[ 405.698046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.705174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.713381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.720099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.728060] device bridge_slave_1 left promiscuous mode [ 405.733615] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.772496] device bridge_slave_0 left promiscuous mode [ 405.778132] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.825936] device veth1_macvtap left promiscuous mode [ 405.831269] device veth0_macvtap left promiscuous mode [ 405.836991] device veth1_vlan left promiscuous mode [ 405.844150] device veth0_vlan left promiscuous mode [ 405.944642] device hsr_slave_1 left promiscuous mode [ 405.985537] device hsr_slave_0 left promiscuous mode [ 406.027526] team0 (unregistering): Port device team_slave_1 removed [ 406.038796] team0 (unregistering): Port device team_slave_0 removed [ 406.047863] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 406.077459] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 406.129649] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. [ 410.481091] list_del corruption, ffff8881dbb4f640->next is LIST_POISON1 (dead000000000100) [ 410.489772] ------------[ cut here ]------------ [ 410.494515] kernel BUG at lib/list_debug.c:47! [ 410.499097] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 410.504450] CPU: 1 PID: 19973 Comm: syz-executor427 Not tainted 4.19.195-syzkaller #0 [ 410.508049] list_del corruption, ffff8881d0177640->next is LIST_POISON1 (dead000000000100) [ 410.512483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.520964] ------------[ cut here ]------------ [ 410.530230] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 410.534964] kernel BUG at lib/list_debug.c:47! [ 410.540822] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 7b 8b 87 e8 92 2e f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 7a 8b 87 e8 7e 2e f8 ff <0f> 0b 48 89 de 48 c7 c7 c0 7b 8b 87 e8 6d 2e f8 ff 0f 0b 48 89 de [ 410.564394] RSP: 0018:ffff8881dbb4f4d0 EFLAGS: 00010086 [ 410.569731] RAX: 000000000000004e RBX: ffff8881dbb4f640 RCX: 0000000000000000 [ 410.576981] RDX: 0000000000000000 RSI: ffffffff878b7800 RDI: ffffffff8a3e3aa0 [ 410.584308] RBP: ffff8881dbb4f4e8 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 410.591551] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: dead000000000200 [ 410.598793] R13: dead000000000100 R14: ffff8881d7987000 R15: ffff8881ee0cad80 [ 410.606048] FS: 00007f8a3cb7d700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 410.614246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.620101] CR2: 00000000004d0600 CR3: 00000001dd898002 CR4: 00000000001606e0 [ 410.627348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.634592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.642635] Call Trace: [ 410.645198] remove_wait_queue+0x30/0x1b0 [ 410.649343] tipc_send_group_bcast+0x33a/0xa10 [ 410.653933] ? tipc_release+0xbd0/0xbd0 [ 410.657894] ? do_wait_intr_irq+0x310/0x310 [ 410.662202] ? __lock_acquire+0x764/0x47c0 [ 410.666407] ? _raw_spin_unlock_irq+0x27/0x90 [ 410.670875] ? finish_task_switch+0x14a/0x700 [ 410.675358] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 410.679910] ? _raw_spin_unlock_irq+0x27/0x90 [ 410.684378] __tipc_sendmsg+0x449/0x12c0 [ 410.688421] ? tipc_sendmcast+0xb10/0xb10 [ 410.692541] ? mark_held_locks+0x130/0x130 [ 410.696758] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 410.701487] ? mark_held_locks+0xc7/0x130 [ 410.705604] ? __local_bh_enable_ip+0x160/0x250 [ 410.710248] ? lock_sock_nested+0xc5/0x100 [ 410.714454] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 410.719020] ? __local_bh_enable_ip+0x160/0x250 [ 410.723672] ? trace_hardirqs_on+0x28/0x190 [ 410.728083] ? lock_sock_nested+0x82/0x100 [ 410.732287] ? lock_sock_nested+0x82/0x100 [ 410.736505] ? __local_bh_enable_ip+0x160/0x250 [ 410.741146] tipc_sendmsg+0x4b/0x70 [ 410.744745] ? __tipc_sendmsg+0x12c0/0x12c0 [ 410.749036] sock_sendmsg+0xac/0xf0 [ 410.752894] ___sys_sendmsg+0x28e/0x950 [ 410.756844] ? copy_msghdr_from_user+0x430/0x430 [ 410.761596] ? __fget+0x285/0x400 [ 410.765162] ? lock_downgrade+0x860/0x860 [ 410.769332] ? kasan_check_read+0x11/0x20 [ 410.773485] ? __fget+0x2a2/0x400 [ 410.776921] ? do_dup2+0x3f0/0x3f0 [ 410.780439] ? futex_exit_release+0x60/0x60 [ 410.784735] ? __fget_light+0x174/0x1e0 [ 410.788682] ? _raw_spin_unlock_bh+0x30/0x40 [ 410.793087] ? __fdget+0xe/0x10 [ 410.796339] ? sockfd_lookup_light+0x1c/0x160 [ 410.801077] __sys_sendmmsg+0x160/0x370 [ 410.805128] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 410.809687] ? tipc_setsockopt+0x52f/0x870 [ 410.813911] ? fput+0x18/0x120 [ 410.817107] ? do_futex+0x1530/0x1530 [ 410.820888] ? kernel_accept+0x300/0x300 [ 410.824925] ? __sys_socket+0x115/0x1d0 [ 410.828893] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 410.833707] ? do_syscall_64+0x21/0x4e0 [ 410.837654] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.842994] __x64_sys_sendmmsg+0x98/0x100 [ 410.847201] do_syscall_64+0xd0/0x4e0 [ 410.850989] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.856154] RIP: 0033:0x4459c9 [ 410.859335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 410.878213] RSP: 002b:00007f8a3cb7d318 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 410.886517] RAX: ffffffffffffffda RBX: 00000000004ca428 RCX: 00000000004459c9 [ 410.893759] RDX: 08000000000000b0 RSI: 0000000020000a40 RDI: 0000000000000004 [ 410.901016] RBP: 00000000004ca420 R08: 0000000000000000 R09: 0000000000000000 [ 410.908261] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049a064 [ 410.915508] R13: 00007ffd8a8f4b3f R14: 00007f8a3cb7d400 R15: 0000000000022000 [ 410.922841] Modules linked in: [ 410.926021] ---[ end trace 004e1fb8693866ac ]--- [ 410.926052] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 410.930777] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 410.936115] CPU: 0 PID: 19985 Comm: syz-executor427 Tainted: G D 4.19.195-syzkaller #0 [ 410.942061] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 7b 8b 87 e8 92 2e f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 7a 8b 87 e8 7e 2e f8 ff <0f> 0b 48 89 de 48 c7 c7 c0 7b 8b 87 e8 6d 2e f8 ff 0f 0b 48 89 de [ 410.951397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.970627] RSP: 0018:ffff8881dbb4f4d0 EFLAGS: 00010086 [ 410.979964] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 410.985300] RAX: 000000000000004e RBX: ffff8881dbb4f640 RCX: 0000000000000000 [ 410.991169] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 7b 8b 87 e8 92 2e f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 7a 8b 87 e8 7e 2e f8 ff <0f> 0b 48 89 de 48 c7 c7 c0 7b 8b 87 e8 6d 2e f8 ff 0f 0b 48 89 de [ 410.998412] RDX: 0000000000000000 RSI: ffffffff878b7800 RDI: ffffffff8a3e3aa0 [ 410.998416] RBP: ffff8881dbb4f4e8 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 411.017296] RSP: 0018:ffff8881d01774d0 EFLAGS: 00010086 [ 411.024541] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: dead000000000200 [ 411.031787] RAX: 000000000000004e RBX: ffff8881d0177640 RCX: 0000000000000001 [ 411.037119] R13: dead000000000100 R14: ffff8881d7987000 R15: ffff8881ee0cad80 [ 411.044373] RDX: 0000000000000000 RSI: ffffffff878b7800 RDI: ffffffff8a3e3aa0 [ 411.051630] FS: 00007f8a3cb7d700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 411.058874] RBP: ffff8881d01774e8 R08: ffffed103ecc5081 R09: ffffed103ecc5080 [ 411.066149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.066155] CR2: 00000000004d0600 CR3: 00000001dd898002 CR4: 00000000001606e0 [ 411.074366] R10: ffffed103ecc5080 R11: ffff8881f6628407 R12: dead000000000200 [ 411.081624] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.087575] R13: dead000000000100 R14: ffff8881ddfb89c0 R15: ffff8881d019b240 [ 411.094820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.102551] FS: 00007f8a3cb7d700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 411.109802] Kernel panic - not syncing: Fatal exception [ 411.117062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.144183] CR2: 00000000004d0600 CR3: 00000001d475c001 CR4: 00000000001606f0 [ 411.151573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.158828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.166076] Call Trace: [ 411.168645] remove_wait_queue+0x30/0x1b0 [ 411.172773] tipc_send_group_bcast+0x33a/0xa10 [ 411.177335] ? tipc_release+0xbd0/0xbd0 [ 411.181287] ? do_wait_intr_irq+0x310/0x310 [ 411.185585] ? __lock_acquire+0x764/0x47c0 [ 411.189796] ? _raw_spin_unlock_irq+0x27/0x90 [ 411.194270] ? finish_task_switch+0x14a/0x700 [ 411.198760] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 411.203419] ? _raw_spin_unlock_irq+0x27/0x90 [ 411.207919] __tipc_sendmsg+0x449/0x12c0 [ 411.211967] ? tipc_sendmcast+0xb10/0xb10 [ 411.216115] ? mark_held_locks+0x130/0x130 [ 411.220359] ? __might_sleep+0x95/0x190 [ 411.224317] ? mark_held_locks+0xc7/0x130 [ 411.228452] ? __local_bh_enable_ip+0x160/0x250 [ 411.233097] ? lock_sock_nested+0xc5/0x100 [ 411.237308] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 411.242120] ? __local_bh_enable_ip+0x160/0x250 [ 411.246858] ? trace_hardirqs_on+0x28/0x190 [ 411.251163] ? lock_sock_nested+0x82/0x100 [ 411.255572] ? lock_sock_nested+0x82/0x100 [ 411.259806] ? __local_bh_enable_ip+0x160/0x250 [ 411.264483] tipc_sendmsg+0x4b/0x70 [ 411.268121] ? __tipc_sendmsg+0x12c0/0x12c0 [ 411.272422] sock_sendmsg+0xac/0xf0 [ 411.276025] ___sys_sendmsg+0x28e/0x950 [ 411.279975] ? copy_msghdr_from_user+0x430/0x430 [ 411.284731] ? __fget+0x285/0x400 [ 411.288168] ? lock_downgrade+0x860/0x860 [ 411.292311] ? kasan_check_read+0x11/0x20 [ 411.296440] ? __fget+0x2a2/0x400 [ 411.299870] ? do_dup2+0x3f0/0x3f0 [ 411.303411] ? futex_exit_release+0x60/0x60 [ 411.307734] ? lock_acquire+0x180/0x3a0 [ 411.311686] ? __fget_light+0x174/0x1e0 [ 411.315641] ? _raw_spin_unlock_bh+0x30/0x40 [ 411.320029] ? __fdget+0xe/0x10 [ 411.323284] ? sockfd_lookup_light+0x1c/0x160 [ 411.327768] __sys_sendmmsg+0x160/0x370 [ 411.331840] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 411.336151] ? tipc_setsockopt+0x52f/0x870 [ 411.340366] ? fput+0x18/0x120 [ 411.343538] ? do_futex+0x1530/0x1530 [ 411.347404] ? kernel_accept+0x300/0x300 [ 411.351444] ? __sys_socket+0x115/0x1d0 [ 411.355496] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 411.360228] ? do_syscall_64+0x21/0x4e0 [ 411.364180] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.369546] __x64_sys_sendmmsg+0x98/0x100 [ 411.373757] do_syscall_64+0xd0/0x4e0 [ 411.377534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.382724] RIP: 0033:0x4459c9 [ 411.385897] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 411.404867] RSP: 002b:00007f8a3cb7d318 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 411.412554] RAX: ffffffffffffffda RBX: 00000000004ca428 RCX: 00000000004459c9 [ 411.419803] RDX: 08000000000000b0 RSI: 0000000020000a40 RDI: 0000000000000004 [ 411.427050] RBP: 00000000004ca420 R08: 0000000000000000 R09: 0000000000000000 [ 411.434306] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049a064 [ 411.441554] R13: 00007ffd8a8f4b3f R14: 00007f8a3cb7d400 R15: 0000000000022000 [ 411.448807] Modules linked in: [ 411.452069] ---[ end trace 004e1fb8693866ad ]--- [ 411.456807] RIP: 0010:__list_del_entry_valid.cold.1+0x26/0x4a [ 411.462689] Code: f8 ff 0f 0b 4c 89 e2 48 89 de 48 c7 c7 00 7b 8b 87 e8 92 2e f8 ff 0f 0b 4c 89 ea 48 89 de 48 c7 c7 a0 7a 8b 87 e8 7e 2e f8 ff <0f> 0b 48 89 de 48 c7 c7 c0 7b 8b 87 e8 6d 2e f8 ff 0f 0b 48 89 de [ 411.481579] RSP: 0018:ffff8881dbb4f4d0 EFLAGS: 00010086 [ 411.486919] RAX: 000000000000004e RBX: ffff8881dbb4f640 RCX: 0000000000000000 [ 411.494166] RDX: 0000000000000000 RSI: ffffffff878b7800 RDI: ffffffff8a3e3aa0 [ 411.501419] RBP: ffff8881dbb4f4e8 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 411.508665] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: dead000000000200 [ 411.515915] R13: dead000000000100 R14: ffff8881d7987000 R15: ffff8881ee0cad80 [ 411.523167] FS: 00007f8a3cb7d700(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 411.531468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.537326] CR2: 00000000004d0600 CR3: 00000001d475c001 CR4: 00000000001606f0 [ 411.544573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.551820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.240978] Shutting down cpus with NMI [ 412.245639] Kernel Offset: disabled [ 412.249254] Rebooting in 86400 seconds..