[ 409.563080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.570562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.578811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.586451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.595278] device bridge_slave_1 left promiscuous mode [ 409.601705] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.648054] device bridge_slave_0 left promiscuous mode [ 409.653912] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.710346] device veth1_macvtap left promiscuous mode [ 409.715942] device veth0_macvtap left promiscuous mode [ 409.722265] device veth1_vlan left promiscuous mode [ 409.728128] device veth0_vlan left promiscuous mode [ 409.819674] device hsr_slave_1 left promiscuous mode [ 409.859654] device hsr_slave_0 left promiscuous mode [ 409.915237] team0 (unregistering): Port device team_slave_1 removed [ 409.924741] team0 (unregistering): Port device team_slave_0 removed [ 409.936532] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 409.980751] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 410.034481] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.15.201' (ECDSA) to the list of known hosts. [ 412.101594] list_del corruption, ffff8881c7257640->next is LIST_POISON1 (dead000000000100) [ 412.103785] list_del corruption, ffff8881cdc77640->next is LIST_POISON1 (dead000000000100) [ 412.110478] ------------[ cut here ]------------ [ 412.119336] ------------[ cut here ]------------ [ 412.124130] kernel BUG at lib/list_debug.c:47! [ 412.128782] kernel BUG at lib/list_debug.c:47! [ 412.133618] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 412.143873] CPU: 0 PID: 17309 Comm: syz-executor441 Not tainted 4.19.168-syzkaller #0 [ 412.151911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.161367] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 412.167408] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 80 5f 8b 87 e8 23 32 f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 20 5f 8b 87 e8 0f 32 f8 ff <0f> 0b 48 89 de 48 c7 c7 40 60 8b 87 e8 fe 31 f8 ff 0f 0b 48 89 de [ 412.186557] RSP: 0018:ffff8881c72574d0 EFLAGS: 00010086 [ 412.192005] RAX: 000000000000004e RBX: ffff8881c7257640 RCX: 0000000000000000 [ 412.199708] RDX: 0000000000000000 RSI: ffffffff878b5c80 RDI: ffffffff8a3e3a60 [ 412.207174] RBP: ffff8881c72574e8 R08: ffffed103ecc5081 R09: ffffed103ecc5080 [ 412.214993] R10: ffffed103ecc5080 R11: ffff8881f6628407 R12: dead000000000200 [ 412.222697] R13: dead000000000100 R14: ffff8881d8a8de40 R15: ffff8881ee564300 [ 412.230521] FS: 00007f3da59a0700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 412.239127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.245017] CR2: 000000002001d06c CR3: 00000001dd6b3001 CR4: 00000000001606f0 [ 412.252559] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.260087] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.267508] Call Trace: [ 412.270133] remove_wait_queue+0x30/0x1b0 [ 412.274361] tipc_send_group_bcast+0x33a/0xa10 [ 412.279112] ? tipc_release+0xbd0/0xbd0 [ 412.283160] ? rcu_read_lock_sched_held+0x108/0x120 [ 412.288161] ? kmem_cache_free+0x25e/0x290 [ 412.292377] ? do_wait_intr_irq+0x310/0x310 [ 412.297194] ? __lock_acquire+0x764/0x47c0 [ 412.301582] ? __lock_acquire+0x764/0x47c0 [ 412.305804] __tipc_sendmsg+0x44a/0x12f0 [ 412.310010] ? print_irq_inversion_bug+0x20/0xd0 [ 412.315003] ? tipc_sendmcast+0xb10/0xb10 [ 412.319302] ? mark_held_locks+0x130/0x130 [ 412.323795] ? trace_hardirqs_on_caller+0x28/0x180 [ 412.328848] ? __might_sleep+0x95/0x190 [ 412.332817] ? mark_held_locks+0xc7/0x130 [ 412.337165] ? __local_bh_enable_ip+0x160/0x250 [ 412.342028] ? lock_sock_nested+0xc5/0x100 [ 412.346333] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 412.350916] ? __local_bh_enable_ip+0x160/0x250 [ 412.355655] ? trace_hardirqs_on+0x28/0x190 [ 412.360140] ? lock_sock_nested+0x82/0x100 [ 412.364551] ? lock_sock_nested+0x82/0x100 [ 412.368765] ? __local_bh_enable_ip+0x160/0x250 [ 412.373508] tipc_sendmsg+0x4b/0x70 [ 412.377110] ? __tipc_sendmsg+0x12f0/0x12f0 [ 412.381405] sock_sendmsg+0xac/0xf0 [ 412.385026] ___sys_sendmsg+0x28e/0x950 [ 412.389063] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 412.393927] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 412.398487] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.403313] ? trace_hardirqs_on_caller+0x28/0x180 [ 412.408309] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.413221] ? retint_kernel+0x2d/0x2d [ 412.417175] ? __might_fault+0xf1/0x1b0 [ 412.421221] ? lock_downgrade+0x860/0x860 [ 412.425372] __sys_sendmmsg+0x160/0x370 [ 412.429332] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 412.433723] ? tipc_setsockopt+0x52f/0x870 [ 412.438161] ? fput+0x18/0x120 [ 412.441345] ? do_futex+0x1930/0x1930 [ 412.445122] ? kernel_accept+0x300/0x300 [ 412.449274] ? __sys_socket+0x115/0x1d0 [ 412.453326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.458069] ? do_syscall_64+0x21/0x4e0 [ 412.462025] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.467545] __x64_sys_sendmmsg+0x98/0x100 [ 412.471851] do_syscall_64+0xd0/0x4e0 [ 412.475928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.481470] RIP: 0033:0x446a09 [ 412.484645] Code: e8 0c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.503543] RSP: 002b:00007f3da599fdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 412.511449] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446a09 [ 412.518924] RDX: 08000000000000b0 RSI: 0000000020000a40 RDI: 0000000000000004 [ 412.526483] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 412.533941] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 412.541538] R13: 00007ffff45b931f R14: 00007f3da59a09c0 R15: 000000000000002d [ 412.548994] Modules linked in: [ 412.552182] ---[ end trace b3e82dcc552d138a ]--- [ 412.552219] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 412.556965] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 412.562608] CPU: 1 PID: 17318 Comm: syz-executor441 Tainted: G D 4.19.168-syzkaller #0 [ 412.568742] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 80 5f 8b 87 e8 23 32 f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 20 5f 8b 87 e8 0f 32 f8 ff <0f> 0b 48 89 de 48 c7 c7 40 60 8b 87 e8 fe 31 f8 ff 0f 0b 48 89 de [ 412.578289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.578301] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 412.598798] RSP: 0018:ffff8881c72574d0 EFLAGS: 00010086 [ 412.608333] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 80 5f 8b 87 e8 23 32 f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 20 5f 8b 87 e8 0f 32 f8 ff <0f> 0b 48 89 de 48 c7 c7 40 60 8b 87 e8 fe 31 f8 ff 0f 0b 48 89 de [ 412.614297] RAX: 000000000000004e RBX: ffff8881c7257640 RCX: 0000000000000000 [ 412.619733] RSP: 0018:ffff8881cdc774d0 EFLAGS: 00010086 [ 412.639074] RDX: 0000000000000000 RSI: ffffffff878b5c80 RDI: ffffffff8a3e3a60 [ 412.646448] RAX: 000000000000004e RBX: ffff8881cdc77640 RCX: 0000000000000000 [ 412.651905] RBP: ffff8881c72574e8 R08: ffffed103ecc5081 R09: ffffed103ecc5080 [ 412.659357] RDX: 0000000000000000 RSI: ffffffff878b5c80 RDI: ffffffff8a3e3a60 [ 412.666736] R10: ffffed103ecc5080 R11: ffff8881f6628407 R12: dead000000000200 [ 412.674257] RBP: ffff8881cdc774e8 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 412.681513] R13: dead000000000100 R14: ffff8881d8a8de40 R15: ffff8881ee564300 [ 412.688762] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: dead000000000200 [ 412.696106] FS: 00007f3da59a0700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 412.703364] R13: dead000000000100 R14: ffff8881dfa4b240 R15: ffff8881e792c640 [ 412.710704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.719004] FS: 00007f3da59a0700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 412.726561] CR2: 000000002001d06c CR3: 00000001dd6b3001 CR4: 00000000001606f0 [ 412.732616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.740817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.748061] CR2: 00000000004ccc50 CR3: 00000001dcdde004 CR4: 00000000001606e0 [ 412.754004] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.754009] Kernel panic - not syncing: Fatal exception [ 412.761354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.789241] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.796579] Call Trace: [ 412.799150] remove_wait_queue+0x30/0x1b0 [ 412.803279] tipc_send_group_bcast+0x33a/0xa10 [ 412.807849] ? tipc_release+0xbd0/0xbd0 [ 412.812070] ? trace_hardirqs_on_caller+0x28/0x180 [ 412.817132] ? do_wait_intr_irq+0x310/0x310 [ 412.821448] ? retint_kernel+0x2d/0x2d [ 412.825406] __tipc_sendmsg+0x44a/0x12f0 [ 412.829625] ? tipc_sendmcast+0xb10/0xb10 [ 412.833889] ? mark_held_locks+0x130/0x130 [ 412.838118] ? __might_sleep+0x95/0x190 [ 412.842166] ? mark_held_locks+0xc7/0x130 [ 412.846476] ? __local_bh_enable_ip+0x160/0x250 [ 412.851339] ? lock_sock_nested+0xc5/0x100 [ 412.855642] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 412.860741] ? __local_bh_enable_ip+0x160/0x250 [ 412.865388] ? trace_hardirqs_on+0x28/0x190 [ 412.869794] ? lock_sock_nested+0x82/0x100 [ 412.874017] ? lock_sock_nested+0x82/0x100 [ 412.878439] ? __local_bh_enable_ip+0x160/0x250 [ 412.883176] tipc_sendmsg+0x4b/0x70 [ 412.886786] ? __tipc_sendmsg+0x12f0/0x12f0 [ 412.891263] sock_sendmsg+0xac/0xf0 [ 412.894882] ___sys_sendmsg+0x28e/0x950 [ 412.898939] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 412.903771] ? __fget+0x285/0x400 [ 412.907555] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.913075] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 412.917641] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.922382] ? trace_hardirqs_on_caller+0x28/0x180 [ 412.927298] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.932249] ? retint_kernel+0x2d/0x2d [ 412.936491] ? sockfd_lookup_light+0x7c/0x160 [ 412.940968] ? sockfd_lookup_light+0x1c/0x160 [ 412.945625] __sys_sendmmsg+0x160/0x370 [ 412.949668] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 412.954158] ? tipc_setsockopt+0x52f/0x870 [ 412.958380] ? fput+0x18/0x120 [ 412.961566] ? do_futex+0x1930/0x1930 [ 412.965443] ? kernel_accept+0x300/0x300 [ 412.969829] ? __sys_socket+0x115/0x1d0 [ 412.973906] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.978746] ? do_syscall_64+0x21/0x4e0 [ 412.982904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.988903] __x64_sys_sendmmsg+0x98/0x100 [ 412.993217] do_syscall_64+0xd0/0x4e0 [ 412.996999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.002270] RIP: 0033:0x446a09 [ 413.005531] Code: e8 0c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.024854] RSP: 002b:00007f3da599fdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 413.032816] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446a09 [ 413.040239] RDX: 08000000000000b0 RSI: 0000000020000a40 RDI: 0000000000000004 [ 413.047597] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 413.054935] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 413.062418] R13: 00007ffff45b931f R14: 00007f3da59a09c0 R15: 000000000000002d [ 413.070086] Modules linked in: [ 413.073443] ---[ end trace b3e82dcc552d138b ]--- [ 413.078369] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 413.084504] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 80 5f 8b 87 e8 23 32 f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 20 5f 8b 87 e8 0f 32 f8 ff <0f> 0b 48 89 de 48 c7 c7 40 60 8b 87 e8 fe 31 f8 ff 0f 0b 48 89 de [ 413.104353] RSP: 0018:ffff8881c72574d0 EFLAGS: 00010086 [ 413.109694] RAX: 000000000000004e RBX: ffff8881c7257640 RCX: 0000000000000000 [ 413.117233] RDX: 0000000000000000 RSI: ffffffff878b5c80 RDI: ffffffff8a3e3a60 [ 413.124731] RBP: ffff8881c72574e8 R08: ffffed103ecc5081 R09: ffffed103ecc5080 [ 413.132261] R10: ffffed103ecc5080 R11: ffff8881f6628407 R12: dead000000000200 [ 413.139620] R13: dead000000000100 R14: ffff8881d8a8de40 R15: ffff8881ee564300 [ 413.147307] FS: 00007f3da59a0700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 413.155699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.161748] CR2: 00000000004ccc50 CR3: 00000001dcdde004 CR4: 00000000001606e0 [ 413.169282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.176634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.887280] Shutting down cpus with NMI [ 413.893594] Kernel Offset: disabled [ 413.897323] Rebooting in 86400 seconds..