[ 477.870019] device bridge_slave_1 left promiscuous mode [ 477.876046] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.930945] device bridge_slave_0 left promiscuous mode [ 477.936564] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.968814] device hsr_slave_1 left promiscuous mode [ 481.011547] device hsr_slave_0 left promiscuous mode [ 481.051631] team0 (unregistering): Port device team_slave_1 removed [ 481.060786] team0 (unregistering): Port device team_slave_0 removed [ 481.070268] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 481.111161] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 481.168419] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. [ 481.401985] IPVS: ftp: loaded support on port[0] = 21 [ 481.433193] audit: type=1400 audit(1580893428.883:41): avc: denied { write } for pid=3510 comm="syz-executor087" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 481.477609] audit: type=1400 audit(1580893428.913:42): avc: denied { read } for pid=3510 comm="syz-executor087" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 481.524539] chnl_net:caif_netlink_parms(): no params data found [ 481.554592] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.561200] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.568737] device bridge_slave_0 entered promiscuous mode [ 481.576038] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.582634] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.590063] device bridge_slave_1 entered promiscuous mode [ 481.608451] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 481.619848] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 481.637965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 481.645411] team0: Port device team_slave_0 added [ 481.651757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 481.659445] team0: Port device team_slave_1 added [ 481.665167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 481.673124] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 481.749363] device hsr_slave_0 entered promiscuous mode [ 481.817267] device hsr_slave_1 entered promiscuous mode [ 481.857887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 481.865385] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 481.891778] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.898342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.905149] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.911542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.967618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.982723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 481.992516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.001081] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.018751] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.030121] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 482.036227] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.045459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.053174] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.059661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.072602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.082540] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.088941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.102596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.115399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.145777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.161112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.171664] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 482.179956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.187710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.195326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.203313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.219370] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 482.227232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 482.234069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 482.246775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.538830] device bridge_slave_1 left promiscuous mode [ 487.544424] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.597958] device bridge_slave_0 left promiscuous mode [ 487.603471] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.658145] device bridge_slave_1 left promiscuous mode [ 487.663597] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.717500] device bridge_slave_0 left promiscuous mode [ 487.722986] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.778144] device bridge_slave_1 left promiscuous mode [ 487.783672] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.847770] device bridge_slave_0 left promiscuous mode [ 487.853340] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.878780] device bridge_slave_1 left promiscuous mode [ 487.884323] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.927512] device bridge_slave_0 left promiscuous mode [ 487.933279] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.978468] device bridge_slave_1 left promiscuous mode [ 487.984026] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.017887] device bridge_slave_0 left promiscuous mode [ 488.023396] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.181654] device hsr_slave_1 left promiscuous mode [ 491.249403] device hsr_slave_0 left promiscuous mode [ 491.289530] team0 (unregistering): Port device team_slave_1 removed [ 491.299489] team0 (unregistering): Port device team_slave_0 removed [ 491.308508] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 491.350794] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 491.426405] bond0 (unregistering): Released all slaves [ 491.508509] device hsr_slave_1 left promiscuous mode [ 491.549389] device hsr_slave_0 left promiscuous mode [ 491.590316] team0 (unregistering): Port device team_slave_1 removed [ 491.602376] team0 (unregistering): Port device team_slave_0 removed [ 491.611929] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 491.661083] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 491.726926] bond0 (unregistering): Released all slaves [ 491.838585] device hsr_slave_1 left promiscuous mode [ 491.919249] device hsr_slave_0 left promiscuous mode [ 491.971155] team0 (unregistering): Port device team_slave_1 removed [ 491.980194] team0 (unregistering): Port device team_slave_0 removed [ 491.990036] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 492.049506] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 492.116023] bond0 (unregistering): Released all slaves [ 492.228595] device hsr_slave_1 left promiscuous mode [ 492.299118] device hsr_slave_0 left promiscuous mode [ 492.370441] team0 (unregistering): Port device team_slave_1 removed [ 492.379826] team0 (unregistering): Port device team_slave_0 removed [ 492.389403] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 492.441523] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 492.537474] bond0 (unregistering): Released all slaves [ 492.620440] device hsr_slave_1 left promiscuous mode [ 492.660426] device hsr_slave_0 left promiscuous mode [ 492.700307] team0 (unregistering): Port device team_slave_1 removed [ 492.711150] team0 (unregistering): Port device team_slave_0 removed [ 492.721201] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 492.761018] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 492.826141] bond0 (unregistering): Released all slaves [ 502.690599] kasan: CONFIG_KASAN_INLINE enabled [ 502.695337] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 502.703496] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 502.710076] CPU: 0 PID: 8549 Comm: syz-executor087 Not tainted 4.19.101-syzkaller #0 [ 502.717954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.727612] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 502.732460] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 502.751610] RSP: 0018:ffff88809b6afba8 EFLAGS: 00010206 [ 502.757830] RAX: dffffc0000000000 RBX: 1ffff110136d5f79 RCX: 1ffff110150ba166 [ 502.765283] RDX: 000000000000000f RSI: ffff8880a85d0b10 RDI: 0000000000000078 [ 502.772549] RBP: ffff88809b6afcf0 R08: ffff8880a85d0b30 R09: 0000000000000000 [ 502.779864] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 502.787139] R13: ffff88809b6afcc8 R14: ffff88809b6afe58 R15: ffff8880a72f0380 [ 502.794517] FS: 00007fab337ff700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 502.802727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.808654] CR2: 00007fab337fee78 CR3: 000000009437a000 CR4: 00000000001406f0 [ 502.816133] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 502.823397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 502.830649] Call Trace: [ 502.833279] ? find_held_lock+0x36/0x1d0 [ 502.837368] ? compat_tcp_getsockopt+0x30/0x30 [ 502.841953] ? mark_held_locks+0xc7/0x130 [ 502.846185] ? __local_bh_enable_ip+0x160/0x260 [ 502.850861] ? lockdep_hardirqs_on+0x421/0x5c0 [ 502.855537] ? __local_bh_enable_ip+0x160/0x260 [ 502.860248] ? lock_sock_nested+0x82/0x100 [ 502.864626] ? trace_hardirqs_on+0x28/0x190 [ 502.869045] ? lock_sock_nested+0x82/0x100 [ 502.873263] ? lock_sock_nested+0x82/0x100 [ 502.877610] ? __local_bh_enable_ip+0x160/0x260 [ 502.882335] smc_splice_read+0x1f6/0x330 [ 502.886385] sock_splice_read+0x92/0x120 [ 502.890471] do_splice_to+0xe3/0x120 [ 502.894171] do_splice+0xe40/0x12d0 [ 502.897822] ? ksys_dup3+0x2e0/0x2e0 [ 502.901538] ? opipe_prep.part.13+0x320/0x320 [ 502.906074] ? __fget_light+0x174/0x1e0 [ 502.910201] __x64_sys_splice+0x248/0x300 [ 502.914445] do_syscall_64+0xd0/0x4e0 [ 502.918247] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.923421] RIP: 0033:0x4484a9 [ 502.926603] Code: e8 0c 0f 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.945501] RSP: 002b:00007fab337fed88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 502.953194] RAX: ffffffffffffffda RBX: 00000000006ddc78 RCX: 00000000004484a9 [ 502.960503] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 502.967820] RBP: 00000000006ddc70 R08: 000000000d86dac9 R09: 0000000000000000 [ 502.975072] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006ddc7c [ 502.982341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000064616561 [ 502.989777] Modules linked in: [ 502.993315] ---[ end trace 3202682ed3bba4fb ]--- [ 502.998411] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 503.003256] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 503.022747] RSP: 0018:ffff88809b6afba8 EFLAGS: 00010206 [ 503.028150] RAX: dffffc0000000000 RBX: 1ffff110136d5f79 RCX: 1ffff110150ba166 [ 503.036666] RDX: 000000000000000f RSI: ffff8880a85d0b10 RDI: 0000000000000078 [ 503.044022] RBP: ffff88809b6afcf0 R08: ffff8880a85d0b30 R09: 0000000000000000 [ 503.051628] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 503.058932] R13: ffff88809b6afcc8 R14: ffff88809b6afe58 R15: ffff8880a72f0380 [ 503.066241] FS: 00007fab337ff700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 503.074477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.080375] CR2: 00007fab337fee78 CR3: 000000009437a000 CR4: 00000000001406f0 [ 503.087847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.095363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.102744] Kernel panic - not syncing: Fatal exception [ 503.110060] Kernel Offset: disabled [ 503.113684] Rebooting in 86400 seconds..