 0000000000000000 0000000000000000 [ 51.942747] page dumped because: kasan: bad access detected [ 51.942749] [ 51.942752] Memory state around the buggy address: [ 51.942756] ffff88819acbcf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.942760] ffff88819acbcf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.942764] >ffff88819acbd000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.942767] ^ [ 51.942770] ffff88819acbd080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.942774] ffff88819acbd100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.942776] ================================================================== [ 51.942779] Disabling lock debugging due to kernel taint [ 51.942782] Kernel panic - not syncing: panic_on_warn set ... [ 51.942782] [ 51.942786] CPU: 0 PID: 6940 Comm: syz-executor.5 Tainted: G B 4.14.164-syzkaller #0 [ 51.942788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.942790] Call Trace: [ 51.942792] [ 51.942795] dump_stack+0xf7/0x13b [ 51.942799] ? __alloc_skb+0x308/0x500 [ 51.942803] panic+0x1b0/0x358 [ 51.942807] ? add_taint.cold.5+0x11/0x11 [ 51.942811] ? lock_downgrade+0x7f0/0x7f0 [ 51.942818] ? __alloc_skb+0x308/0x500 [ 51.942822] kasan_end_report+0x47/0x4f [ 51.942826] kasan_report.cold.8+0x76/0x2d3 [ 51.942831] check_memory_region+0x13e/0x1b0 [ 51.942835] memset+0x23/0x40 [ 51.942839] __alloc_skb+0x308/0x500 [ 51.942843] ? skb_trim+0x160/0x160 [ 51.942846] ? trace_hardirqs_on+0x10/0x10 [ 51.942851] ? trace_hardirqs_off+0x10/0x10 [ 51.942856] alloc_skb_with_frags+0x75/0x490 [ 51.942863] sock_alloc_send_pskb+0x53a/0x710 [ 51.942871] ? sock_wmalloc+0xe0/0xe0 [ 51.942875] ? trace_hardirqs_off+0x10/0x10 [ 51.942882] sock_alloc_send_skb+0x13/0x20 [ 51.942886] mld_newpack+0x1c5/0x8d0 [ 51.942892] ? ip6_mc_hdr.isra.24.constprop.42+0x630/0x630 [ 51.942898] ? trace_hardirqs_on+0x10/0x10 [ 51.942903] ? trace_hardirqs_off+0x10/0x10 [ 51.942908] add_grhead.isra.26+0x27b/0x380 [ 51.942914] add_grec+0xb1e/0xdc0 [ 51.942922] ? mld_sendpack+0xc60/0xc60 [ 51.942926] ? trace_hardirqs_off+0x10/0x10 [ 51.942932] mld_ifc_timer_expire+0x2f7/0x720 [ 51.942940] call_timer_fn+0x142/0x570 [ 51.942944] ? mld_dad_timer_expire+0x140/0x140 [ 51.942949] ? __next_timer_interrupt+0x100/0x100 [ 51.942954] ? trace_hardirqs_on_caller+0x19e/0x580 [ 51.942958] ? mld_dad_timer_expire+0x140/0x140 [ 51.942962] ? mld_dad_timer_expire+0x140/0x140 [ 51.942966] run_timer_softirq+0xc99/0x1210 [ 51.942972] ? add_timer+0xab0/0xab0 [ 51.942975] ? __lock_is_held+0xb5/0x140 [ 51.942983] __do_softirq+0x246/0x9b0 [ 51.942991] irq_exit+0x15f/0x1a0 [ 51.942995] smp_apic_timer_interrupt+0x149/0x5d0 [ 51.943000] apic_timer_interrupt+0x96/0xa0 [ 51.943002] [ 51.943006] RIP: 0010:console_unlock+0x90d/0xe30 [ 51.943008] RSP: 0018:ffff8880820ced30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 51.943013] RAX: 1ffffffff0fe2d31 RBX: 0000000000000200 RCX: 1ffff11010553586 [ 51.943015] RDX: 0000000000000000 RSI: ffff888082a9ac10 RDI: 0000000000000282 [ 51.943017] RBP: ffff8880820ceda8 R08: ffff888082a9ac30 R09: 0000000000000000 [ 51.943020] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000000 [ 51.943022] R13: 0000000000000000 R14: ffffffff8859e740 R15: ffffffff8859e710 [ 51.943032] ? vprintk_emit+0x1ab/0x4e0 [ 51.943038] vprintk_emit+0x1b4/0x4e0 [ 51.943044] vprintk_default+0x1a/0x20 [ 51.943047] vprintk_func+0x49/0x12c [ 51.943052] printk+0x91/0xab [ 51.943056] ? show_regs_print_info+0x5d/0x5d [ 51.943060] ? trace_hardirqs_on_caller+0x40c/0x580 [ 51.943064] ? addrconf_notify+0x11a/0x1b10 [ 51.943068] ? trace_hardirqs_on+0xd/0x10 [ 51.943073] addrconf_notify+0x174/0x1b10 [ 51.943081] ? inet6_ifinfo_notify+0x100/0x100 [ 51.943086] ? team_port_get_rtnl.isra.33+0x84/0xd0 [ 51.943090] ? mirred_device_event+0x37/0x190 [ 51.943095] notifier_call_chain+0xd6/0x150 [ 51.943102] raw_notifier_call_chain+0x11/0x20 [ 51.943106] call_netdevice_notifiers_info+0x4b/0x60 [ 51.943110] dev_open+0xd9/0xf0 [ 51.943114] ? __dev_open+0x290/0x290 [ 51.943119] ? memcpy+0x45/0x50 [ 51.943123] team_add_slave+0x982/0x1890 [ 51.943130] ? team_nl_cmd_options_get+0x2f0/0x2f0 [ 51.943134] ? trace_hardirqs_on_caller+0x40c/0x580 [ 51.943140] do_set_master+0x163/0x1f0 [ 51.943145] do_setlink+0x9dd/0x2c50 [ 51.943150] ? __lock_acquire+0x6a4/0x4500 [ 51.943153] ? trace_hardirqs_off+0x10/0x10 [ 51.943159] ? rtnl_register+0x20/0x20 [ 51.943163] ? trace_hardirqs_on+0x10/0x10 [ 51.943169] ? trace_hardirqs_on+0x10/0x10 [ 51.943173] ? trace_hardirqs_off+0x10/0x10 [ 51.943179] ? __lock_acquire+0x6a4/0x4500 [ 51.943184] ? trace_hardirqs_off+0x10/0x10 [ 51.943188] ? __lock_is_held+0xb5/0x140 [ 51.943195] ? trace_hardirqs_off+0x10/0x10 [ 51.943200] ? __lock_acquire+0x6a4/0x4500 [ 51.943208] rtnl_newlink+0xe0c/0x1390 [ 51.943217] ? rtnl_link_unregister+0x270/0x270 [ 51.943221] ? find_held_lock+0x36/0x1d0 [ 51.943227] ? find_held_lock+0x36/0x1d0 [ 51.943234] ? __mutex_lock+0x8b7/0x14c0 [ 51.943238] ? lock_downgrade+0x7f0/0x7f0 [ 51.943244] ? do_raw_spin_unlock+0x16a/0x250 [ 51.943262] rtnetlink_rcv_msg+0x34c/0x9e0 [ 51.943268] ? rtnl_bridge_getlink+0x760/0x760 [ 51.943273] ? find_held_lock+0x36/0x1d0 [ 51.943280] netlink_rcv_skb+0x133/0x370 [ 51.943284] ? rtnl_bridge_getlink+0x760/0x760 [ 51.943289] ? netlink_ack+0xa00/0xa00 [ 51.943294] ? netlink_deliver_tap+0x8e/0x920 [ 51.943300] rtnetlink_rcv+0x10/0x20 [ 51.943304] netlink_unicast+0x40b/0x600 [ 51.943310] ? netlink_attachskb+0x6d0/0x6d0 [ 51.943318] netlink_sendmsg+0x730/0xbd0 [ 51.943324] ? netlink_unicast+0x600/0x600 [ 51.943328] ? selinux_socket_sendmsg+0x31/0x40 [ 51.943332] ? security_socket_sendmsg+0x6a/0xa0 [ 51.943336] ? netlink_unicast+0x600/0x600 [ 51.943346] sock_sendmsg+0xb5/0xf0 [ 51.943351] SYSC_sendto+0x1e3/0x2c0 [ 51.943356] ? SYSC_connect+0x2a0/0x2a0 [ 51.943360] ? finish_task_switch+0x178/0x650 [ 51.943364] ? lock_downgrade+0x7f0/0x7f0 [ 51.943368] ? _raw_spin_unlock_irq+0x27/0x80 [ 51.943373] ? trace_hardirqs_on_caller+0x40c/0x580 [ 51.943377] ? _raw_spin_unlock_irq+0x60/0x80 [ 51.943384] ? __schedule+0x788/0x1d20 [ 51.943387] ? _raw_spin_unlock_irq+0x27/0x80 [ 51.943392] ? firmware_map_remove+0x177/0x177 [ 51.943398] ? do_syscall_64+0x4c/0x5b0 [ 51.943403] ? SyS_getpeername+0x10/0x10 [ 51.943407] SyS_sendto+0x9/0x10 [ 51.943411] do_syscall_64+0x1c7/0x5b0 [ 51.943415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.943420] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.943423] RIP: 0033:0x414603 [ 51.943425] RSP: 002b:00007fff42865318 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 51.943430] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414603 [ 51.943432] RDX: 0000000000000028 RSI: 0000000000a72250 RDI: 0000000000000003 [ 51.943434] RBP: 0000000000000000 R08: 00007fff42865320 R09: 000000000000000c [ 51.943436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.943438] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 51.944876] Kernel Offset: disabled [ 53.275358] Rebooting in 86400 seconds..