IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready device veth1_macvtap entered promiscuous mode ------------[ cut here ]------------ device veth0_macvtap entered promiscuous mode kernel BUG at include/linux/skbuff.h:2149! invalid opcode: 0000 [#1] PREEMPT SMP KASAN IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready Modules linked in: CPU: 0 PID: 9630 Comm: syz-executor.4 Not tainted 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 device veth1_vlan entered promiscuous mode task: ffff88809c1dc480 task.stack: ffff88809a1f8000 RIP: 0010:__skb_pull include/linux/skbuff.h:2149 [inline] RIP: 0010:skb_pull_inline include/linux/skbuff.h:2155 [inline] RIP: 0010:skb_pull net/core/skbuff.c:1744 [inline] RIP: 0010:skb_pull+0xb9/0xf0 net/core/skbuff.c:1742 RSP: 0018:ffff88809a1ff2f8 EFLAGS: 00010287 RAX: 0000000000000fde RBX: ffff88809aa02e80 RCX: 0000000000000000 RDX: 0000000000000007 RSI: 0000000000000018 RDI: ffff88809aa02f04 RBP: ffff88809a1ff308 R08: ffff88809aa02f58 R09: ffff88809aa02f50 R10: ffff8880aab41694 R11: ffff88809c1dc480 R12: ffff8880aab40b40 R13: 0000000000000080 R14: ffff88809b706820 R15: 0000000000000000 FS: 00007f08d7ad8700(0000) GS:ffff8880ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffffbf9f88 CR3: 000000009f256000 CR4: 00000000001406f0 IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ipgre_xmit+0x24a/0x760 net/ipv4/ip_gre.c:658 __netdev_start_xmit include/linux/netdevice.h:4051 [inline] netdev_start_xmit include/linux/netdevice.h:4060 [inline] xmit_one net/core/dev.c:3005 [inline] dev_hard_start_xmit+0x15e/0x780 net/core/dev.c:3021 __dev_queue_xmit+0x1d8b/0x25b0 net/core/dev.c:3521 IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready dev_queue_xmit+0xb/0x10 net/core/dev.c:3554 IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready packet_snd.isra.30+0x9b6/0x2820 net/packet/af_packet.c:3024 IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready device veth0_macvtap entered promiscuous mode packet_sendmsg+0x1081/0x2c10 net/packet/af_packet.c:3049 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 kernel_sendmsg+0x26/0x30 net/socket.c:664 sock_no_sendpage+0xf7/0x130 net/core/sock.c:2595 IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready kernel_sendpage+0x60/0xd0 net/socket.c:3407 sock_sendpage+0x6d/0xd0 net/socket.c:871 pipe_to_sendpage+0x206/0x420 fs/splice.c:451 device veth1_macvtap entered promiscuous mode splice_from_pipe_feed fs/splice.c:502 [inline] __splice_from_pipe+0x2cb/0x720 fs/splice.c:626 splice_from_pipe+0xb5/0x110 fs/splice.c:661 IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready generic_splice_sendpage+0x10/0x20 fs/splice.c:832 do_splice_from fs/splice.c:851 [inline] do_splice fs/splice.c:1147 [inline] SYSC_splice fs/splice.c:1402 [inline] SyS_splice+0x6f1/0x1590 fs/splice.c:1382 IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465b09 RSP: 002b:00007f08d7ad8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465b09 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00000000004b069f R08: 000000000004ffe0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready R13: 00007ffed442618f R14: 00007f08d7ad8300 R15: 0000000000022000 Code: ea batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 03 80 3c 02 00 75 48 48 8b 83 d8 00 00 00 89 f6 48 01 f0 48 89 83 d8 00 00 00 48 83 c4 08 5b 5d c3 48 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 83 c4 08 31 c0 5b 5d c3 <0f> 0b 89 75 f4 e8 bd bf b6 fb 8b 75 f4 e9 66 ff ff ff 89 75 f0 RIP: __skb_pull include/linux/skbuff.h:2149 [inline] RSP: ffff88809a1ff2f8 RIP: skb_pull_inline include/linux/skbuff.h:2155 [inline] RSP: ffff88809a1ff2f8 RIP: skb_pull net/core/skbuff.c:1744 [inline] RSP: ffff88809a1ff2f8 RIP: skb_pull+0xb9/0xf0 net/core/skbuff.c:1742 RSP: ffff88809a1ff2f8 ---[ end trace 37bef3b0e1306619 ]--- batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0