[ 402.129058] device bridge_slave_1 left promiscuous mode [ 402.134814] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.180327] device bridge_slave_0 left promiscuous mode [ 402.185826] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.939510] device hsr_slave_1 left promiscuous mode [ 404.991150] device hsr_slave_0 left promiscuous mode [ 405.032086] team0 (unregistering): Port device team_slave_1 removed [ 405.041255] team0 (unregistering): Port device team_slave_0 removed [ 405.051512] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 405.100429] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 405.176899] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.51' (ECDSA) to the list of known hosts. [ 405.442908] IPVS: ftp: loaded support on port[0] = 21 [ 405.550640] chnl_net:caif_netlink_parms(): no params data found [ 405.594908] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.606364] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.614586] device bridge_slave_0 entered promiscuous mode [ 405.626526] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.633882] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.645927] device bridge_slave_1 entered promiscuous mode [ 405.669539] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 405.685269] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 405.705610] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 405.718707] team0: Port device team_slave_0 added [ 405.724315] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 405.737298] team0: Port device team_slave_1 added [ 405.743653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 405.756317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 405.840160] device hsr_slave_0 entered promiscuous mode [ 405.897815] device hsr_slave_1 entered promiscuous mode [ 405.938036] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 405.945093] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 405.964991] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.971460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.978453] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.984803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.033927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.042893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 406.057544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.065657] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.079096] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.089410] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 406.095492] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.111148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.121366] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.127756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.137096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.150007] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.156359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.179502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.187191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.195347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.205501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.216613] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 406.223076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.231209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.238385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.251421] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 406.259576] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 406.273416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.280471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.294871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.629909] device bridge_slave_1 left promiscuous mode [ 409.635666] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.667925] device bridge_slave_0 left promiscuous mode [ 409.673564] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.728105] device bridge_slave_1 left promiscuous mode [ 409.733682] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.787906] device bridge_slave_0 left promiscuous mode [ 409.793526] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.848549] device bridge_slave_1 left promiscuous mode [ 409.854690] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.907824] device bridge_slave_0 left promiscuous mode [ 409.921981] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.968243] device bridge_slave_1 left promiscuous mode [ 409.973711] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.027818] device bridge_slave_0 left promiscuous mode [ 410.033471] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.088784] device bridge_slave_1 left promiscuous mode [ 410.094382] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.148084] device bridge_slave_0 left promiscuous mode [ 410.154529] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.738682] device hsr_slave_1 left promiscuous mode [ 415.779227] device hsr_slave_0 left promiscuous mode [ 415.819440] team0 (unregistering): Port device team_slave_1 removed [ 415.829473] team0 (unregistering): Port device team_slave_0 removed [ 415.839301] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 415.890131] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 415.964355] bond0 (unregistering): Released all slaves [ 416.069266] device hsr_slave_1 left promiscuous mode [ 416.110805] device hsr_slave_0 left promiscuous mode [ 416.151348] team0 (unregistering): Port device team_slave_1 removed [ 416.160160] team0 (unregistering): Port device team_slave_0 removed [ 416.169952] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 416.219964] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 416.285887] bond0 (unregistering): Released all slaves [ 416.418842] device hsr_slave_1 left promiscuous mode [ 416.461728] device hsr_slave_0 left promiscuous mode [ 416.520633] team0 (unregistering): Port device team_slave_1 removed [ 416.530033] team0 (unregistering): Port device team_slave_0 removed [ 416.541698] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 416.600827] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 416.656279] bond0 (unregistering): Released all slaves [ 416.739478] device hsr_slave_1 left promiscuous mode [ 416.789983] device hsr_slave_0 left promiscuous mode [ 416.829222] team0 (unregistering): Port device team_slave_1 removed [ 416.840636] team0 (unregistering): Port device team_slave_0 removed [ 416.849336] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 416.890312] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 416.945084] bond0 (unregistering): Released all slaves [ 417.029741] device hsr_slave_1 left promiscuous mode [ 417.069144] device hsr_slave_0 left promiscuous mode [ 417.129311] team0 (unregistering): Port device team_slave_1 removed [ 417.140133] team0 (unregistering): Port device team_slave_0 removed [ 417.149491] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 417.190852] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 417.263993] bond0 (unregistering): Released all slaves [ 417.609730] kasan: CONFIG_KASAN_INLINE enabled [ 417.614821] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 417.623779] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 417.630036] CPU: 0 PID: 16666 Comm: syz-executor009 Not tainted 4.19.171-syzkaller #0 [ 417.637983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.647615] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 417.652437] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 417.671424] RSP: 0018:ffff8881df4ffba8 EFLAGS: 00010206 [ 417.676765] RAX: dffffc0000000000 RBX: 1ffff1103be9ff79 RCX: 1ffff1103dbff15f [ 417.684026] RDX: 000000000000000f RSI: ffff8881edff8ad8 RDI: 0000000000000078 [ 417.691277] RBP: ffff8881df4ffcf0 R08: ffff8881edff8af8 R09: 0000000000000000 [ 417.698525] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 417.705872] R13: ffff8881df4ffcc8 R14: ffff8881df4ffe58 R15: ffff8881d9714d80 [ 417.713393] FS: 00007fe232986700(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 417.721620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.727478] CR2: 00007f1c8b383000 CR3: 00000001eaba1005 CR4: 00000000001606f0 [ 417.734727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.741988] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.749254] Call Trace: [ 417.751820] ? find_held_lock+0x36/0x1d0 [ 417.755871] ? tcp_ioctl+0x600/0x600 [ 417.759575] ? mark_held_locks+0xc7/0x130 [ 417.763733] ? __local_bh_enable_ip+0x160/0x260 [ 417.768395] ? lockdep_hardirqs_on+0x421/0x5c0 [ 417.772953] ? __local_bh_enable_ip+0x160/0x260 [ 417.777599] ? lock_sock_nested+0x82/0x100 [ 417.781822] ? trace_hardirqs_on+0x28/0x190 [ 417.786116] ? lock_sock_nested+0x82/0x100 [ 417.790341] ? lock_sock_nested+0x82/0x100 [ 417.794561] ? __local_bh_enable_ip+0x160/0x260 [ 417.799385] smc_splice_read+0x1f6/0x330 [ 417.803428] sock_splice_read+0x92/0x120 [ 417.807547] do_splice_to+0xe3/0x120 [ 417.811264] do_splice+0xe40/0x12d0 [ 417.814908] ? ksys_dup3+0x2e0/0x2e0 [ 417.818629] ? opipe_prep.part.13+0x320/0x320 [ 417.823104] ? __fget_light+0x174/0x1e0 [ 417.827068] __x64_sys_splice+0x248/0x300 [ 417.831209] do_syscall_64+0xd0/0x4e0 [ 417.835006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.840197] RIP: 0033:0x448529 [ 417.843366] Code: e8 0c 0f 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 417.862283] RSP: 002b:00007fe232985d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 417.869970] RAX: ffffffffffffffda RBX: 00000000006ddc78 RCX: 0000000000448529 [ 417.877216] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 417.884460] RBP: 00000000006ddc70 R08: 000000000d86dac9 R09: 0000000000000000 [ 417.891707] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006ddc7c [ 417.898968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000064616561 [ 417.906219] Modules linked in: [ 417.915415] ---[ end trace 3adf17a22895b39d ]--- [ 417.920233] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 417.925091] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 417.944730] RSP: 0018:ffff8881df4ffba8 EFLAGS: 00010206 [ 417.950460] RAX: dffffc0000000000 RBX: 1ffff1103be9ff79 RCX: 1ffff1103dbff15f [ 417.960516] RDX: 000000000000000f RSI: ffff8881edff8ad8 RDI: 0000000000000078 [ 417.968741] RBP: ffff8881df4ffcf0 R08: ffff8881edff8af8 R09: 0000000000000000 [ 417.976029] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 417.983806] R13: ffff8881df4ffcc8 R14: ffff8881df4ffe58 R15: ffff8881d9714d80 [ 417.991468] FS: 00007fe232986700(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 418.000022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.005904] CR2: 000055a895212288 CR3: 00000001eaba1005 CR4: 00000000001606f0 [ 418.013759] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 418.021944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.029550] Kernel panic - not syncing: Fatal exception [ 418.036651] Kernel Offset: disabled [ 418.040273] Rebooting in 86400 seconds..