[ 407.433049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.442773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.452479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.460561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.470257] device bridge_slave_1 left promiscuous mode [ 407.476617] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.518194] device bridge_slave_0 left promiscuous mode [ 407.524201] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.580201] device veth1_macvtap left promiscuous mode [ 407.586286] device veth0_macvtap left promiscuous mode [ 407.593116] device veth1_vlan left promiscuous mode [ 407.598991] device veth0_vlan left promiscuous mode [ 407.691855] device hsr_slave_1 left promiscuous mode [ 407.741139] device hsr_slave_0 left promiscuous mode [ 407.793408] team0 (unregistering): Port device team_slave_1 removed [ 407.804180] team0 (unregistering): Port device team_slave_0 removed [ 407.814104] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 407.859961] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 407.947414] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. [ 410.535619] list_del corruption, ffff8881e9177640->next is LIST_POISON1 (dead000000000100) [ 410.541065] list_del corruption, ffff8881d0577640->next is LIST_POISON1 (dead000000000100) [ 410.546053] ------------[ cut here ]------------ [ 410.555069] ------------[ cut here ]------------ [ 410.560340] kernel BUG at lib/list_debug.c:47! [ 410.565475] kernel BUG at lib/list_debug.c:47! [ 410.565490] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 410.581720] CPU: 1 PID: 15421 Comm: syz-executor939 Not tainted 4.19.176-syzkaller #0 [ 410.591200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.601759] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 410.609111] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 80 5e 8b 87 e8 a0 34 f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 20 5e 8b 87 e8 8c 34 f8 ff <0f> 0b 48 89 de 48 c7 c7 40 5f 8b 87 e8 7b 34 f8 ff 0f 0b 48 89 de [ 410.630813] RSP: 0018:ffff8881d05774d0 EFLAGS: 00010086 [ 410.637120] RAX: 000000000000004e RBX: ffff8881d0577640 RCX: 0000000000000000 [ 410.645090] RDX: 0000000000000000 RSI: ffffffff878b5b80 RDI: ffffffff8a3e3aa0 [ 410.653648] RBP: ffff8881d05774e8 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 410.661616] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: dead000000000200 [ 410.669429] R13: dead000000000100 R14: ffff8881d095b180 R15: ffff8881ed5c4040 [ 410.677772] FS: 00007ff80f9c8700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 410.688105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.694858] CR2: 00000000004d0600 CR3: 00000001df15d006 CR4: 00000000001606e0 [ 410.703620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.712557] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.720505] Call Trace: [ 410.723368] remove_wait_queue+0x30/0x1b0 [ 410.728296] tipc_send_group_bcast+0x33a/0xa10 [ 410.733216] ? tipc_release+0xbd0/0xbd0 [ 410.737338] ? do_wait_intr_irq+0x310/0x310 [ 410.742195] ? __lock_acquire+0x764/0x47c0 [ 410.746632] ? finish_task_switch+0x14a/0x700 [ 410.751489] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 410.756194] ? _raw_spin_unlock_irq+0x27/0x90 [ 410.762289] ? trace_hardirqs_on+0x28/0x190 [ 410.766607] __tipc_sendmsg+0x449/0x12c0 [ 410.771552] ? tipc_sendmcast+0xb10/0xb10 [ 410.776364] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 410.781569] ? lockdep_hardirqs_on+0x296/0x5b0 [ 410.787078] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 410.792286] ? trace_hardirqs_on_caller+0x28/0x180 [ 410.798143] ? mark_held_locks+0xc7/0x130 [ 410.803360] ? __local_bh_enable_ip+0x160/0x250 [ 410.808760] ? lock_sock_nested+0xc5/0x100 [ 410.814031] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 410.819792] ? __local_bh_enable_ip+0x160/0x250 [ 410.824841] ? trace_hardirqs_on+0x28/0x190 [ 410.829725] ? lock_sock_nested+0x82/0x100 [ 410.834467] ? lock_sock_nested+0x82/0x100 [ 410.839716] ? __local_bh_enable_ip+0x160/0x250 [ 410.846076] tipc_sendmsg+0x4b/0x70 [ 410.850240] ? __tipc_sendmsg+0x12c0/0x12c0 [ 410.855491] sock_sendmsg+0xac/0xf0 [ 410.859770] ___sys_sendmsg+0x28e/0x950 [ 410.865568] ? copy_msghdr_from_user+0x430/0x430 [ 410.870995] ? __fget+0x285/0x400 [ 410.874742] ? lock_downgrade+0x860/0x860 [ 410.879372] ? kasan_check_read+0x11/0x20 [ 410.883963] ? __fget+0x2a2/0x400 [ 410.887885] ? do_dup2+0x3f0/0x3f0 [ 410.891992] ? futex_exit_release+0x60/0x60 [ 410.897180] ? __fget_light+0x174/0x1e0 [ 410.902119] ? _raw_spin_unlock_bh+0x30/0x40 [ 410.907099] ? __fdget+0xe/0x10 [ 410.910830] ? sockfd_lookup_light+0x1c/0x160 [ 410.915487] __sys_sendmmsg+0x160/0x370 [ 410.920622] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 410.925493] ? tipc_setsockopt+0x52f/0x870 [ 410.929958] ? fput+0x18/0x120 [ 410.934102] ? do_futex+0x1550/0x1550 [ 410.938470] ? kernel_accept+0x300/0x300 [ 410.942970] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 410.948300] ? do_syscall_64+0x21/0x4e0 [ 410.952912] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.959507] __x64_sys_sendmmsg+0x98/0x100 [ 410.964444] do_syscall_64+0xd0/0x4e0 [ 410.968687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.975463] RIP: 0033:0x4459c9 [ 410.979502] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 411.002144] RSP: 002b:00007ff80f9c8318 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 411.010518] RAX: ffffffffffffffda RBX: 00000000004ca428 RCX: 00000000004459c9 [ 411.018593] RDX: 08000000000000b0 RSI: 0000000020000a40 RDI: 0000000000000004 [ 411.026533] RBP: 00000000004ca420 R08: 0000000000000000 R09: 0000000000000000 [ 411.034761] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049a064 [ 411.042799] R13: 00007ffe3258160f R14: 00007ff80f9c8400 R15: 0000000000022000 [ 411.051664] Modules linked in: [ 411.055492] ---[ end trace 4fd94e0cb8fa3dc7 ]--- [ 411.055524] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 411.060430] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 411.066924] CPU: 0 PID: 15411 Comm: syz-executor939 Tainted: G D 4.19.176-syzkaller #0 [ 411.072891] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 80 5e 8b 87 e8 a0 34 f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 20 5e 8b 87 e8 8c 34 f8 ff <0f> 0b 48 89 de 48 c7 c7 40 5f 8b 87 e8 7b 34 f8 ff 0f 0b 48 89 de [ 411.083115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.102957] RSP: 0018:ffff8881d05774d0 EFLAGS: 00010086 [ 411.112781] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 411.118563] RAX: 000000000000004e RBX: ffff8881d0577640 RCX: 0000000000000000 [ 411.124789] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 80 5e 8b 87 e8 a0 34 f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 20 5e 8b 87 e8 8c 34 f8 ff <0f> 0b 48 89 de 48 c7 c7 40 5f 8b 87 e8 7b 34 f8 ff 0f 0b 48 89 de [ 411.133121] RDX: 0000000000000000 RSI: ffffffff878b5b80 RDI: ffffffff8a3e3aa0 [ 411.153341] RSP: 0018:ffff8881e91774d0 EFLAGS: 00010086 [ 411.161815] RBP: ffff8881d05774e8 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 411.167791] RAX: 000000000000004e RBX: ffff8881e9177640 RCX: 0000000000000000 [ 411.167795] RDX: 0000000000000000 RSI: ffffffff878b5b80 RDI: ffffffff8a3e3aa0 [ 411.176370] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: dead000000000200 [ 411.183969] RBP: ffff8881e91774e8 R08: ffffed103ecc5081 R09: ffffed103ecc5080 [ 411.191669] R13: dead000000000100 R14: ffff8881d095b180 R15: ffff8881ed5c4040 [ 411.199180] R10: ffffed103ecc5080 R11: ffff8881f6628407 R12: dead000000000200 [ 411.206692] FS: 00007ff80f9c8700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 411.215059] R13: dead000000000100 R14: ffff8881ee45a540 R15: ffff8881e8e8da00 [ 411.215064] FS: 00007ff80f9c8700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 411.223133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.231441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.239213] CR2: 00000000004d0600 CR3: 00000001df15d006 CR4: 00000000001606e0 [ 411.248547] CR2: 00000000004d0600 CR3: 00000001d088a002 CR4: 00000000001606f0 [ 411.254791] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.261018] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.268985] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.277403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.277406] Call Trace: [ 411.285272] Kernel panic - not syncing: Fatal exception [ 411.293762] remove_wait_queue+0x30/0x1b0 [ 411.324085] tipc_send_group_bcast+0x33a/0xa10 [ 411.329173] ? tipc_release+0xbd0/0xbd0 [ 411.335411] ? rcu_read_lock_sched_held+0x108/0x120 [ 411.341204] ? kmem_cache_free+0x25e/0x290 [ 411.346115] ? do_wait_intr_irq+0x310/0x310 [ 411.350900] ? __lock_acquire+0x764/0x47c0 [ 411.355455] ? __lock_acquire+0x764/0x47c0 [ 411.360030] __tipc_sendmsg+0x449/0x12c0 [ 411.364628] ? lockdep_count_backward_deps+0x1e0/0x350 [ 411.370410] ? tipc_sendmcast+0xb10/0xb10 [ 411.375072] ? mark_held_locks+0x130/0x130 [ 411.379780] ? lockdep_hardirqs_on+0x296/0x5b0 [ 411.384946] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 411.390776] ? trace_hardirqs_on_caller+0x28/0x180 [ 411.396308] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 411.401428] ? mark_held_locks+0xc7/0x130 [ 411.407104] ? __local_bh_enable_ip+0x160/0x250 [ 411.412312] ? lock_sock_nested+0xc5/0x100 [ 411.417127] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 411.422153] ? __local_bh_enable_ip+0x160/0x250 [ 411.427195] ? trace_hardirqs_on+0x28/0x190 [ 411.432100] ? lock_sock_nested+0x82/0x100 [ 411.436693] ? lock_sock_nested+0x82/0x100 [ 411.441183] ? __local_bh_enable_ip+0x160/0x250 [ 411.446022] tipc_sendmsg+0x4b/0x70 [ 411.449803] ? __tipc_sendmsg+0x12c0/0x12c0 [ 411.454217] sock_sendmsg+0xac/0xf0 [ 411.458034] ___sys_sendmsg+0x28e/0x950 [ 411.462192] ? copy_msghdr_from_user+0x430/0x430 [ 411.467884] ? mark_held_locks+0x130/0x130 [ 411.472812] ? lock_downgrade+0x860/0x860 [ 411.477705] ? kasan_check_read+0x11/0x20 [ 411.482455] ? __fget+0x2a2/0x400 [ 411.486015] ? __might_fault+0xf1/0x1b0 [ 411.490063] ? lock_downgrade+0x860/0x860 [ 411.494557] __sys_sendmmsg+0x160/0x370 [ 411.498697] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 411.503269] ? tipc_setsockopt+0x52f/0x870 [ 411.507838] ? retint_kernel+0x2d/0x2d [ 411.511725] ? fput+0x18/0x120 [ 411.515423] ? do_futex+0x1550/0x1550 [ 411.519476] ? kernel_accept+0x300/0x300 [ 411.523803] ? __sys_socket+0x115/0x1d0 [ 411.528314] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 411.533617] ? do_syscall_64+0x21/0x4e0 [ 411.537847] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.543551] __x64_sys_sendmmsg+0x98/0x100 [ 411.547860] do_syscall_64+0xd0/0x4e0 [ 411.551990] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.557254] RIP: 0033:0x4459c9 [ 411.560431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 411.580719] RSP: 002b:00007ff80f9c8318 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 411.589469] RAX: ffffffffffffffda RBX: 00000000004ca428 RCX: 00000000004459c9 [ 411.597146] RDX: 08000000000000b0 RSI: 0000000020000a40 RDI: 0000000000000004 [ 411.605126] RBP: 00000000004ca420 R08: 0000000000000000 R09: 0000000000000000 [ 411.613004] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049a064 [ 411.621181] R13: 00007ffe3258160f R14: 00007ff80f9c8400 R15: 0000000000022000 [ 411.628972] Modules linked in: [ 411.632246] ---[ end trace 4fd94e0cb8fa3dc8 ]--- [ 411.637797] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 411.644272] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 80 5e 8b 87 e8 a0 34 f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 20 5e 8b 87 e8 8c 34 f8 ff <0f> 0b 48 89 de 48 c7 c7 40 5f 8b 87 e8 7b 34 f8 ff 0f 0b 48 89 de [ 411.664585] RSP: 0018:ffff8881d05774d0 EFLAGS: 00010086 [ 411.670439] RAX: 000000000000004e RBX: ffff8881d0577640 RCX: 0000000000000000 [ 411.678851] RDX: 0000000000000000 RSI: ffffffff878b5b80 RDI: ffffffff8a3e3aa0 [ 411.688337] RBP: ffff8881d05774e8 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 411.698137] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: dead000000000200 [ 411.706011] R13: dead000000000100 R14: ffff8881d095b180 R15: ffff8881ed5c4040 [ 411.713551] FS: 00007ff80f9c8700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 411.722812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.730165] CR2: 00000000004d0600 CR3: 00000001d088a002 CR4: 00000000001606f0 [ 411.738274] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.746001] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.432117] Shutting down cpus with NMI [ 412.440058] Kernel Offset: disabled [ 412.444535] Rebooting in 86400 seconds..