[ 45.861927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.884538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.891904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.903901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.915852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.962305] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.986988] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.003663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.012037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.022369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.955377] device bridge_slave_1 left promiscuous mode [ 464.961148] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.971214] device bridge_slave_0 left promiscuous mode [ 464.977040] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.628485] device hsr_slave_1 left promiscuous mode [ 467.635654] device hsr_slave_0 left promiscuous mode [ 467.643986] team0 (unregistering): Port device team_slave_1 removed [ 467.653208] team0 (unregistering): Port device team_slave_0 removed [ 467.662430] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 467.674199] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 467.700736] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts. [ 468.454180] IPVS: ftp: loaded support on port[0] = 21 [ 468.518924] chnl_net:caif_netlink_parms(): no params data found [ 468.544553] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.550959] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.558316] device bridge_slave_0 entered promiscuous mode [ 468.565844] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.572245] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.579977] device bridge_slave_1 entered promiscuous mode [ 468.594530] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 468.603508] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 468.619221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 468.626296] team0: Port device team_slave_0 added [ 468.631530] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 468.638835] team0: Port device team_slave_1 added [ 468.644409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 468.651726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 468.668466] device hsr_slave_0 entered promiscuous mode [ 468.674068] device hsr_slave_1 entered promiscuous mode [ 468.679818] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 468.686941] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 469.543063] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.549495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.556276] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.562668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.570235] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.577002] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.959963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.969950] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 469.978259] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 469.986301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.993696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.358522] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 470.364787] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.372517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 470.379494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.387515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.395276] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.401632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.770004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 470.777686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.786603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.794263] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.800584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.809804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 470.820791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 470.828331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.836249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 471.210153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 471.217810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 471.226343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.595777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 471.604222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 471.613544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 471.620516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 471.628360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 471.636288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 471.643743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.020154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 472.027189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.035632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.046088] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 472.053318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.428774] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 472.437425] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 472.444518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 472.451172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.824861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.863941] device bridge_slave_1 left promiscuous mode [ 472.869404] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.879009] device bridge_slave_0 left promiscuous mode [ 472.885317] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.893677] device bridge_slave_1 left promiscuous mode [ 472.899095] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.906241] device bridge_slave_0 left promiscuous mode [ 472.911659] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.919362] device bridge_slave_1 left promiscuous mode [ 472.924883] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.931707] device bridge_slave_0 left promiscuous mode [ 472.937224] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.945080] device bridge_slave_1 left promiscuous mode [ 472.950474] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.957637] device bridge_slave_0 left promiscuous mode [ 472.963356] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.970576] device bridge_slave_1 left promiscuous mode [ 472.976087] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.983139] device bridge_slave_0 left promiscuous mode [ 472.988531] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.412135] device hsr_slave_1 left promiscuous mode [ 480.419072] device hsr_slave_0 left promiscuous mode [ 480.426578] team0 (unregistering): Port device team_slave_1 removed [ 480.435385] team0 (unregistering): Port device team_slave_0 removed [ 480.445049] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 480.455887] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 480.481674] bond0 (unregistering): Released all slaves [ 480.493647] device hsr_slave_1 left promiscuous mode [ 480.500532] device hsr_slave_0 left promiscuous mode [ 480.509912] team0 (unregistering): Port device team_slave_1 removed [ 480.518709] team0 (unregistering): Port device team_slave_0 removed [ 480.528200] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 480.538523] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 480.563265] bond0 (unregistering): Released all slaves [ 480.575929] device hsr_slave_1 left promiscuous mode [ 480.585537] device hsr_slave_0 left promiscuous mode [ 480.593402] team0 (unregistering): Port device team_slave_1 removed [ 480.603348] team0 (unregistering): Port device team_slave_0 removed [ 480.612429] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 480.623274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 480.647760] bond0 (unregistering): Released all slaves [ 480.659129] device hsr_slave_1 left promiscuous mode [ 480.667129] device hsr_slave_0 left promiscuous mode [ 480.674347] team0 (unregistering): Port device team_slave_1 removed [ 480.688209] team0 (unregistering): Port device team_slave_0 removed [ 480.697186] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 480.706847] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 480.735722] bond0 (unregistering): Released all slaves [ 480.746277] device hsr_slave_1 left promiscuous mode [ 480.756103] device hsr_slave_0 left promiscuous mode [ 480.764651] team0 (unregistering): Port device team_slave_1 removed [ 480.774510] team0 (unregistering): Port device team_slave_0 removed [ 480.784440] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 480.794374] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 480.820156] bond0 (unregistering): Released all slaves [ 484.341813] kasan: CONFIG_KASAN_INLINE enabled [ 484.346498] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 484.355221] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 484.361450] CPU: 1 PID: 5945 Comm: syz-executor115 Not tainted 4.19.148-syzkaller #0 [ 484.369318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.378781] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 484.383595] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 484.402508] RSP: 0018:ffff88808b7bfba8 EFLAGS: 00010206 [ 484.408451] RAX: dffffc0000000000 RBX: 1ffff110116f7f79 RCX: 1ffff11012add57f [ 484.415742] RDX: 000000000000000f RSI: ffff8880956eabd8 RDI: 0000000000000078 [ 484.422984] RBP: ffff88808b7bfcf0 R08: ffff8880956eabf8 R09: 0000000000000000 [ 484.430230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 484.437472] R13: ffff88808b7bfcc8 R14: ffff88808b7bfe58 R15: ffff88808fd33080 [ 484.444740] FS: 00007f4351a20700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 484.452940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.458792] CR2: 00007f4351a1fe78 CR3: 000000009f4a9000 CR4: 00000000001406e0 [ 484.466090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.473334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.480574] Call Trace: [ 484.483189] ? find_held_lock+0x36/0x1d0 [ 484.487250] ? tcp_ioctl+0x600/0x600 [ 484.490958] ? mark_held_locks+0xc7/0x130 [ 484.495136] ? __local_bh_enable_ip+0x160/0x260 [ 484.499782] ? lockdep_hardirqs_on+0x421/0x5c0 [ 484.504336] ? __local_bh_enable_ip+0x160/0x260 [ 484.509064] ? lock_sock_nested+0x82/0x100 [ 484.513311] ? trace_hardirqs_on+0x28/0x190 [ 484.517619] ? lock_sock_nested+0x82/0x100 [ 484.521824] ? lock_sock_nested+0x82/0x100 [ 484.526028] ? __local_bh_enable_ip+0x160/0x260 [ 484.530697] smc_splice_read+0x1f6/0x330 [ 484.534756] sock_splice_read+0x92/0x120 [ 484.538817] do_splice_to+0xe3/0x120 [ 484.542675] do_splice+0xe40/0x12d0 [ 484.546305] ? ksys_dup3+0x2e0/0x2e0 [ 484.549992] ? opipe_prep.part.13+0x320/0x320 [ 484.554473] ? __fget_light+0x174/0x1e0 [ 484.558417] __x64_sys_splice+0x248/0x300 [ 484.562553] do_syscall_64+0xd0/0x4e0 [ 484.566337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.571508] RIP: 0033:0x448529 [ 484.574670] Code: e8 0c 0f 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.593541] RSP: 002b:00007f4351a1fd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 484.601217] RAX: ffffffffffffffda RBX: 00000000006ddc78 RCX: 0000000000448529 [ 484.608462] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 484.615729] RBP: 00000000006ddc70 R08: 000000000d86dac9 R09: 0000000000000000 [ 484.622968] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006ddc7c [ 484.630217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000064616561 [ 484.637461] Modules linked in: [ 484.647791] ---[ end trace cc7724b4f0b352cd ]--- [ 484.653432] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 484.658252] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 484.677219] RSP: 0018:ffff88808b7bfba8 EFLAGS: 00010206 [ 484.682610] RAX: dffffc0000000000 RBX: 1ffff110116f7f79 RCX: 1ffff11012add57f [ 484.689877] RDX: 000000000000000f RSI: ffff8880956eabd8 RDI: 0000000000000078 [ 484.697237] RBP: ffff88808b7bfcf0 R08: ffff8880956eabf8 R09: 0000000000000000 [ 484.704522] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 484.711815] R13: ffff88808b7bfcc8 R14: ffff88808b7bfe58 R15: ffff88808fd33080 [ 484.719090] FS: 00007f4351a20700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 484.727462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.733358] CR2: 0000000020000080 CR3: 000000009f4a9000 CR4: 00000000001406f0 [ 484.740692] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.747943] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.755233] Kernel panic - not syncing: Fatal exception [ 484.761917] Kernel Offset: disabled [ 484.765531] Rebooting in 86400 seconds..