[ 396.677596] device bridge_slave_1 left promiscuous mode [ 396.683684] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.738817] device bridge_slave_0 left promiscuous mode [ 396.744321] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.537343] device hsr_slave_1 left promiscuous mode [ 399.590195] device hsr_slave_0 left promiscuous mode [ 399.630440] team0 (unregistering): Port device team_slave_1 removed [ 399.639528] team0 (unregistering): Port device team_slave_0 removed [ 399.649274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 399.699085] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 399.774672] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts. [ 400.952936] IPVS: ftp: loaded support on port[0] = 21 [ 401.014274] chnl_net:caif_netlink_parms(): no params data found [ 401.040509] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.047255] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.054231] device bridge_slave_0 entered promiscuous mode [ 401.061767] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.070366] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.077624] device bridge_slave_1 entered promiscuous mode [ 401.092929] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 401.101741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 401.118923] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 401.126276] team0: Port device team_slave_0 added [ 401.131611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 401.139436] team0: Port device team_slave_1 added [ 401.144863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 401.152398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 401.207818] device hsr_slave_0 entered promiscuous mode [ 401.236174] device hsr_slave_1 entered promiscuous mode [ 402.206726] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 402.214797] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 402.230132] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 402.703367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.714368] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 402.722971] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 402.731259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.738859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.212808] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 403.219247] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.227776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 403.234889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.243864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.252268] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.258725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.787099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.795711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 403.804583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 403.811993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.820211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.828324] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.834695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.841983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.853063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 403.860023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.328630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 404.336948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.344990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.354114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.362985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 404.831001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.838796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.848003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 404.856439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.863924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.872918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 404.883171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.893545] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 404.899863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 404.907341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 404.914822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.385143] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 405.393956] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 405.401055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.407963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.419410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.427909] device bridge_slave_1 left promiscuous mode [ 406.433818] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.456726] device bridge_slave_0 left promiscuous mode [ 406.462920] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.527364] device bridge_slave_1 left promiscuous mode [ 406.533020] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.576605] device bridge_slave_0 left promiscuous mode [ 406.582114] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.637878] device bridge_slave_1 left promiscuous mode [ 406.643352] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.686234] device bridge_slave_0 left promiscuous mode [ 406.691929] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.736661] device bridge_slave_1 left promiscuous mode [ 406.742373] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.786349] device bridge_slave_0 left promiscuous mode [ 406.792110] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.836617] device bridge_slave_1 left promiscuous mode [ 406.842210] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.906246] device bridge_slave_0 left promiscuous mode [ 406.911910] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.318666] device hsr_slave_1 left promiscuous mode [ 412.357501] device hsr_slave_0 left promiscuous mode [ 412.408620] team0 (unregistering): Port device team_slave_1 removed [ 412.417882] team0 (unregistering): Port device team_slave_0 removed [ 412.427776] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 412.469612] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 412.533340] bond0 (unregistering): Released all slaves [ 412.616733] device hsr_slave_1 left promiscuous mode [ 412.657328] device hsr_slave_0 left promiscuous mode [ 412.697859] team0 (unregistering): Port device team_slave_1 removed [ 412.708357] team0 (unregistering): Port device team_slave_0 removed [ 412.719171] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 412.788040] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 412.853969] bond0 (unregistering): Released all slaves [ 412.947496] device hsr_slave_1 left promiscuous mode [ 412.998825] device hsr_slave_0 left promiscuous mode [ 413.039312] team0 (unregistering): Port device team_slave_1 removed [ 413.049681] team0 (unregistering): Port device team_slave_0 removed [ 413.060075] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 413.099236] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 413.153115] bond0 (unregistering): Released all slaves [ 413.237505] device hsr_slave_1 left promiscuous mode [ 413.278847] device hsr_slave_0 left promiscuous mode [ 413.319000] team0 (unregistering): Port device team_slave_1 removed [ 413.328006] team0 (unregistering): Port device team_slave_0 removed [ 413.337531] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 413.388194] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 413.444689] bond0 (unregistering): Released all slaves [ 413.526808] device hsr_slave_1 left promiscuous mode [ 413.567339] device hsr_slave_0 left promiscuous mode [ 413.607386] team0 (unregistering): Port device team_slave_1 removed [ 413.617621] team0 (unregistering): Port device team_slave_0 removed [ 413.627234] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 413.658034] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 413.714152] bond0 (unregistering): Released all slaves [ 421.999077] kasan: CONFIG_KASAN_INLINE enabled [ 422.004012] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 422.011581] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 422.018177] CPU: 0 PID: 25571 Comm: syz-executor082 Not tainted 4.19.163-syzkaller #0 [ 422.026331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.035855] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 422.040697] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 422.059679] RSP: 0018:ffff8881f492fba8 EFLAGS: 00010206 [ 422.065029] RAX: dffffc0000000000 RBX: 1ffff1103e925f79 RCX: 1ffff1103c5cf997 [ 422.072386] RDX: 000000000000000f RSI: ffff8881e2e7cc98 RDI: 0000000000000078 [ 422.079827] RBP: ffff8881f492fcf0 R08: ffff8881e2e7ccb8 R09: 0000000000000000 [ 422.087307] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 422.094563] R13: ffff8881f492fcc8 R14: ffff8881f492fe58 R15: ffff8881db8b1140 [ 422.101972] FS: 00007f2097555700(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 422.110203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.116068] CR2: 00007f2097554e78 CR3: 00000001f3f8c001 CR4: 00000000001606f0 [ 422.123410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.131037] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.138298] Call Trace: [ 422.140880] ? find_held_lock+0x36/0x1d0 [ 422.144942] ? tcp_ioctl+0x600/0x600 [ 422.148641] ? mark_held_locks+0xc7/0x130 [ 422.152764] ? __local_bh_enable_ip+0x160/0x260 [ 422.157417] ? lockdep_hardirqs_on+0x421/0x5c0 [ 422.161970] ? __local_bh_enable_ip+0x160/0x260 [ 422.166617] ? lock_sock_nested+0x82/0x100 [ 422.170828] ? trace_hardirqs_on+0x28/0x190 [ 422.175146] ? lock_sock_nested+0x82/0x100 [ 422.179797] ? lock_sock_nested+0x82/0x100 [ 422.184032] ? __local_bh_enable_ip+0x160/0x260 [ 422.188683] smc_splice_read+0x1f6/0x330 [ 422.192732] sock_splice_read+0x92/0x120 [ 422.196772] do_splice_to+0xe3/0x120 [ 422.200470] do_splice+0xe40/0x12d0 [ 422.204419] ? ksys_dup3+0x2e0/0x2e0 [ 422.208117] ? opipe_prep.part.13+0x320/0x320 [ 422.212864] ? __fget_light+0x174/0x1e0 [ 422.216817] __x64_sys_splice+0x248/0x300 [ 422.220959] do_syscall_64+0xd0/0x4e0 [ 422.224859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.230023] RIP: 0033:0x448529 [ 422.233200] Code: e8 0c 0f 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.252080] RSP: 002b:00007f2097554d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 422.259765] RAX: ffffffffffffffda RBX: 00000000006ddc78 RCX: 0000000000448529 [ 422.267009] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 422.274254] RBP: 00000000006ddc70 R08: 000000000d86dac9 R09: 0000000000000000 [ 422.281513] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006ddc7c [ 422.288759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000064616561 [ 422.296025] Modules linked in: [ 422.299883] ---[ end trace 10a413fd9871b96f ]--- [ 422.304728] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 422.309580] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 422.329022] RSP: 0018:ffff8881f492fba8 EFLAGS: 00010206 [ 422.334479] RAX: dffffc0000000000 RBX: 1ffff1103e925f79 RCX: 1ffff1103c5cf997 [ 422.341762] RDX: 000000000000000f RSI: ffff8881e2e7cc98 RDI: 0000000000000078 [ 422.350902] RBP: ffff8881f492fcf0 R08: ffff8881e2e7ccb8 R09: 0000000000000000 [ 422.358233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 422.365536] R13: ffff8881f492fcc8 R14: ffff8881f492fe58 R15: ffff8881db8b1140 [ 422.372792] FS: 00007f2097555700(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 422.381462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.387394] CR2: 00007f2097554e78 CR3: 00000001f3f8c001 CR4: 00000000001606f0 [ 422.394747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.402134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.409441] Kernel panic - not syncing: Fatal exception [ 422.416660] Kernel Offset: disabled [ 422.420362] Rebooting in 86400 seconds..