[ 406.595553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.602804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.614053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.622213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.631470] device bridge_slave_1 left promiscuous mode [ 406.636953] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.659401] device bridge_slave_0 left promiscuous mode [ 406.665508] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.711433] device veth1_macvtap left promiscuous mode [ 406.717854] device veth0_macvtap left promiscuous mode [ 406.725181] device veth1_vlan left promiscuous mode [ 406.731271] device veth0_vlan left promiscuous mode [ 406.843101] device hsr_slave_1 left promiscuous mode [ 406.911282] device hsr_slave_0 left promiscuous mode [ 406.976214] team0 (unregistering): Port device team_slave_1 removed [ 406.985722] team0 (unregistering): Port device team_slave_0 removed [ 406.995375] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 407.041461] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 407.098634] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.251' (ECDSA) to the list of known hosts. [ 408.861878] list_del corruption, ffff8881be6a7640->next is LIST_POISON1 (dead000000000100) [ 408.864350] list_del corruption, ffff8881baa1f640->next is LIST_POISON1 (dead000000000100) [ 408.871150] ------------[ cut here ]------------ [ 408.879642] ------------[ cut here ]------------ [ 408.884588] kernel BUG at lib/list_debug.c:47! [ 408.889320] kernel BUG at lib/list_debug.c:47! [ 408.893901] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 408.903986] CPU: 0 PID: 20793 Comm: syz-executor018 Not tainted 4.19.188-syzkaller #0 [ 408.912029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.921385] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 408.927333] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 77 8b 87 e8 e5 2e f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 76 8b 87 e8 d1 2e f8 ff <0f> 0b 48 89 de 48 c7 c7 c0 77 8b 87 e8 c0 2e f8 ff 0f 0b 48 89 de [ 408.946758] RSP: 0018:ffff8881be6a74d0 EFLAGS: 00010086 [ 408.952191] RAX: 000000000000004e RBX: ffff8881be6a7640 RCX: 0000000000000000 [ 408.959635] RDX: 0000000000000000 RSI: ffffffff878b7400 RDI: ffffffff8a3e5aa0 [ 408.966881] RBP: ffff8881be6a74e8 R08: ffffed103ecc5081 R09: ffffed103ecc5080 [ 408.974152] R10: ffffed103ecc5080 R11: ffff8881f6628407 R12: dead000000000200 [ 408.981694] R13: dead000000000100 R14: ffff8881da06c3c0 R15: ffff8881e6f8b700 [ 408.989031] FS: 00007fc388ec9700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 408.997810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.003670] CR2: 000000002001d008 CR3: 00000001df07a003 CR4: 00000000001606f0 [ 409.011724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.019057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.026816] Call Trace: [ 409.029491] remove_wait_queue+0x30/0x1b0 [ 409.034646] tipc_send_group_bcast+0x33a/0xa10 [ 409.039216] ? tipc_release+0xbd0/0xbd0 [ 409.043492] ? do_wait_intr_irq+0x310/0x310 [ 409.048000] ? __lock_acquire+0x764/0x47c0 [ 409.052566] ? _raw_spin_unlock_irq+0x27/0x90 [ 409.057438] ? finish_task_switch+0x14a/0x700 [ 409.062558] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 409.067158] ? _raw_spin_unlock_irq+0x27/0x90 [ 409.071646] __tipc_sendmsg+0x449/0x12c0 [ 409.075969] ? tipc_sendmcast+0xb10/0xb10 [ 409.080323] ? mark_held_locks+0x130/0x130 [ 409.084997] ? __might_sleep+0x95/0x190 [ 409.089336] ? mark_held_locks+0xc7/0x130 [ 409.093588] ? __local_bh_enable_ip+0x160/0x250 [ 409.098352] ? lock_sock_nested+0xc5/0x100 [ 409.102569] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 409.108170] ? __local_bh_enable_ip+0x160/0x250 [ 409.112899] ? trace_hardirqs_on+0x28/0x190 [ 409.117417] ? lock_sock_nested+0x82/0x100 [ 409.121838] ? lock_sock_nested+0x82/0x100 [ 409.126416] ? __local_bh_enable_ip+0x160/0x250 [ 409.131162] tipc_sendmsg+0x4b/0x70 [ 409.134862] ? __tipc_sendmsg+0x12c0/0x12c0 [ 409.139597] sock_sendmsg+0xac/0xf0 [ 409.143425] ___sys_sendmsg+0x28e/0x950 [ 409.147459] ? copy_msghdr_from_user+0x430/0x430 [ 409.152346] ? __fget+0x285/0x400 [ 409.155785] ? lock_downgrade+0x860/0x860 [ 409.160118] ? kasan_check_read+0x11/0x20 [ 409.164336] ? __fget+0x2a2/0x400 [ 409.168001] ? do_dup2+0x3f0/0x3f0 [ 409.171531] ? futex_exit_release+0x60/0x60 [ 409.175850] ? __fget_light+0x174/0x1e0 [ 409.179914] ? _raw_spin_unlock_bh+0x30/0x40 [ 409.184496] ? __fdget+0xe/0x10 [ 409.187841] ? sockfd_lookup_light+0x1c/0x160 [ 409.192513] __sys_sendmmsg+0x160/0x370 [ 409.196577] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 409.201243] ? tipc_setsockopt+0x52f/0x870 [ 409.205868] ? fput+0x18/0x120 [ 409.209054] ? do_futex+0x1550/0x1550 [ 409.212839] ? kernel_accept+0x300/0x300 [ 409.218072] ? __sys_socket+0x115/0x1d0 [ 409.222122] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 409.226945] ? do_syscall_64+0x21/0x4e0 [ 409.230985] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.236564] __x64_sys_sendmmsg+0x98/0x100 [ 409.241009] do_syscall_64+0xd0/0x4e0 [ 409.244885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.250309] RIP: 0033:0x4459c9 [ 409.253687] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 409.273058] RSP: 002b:00007fc388ec9318 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.280847] RAX: ffffffffffffffda RBX: 00000000004ca428 RCX: 00000000004459c9 [ 409.288561] RDX: 08000000000000b0 RSI: 0000000020000a40 RDI: 0000000000000004 [ 409.296467] RBP: 00000000004ca420 R08: 0000000000000000 R09: 0000000000000000 [ 409.303957] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049a064 [ 409.311705] R13: 00007ffe4f5f560f R14: 00007fc388ec9400 R15: 0000000000022000 [ 409.319155] Modules linked in: [ 409.322360] ---[ end trace 501ce66ba89fbbd1 ]--- [ 409.322393] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 409.327475] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 409.333042] CPU: 1 PID: 20802 Comm: syz-executor018 Tainted: G D 4.19.188-syzkaller #0 [ 409.339171] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 77 8b 87 e8 e5 2e f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 76 8b 87 e8 d1 2e f8 ff <0f> 0b 48 89 de 48 c7 c7 c0 77 8b 87 e8 c0 2e f8 ff 0f 0b 48 89 de [ 409.348798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.367969] RSP: 0018:ffff8881be6a74d0 EFLAGS: 00010086 [ 409.377667] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 409.383207] RAX: 000000000000004e RBX: ffff8881be6a7640 RCX: 0000000000000000 [ 409.389081] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 77 8b 87 e8 e5 2e f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 76 8b 87 e8 d1 2e f8 ff <0f> 0b 48 89 de 48 c7 c7 c0 77 8b 87 e8 c0 2e f8 ff 0f 0b 48 89 de [ 409.396331] RDX: 0000000000000000 RSI: ffffffff878b7400 RDI: ffffffff8a3e5aa0 [ 409.416464] RSP: 0018:ffff8881baa1f4d0 EFLAGS: 00010086 [ 409.424044] RBP: ffff8881be6a74e8 R08: ffffed103ecc5081 R09: ffffed103ecc5080 [ 409.424048] R10: ffffed103ecc5080 R11: ffff8881f6628407 R12: dead000000000200 [ 409.429570] RAX: 000000000000004e RBX: ffff8881baa1f640 RCX: 0000000000000000 [ 409.436938] R13: dead000000000100 R14: ffff8881da06c3c0 R15: ffff8881e6f8b700 [ 409.444280] RDX: 0000000000000000 RSI: ffffffff878b7400 RDI: ffffffff8a3e5aa0 [ 409.452226] FS: 00007fc388ec9700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 409.459565] RBP: ffff8881baa1f4e8 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 409.467336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.475814] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: dead000000000200 [ 409.483349] CR2: 000000002001d008 CR3: 00000001df07a003 CR4: 00000000001606f0 [ 409.489309] R13: dead000000000100 R14: ffff8881d99d7540 R15: ffff8881ef532e80 [ 409.496574] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.503920] FS: 00007fc388ec9700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 409.511213] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.518834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.527257] Kernel panic - not syncing: Fatal exception [ 409.535738] CR2: 00000000004d0600 CR3: 00000001dabae004 CR4: 00000000001606e0 [ 409.554739] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.563121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.570480] Call Trace: [ 409.573139] remove_wait_queue+0x30/0x1b0 [ 409.577279] tipc_send_group_bcast+0x33a/0xa10 [ 409.581869] ? tipc_release+0xbd0/0xbd0 [ 409.585845] ? do_wait_intr_irq+0x310/0x310 [ 409.590354] ? __lock_acquire+0x764/0x47c0 [ 409.594574] ? _raw_spin_unlock_irq+0x27/0x90 [ 409.599053] ? finish_task_switch+0x14a/0x700 [ 409.603527] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 409.608104] ? _raw_spin_unlock_irq+0x27/0x90 [ 409.612604] __tipc_sendmsg+0x449/0x12c0 [ 409.617011] ? tipc_sendmcast+0xb10/0xb10 [ 409.621232] ? mark_held_locks+0x130/0x130 [ 409.625540] ? __might_sleep+0x95/0x190 [ 409.629757] ? mark_held_locks+0xc7/0x130 [ 409.633990] ? __local_bh_enable_ip+0x160/0x250 [ 409.638765] ? lock_sock_nested+0xc5/0x100 [ 409.642993] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 409.647554] ? __local_bh_enable_ip+0x160/0x250 [ 409.652205] ? trace_hardirqs_on+0x28/0x190 [ 409.656504] ? lock_sock_nested+0x82/0x100 [ 409.660716] ? lock_sock_nested+0x82/0x100 [ 409.664941] ? __local_bh_enable_ip+0x160/0x250 [ 409.671202] tipc_sendmsg+0x4b/0x70 [ 409.675092] ? __tipc_sendmsg+0x12c0/0x12c0 [ 409.679399] sock_sendmsg+0xac/0xf0 [ 409.683006] ___sys_sendmsg+0x28e/0x950 [ 409.687068] ? copy_msghdr_from_user+0x430/0x430 [ 409.691985] ? __fget+0x285/0x400 [ 409.695432] ? lock_downgrade+0x860/0x860 [ 409.699648] ? kasan_check_read+0x11/0x20 [ 409.703880] ? __fget+0x2a2/0x400 [ 409.707313] ? do_dup2+0x3f0/0x3f0 [ 409.710850] ? futex_exit_release+0x60/0x60 [ 409.715348] ? lock_acquire+0x180/0x3a0 [ 409.719844] ? __fget_light+0x174/0x1e0 [ 409.723927] ? _raw_spin_unlock_bh+0x30/0x40 [ 409.728576] ? __fdget+0xe/0x10 [ 409.731949] ? sockfd_lookup_light+0x1c/0x160 [ 409.736553] __sys_sendmmsg+0x160/0x370 [ 409.741240] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 409.745546] ? tipc_setsockopt+0x52f/0x870 [ 409.749852] ? fput+0x18/0x120 [ 409.753026] ? do_futex+0x1550/0x1550 [ 409.756893] ? kernel_accept+0x300/0x300 [ 409.760931] ? __sys_socket+0x115/0x1d0 [ 409.765149] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 409.769885] ? do_syscall_64+0x21/0x4e0 [ 409.773927] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.779385] __x64_sys_sendmmsg+0x98/0x100 [ 409.783615] do_syscall_64+0xd0/0x4e0 [ 409.787397] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.792857] RIP: 0033:0x4459c9 [ 409.796039] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 409.815653] RSP: 002b:00007fc388ec9318 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.823521] RAX: ffffffffffffffda RBX: 00000000004ca428 RCX: 00000000004459c9 [ 409.830954] RDX: 08000000000000b0 RSI: 0000000020000a40 RDI: 0000000000000004 [ 409.838837] RBP: 00000000004ca420 R08: 0000000000000000 R09: 0000000000000000 [ 409.846186] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049a064 [ 409.853540] R13: 00007ffe4f5f560f R14: 00007fc388ec9400 R15: 0000000000022000 [ 409.860991] Modules linked in: [ 409.864257] ---[ end trace 501ce66ba89fbbd2 ]--- [ 409.869003] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 409.874951] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 77 8b 87 e8 e5 2e f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 76 8b 87 e8 d1 2e f8 ff <0f> 0b 48 89 de 48 c7 c7 c0 77 8b 87 e8 c0 2e f8 ff 0f 0b 48 89 de [ 409.894613] RSP: 0018:ffff8881be6a74d0 EFLAGS: 00010086 [ 409.900043] RAX: 000000000000004e RBX: ffff8881be6a7640 RCX: 0000000000000000 [ 409.907576] RDX: 0000000000000000 RSI: ffffffff878b7400 RDI: ffffffff8a3e5aa0 [ 409.915149] RBP: ffff8881be6a74e8 R08: ffffed103ecc5081 R09: ffffed103ecc5080 [ 409.922495] R10: ffffed103ecc5080 R11: ffff8881f6628407 R12: dead000000000200 [ 409.930012] R13: dead000000000100 R14: ffff8881da06c3c0 R15: ffff8881e6f8b700 [ 409.937271] FS: 00007fc388ec9700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 409.945652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.951639] CR2: 00000000004d0600 CR3: 00000001dabae004 CR4: 00000000001606e0 [ 409.959248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.966508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.663540] Shutting down cpus with NMI [ 410.670367] Kernel Offset: disabled [ 410.674377] Rebooting in 86400 seconds..