[ 461.217189] device bridge_slave_1 left promiscuous mode [ 461.223149] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.279078] device bridge_slave_0 left promiscuous mode [ 461.284766] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.075703] device hsr_slave_1 left promiscuous mode [ 464.116803] device hsr_slave_0 left promiscuous mode [ 464.169154] team0 (unregistering): Port device team_slave_1 removed [ 464.178336] team0 (unregistering): Port device team_slave_0 removed [ 464.187968] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 464.227336] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 464.283477] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.32' (ECDSA) to the list of known hosts. [ 465.380043] IPVS: ftp: loaded support on port[0] = 21 [ 465.440574] chnl_net:caif_netlink_parms(): no params data found [ 465.467656] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.474283] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.481110] device bridge_slave_0 entered promiscuous mode [ 465.488611] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.495296] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.502132] device bridge_slave_1 entered promiscuous mode [ 465.516619] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 465.525985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 465.542514] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 465.550330] team0: Port device team_slave_0 added [ 465.555953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 465.563089] team0: Port device team_slave_1 added [ 465.568647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 465.575989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 465.627386] device hsr_slave_0 entered promiscuous mode [ 465.664489] device hsr_slave_1 entered promiscuous mode [ 465.706937] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 465.713937] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 466.454427] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.461242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.468077] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.474533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.482881] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.490059] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.877867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.886115] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 466.894298] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 466.900603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.908475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.293729] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 467.299904] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.308742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 467.316436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.324729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.332957] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.339354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.713737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 467.721796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.730904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.739364] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.745880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.754851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 467.763057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 468.140876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.149256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.159105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 468.166731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.174782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.186130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 468.192957] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.199982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.210308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.592797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 468.600459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.608388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.619305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 468.627374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.636226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.646031] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 468.652141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.030519] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 469.041484] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 469.047871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.054658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.065724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.896411] device bridge_slave_1 left promiscuous mode [ 469.901889] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.944518] device bridge_slave_0 left promiscuous mode [ 469.950054] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.004446] device bridge_slave_1 left promiscuous mode [ 470.009894] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.044060] device bridge_slave_0 left promiscuous mode [ 470.049592] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.124510] device bridge_slave_1 left promiscuous mode [ 470.129954] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.174038] device bridge_slave_0 left promiscuous mode [ 470.179548] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.234506] device bridge_slave_1 left promiscuous mode [ 470.240066] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.284145] device bridge_slave_0 left promiscuous mode [ 470.289593] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.335091] device bridge_slave_1 left promiscuous mode [ 470.340749] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.394258] device bridge_slave_0 left promiscuous mode [ 470.399774] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.873720] device hsr_slave_1 left promiscuous mode [ 478.916731] device hsr_slave_0 left promiscuous mode [ 478.966535] team0 (unregistering): Port device team_slave_1 removed [ 478.975459] team0 (unregistering): Port device team_slave_0 removed [ 478.985591] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 479.027014] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 479.079884] bond0 (unregistering): Released all slaves [ 479.163796] device hsr_slave_1 left promiscuous mode [ 479.224553] device hsr_slave_0 left promiscuous mode [ 479.275868] team0 (unregistering): Port device team_slave_1 removed [ 479.284786] team0 (unregistering): Port device team_slave_0 removed [ 479.294025] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 479.336921] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 479.402076] bond0 (unregistering): Released all slaves [ 479.463858] device hsr_slave_1 left promiscuous mode [ 479.515992] device hsr_slave_0 left promiscuous mode [ 479.556249] team0 (unregistering): Port device team_slave_1 removed [ 479.565092] team0 (unregistering): Port device team_slave_0 removed [ 479.574470] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 479.624941] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 479.689538] bond0 (unregistering): Released all slaves [ 479.774596] device hsr_slave_1 left promiscuous mode [ 479.824483] device hsr_slave_0 left promiscuous mode [ 479.864605] team0 (unregistering): Port device team_slave_1 removed [ 479.874686] team0 (unregistering): Port device team_slave_0 removed [ 479.884514] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 479.906945] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 479.979133] bond0 (unregistering): Released all slaves [ 480.073651] device hsr_slave_1 left promiscuous mode [ 480.114772] device hsr_slave_0 left promiscuous mode [ 480.154534] team0 (unregistering): Port device team_slave_1 removed [ 480.163900] team0 (unregistering): Port device team_slave_0 removed [ 480.172517] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 480.215184] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 480.279835] bond0 (unregistering): Released all slaves [ 483.269900] kasan: CONFIG_KASAN_INLINE enabled [ 483.275044] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 483.283145] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 483.289377] CPU: 1 PID: 7462 Comm: syz-executor343 Not tainted 4.19.160-syzkaller #0 [ 483.297321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.306699] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 483.311521] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 483.331611] RSP: 0018:ffff8881ed147ba8 EFLAGS: 00010206 [ 483.336962] RAX: dffffc0000000000 RBX: 1ffff1103da28f79 RCX: 1ffff1103dd5d11f [ 483.344211] RDX: 000000000000000f RSI: ffff8881eeae88d8 RDI: 0000000000000078 [ 483.351464] RBP: ffff8881ed147cf0 R08: ffff8881eeae88f8 R09: 0000000000000000 [ 483.358722] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 483.365977] R13: ffff8881ed147cc8 R14: ffff8881ed147e58 R15: ffff8881e9e765c0 [ 483.373219] FS: 00007f28e19f3700(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 483.381430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.387286] CR2: 00007f28e19f2e78 CR3: 00000001d9439001 CR4: 00000000001606e0 [ 483.394554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.402235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.409482] Call Trace: [ 483.412064] ? find_held_lock+0x36/0x1d0 [ 483.416101] ? tcp_ioctl+0x600/0x600 [ 483.419788] ? mark_held_locks+0xc7/0x130 [ 483.423910] ? __local_bh_enable_ip+0x160/0x260 [ 483.428555] ? lockdep_hardirqs_on+0x421/0x5c0 [ 483.433130] ? __local_bh_enable_ip+0x160/0x260 [ 483.437772] ? lock_sock_nested+0x82/0x100 [ 483.441979] ? trace_hardirqs_on+0x28/0x190 [ 483.446286] ? lock_sock_nested+0x82/0x100 [ 483.450496] ? lock_sock_nested+0x82/0x100 [ 483.454713] ? __local_bh_enable_ip+0x160/0x260 [ 483.459366] smc_splice_read+0x1f6/0x330 [ 483.463751] sock_splice_read+0x92/0x120 [ 483.467793] do_splice_to+0xe3/0x120 [ 483.471481] do_splice+0xe40/0x12d0 [ 483.475093] ? ksys_dup3+0x2e0/0x2e0 [ 483.478780] ? opipe_prep.part.13+0x320/0x320 [ 483.483257] ? __fget_light+0x174/0x1e0 [ 483.487215] __x64_sys_splice+0x248/0x300 [ 483.491337] do_syscall_64+0xd0/0x4e0 [ 483.495114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.500288] RIP: 0033:0x448529 [ 483.503454] Code: e8 0c 0f 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 483.522348] RSP: 002b:00007f28e19f2d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 483.530045] RAX: ffffffffffffffda RBX: 00000000006ddc78 RCX: 0000000000448529 [ 483.537288] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 483.544544] RBP: 00000000006ddc70 R08: 000000000d86dac9 R09: 0000000000000000 [ 483.551786] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006ddc7c [ 483.559028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000064616561 [ 483.566281] Modules linked in: [ 483.572504] ---[ end trace cdbeff5e0b5dc734 ]--- [ 483.577330] RIP: 0010:tcp_splice_read+0x140/0x8f0 [ 483.582574] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 a2 07 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 34 06 00 00 31 c0 41 f6 44 24 [ 483.601870] RSP: 0018:ffff8881ed147ba8 EFLAGS: 00010206 [ 483.607248] RAX: dffffc0000000000 RBX: 1ffff1103da28f79 RCX: 1ffff1103dd5d11f [ 483.614574] RDX: 000000000000000f RSI: ffff8881eeae88d8 RDI: 0000000000000078 [ 483.621999] RBP: ffff8881ed147cf0 R08: ffff8881eeae88f8 R09: 0000000000000000 [ 483.629442] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 483.636730] R13: ffff8881ed147cc8 R14: ffff8881ed147e58 R15: ffff8881e9e765c0 [ 483.644021] FS: 00007f28e19f3700(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 483.652259] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.658135] CR2: 00007fe9d40340d8 CR3: 00000001d9439006 CR4: 00000000001606f0 [ 483.666393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.673700] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.680960] Kernel panic - not syncing: Fatal exception [ 483.687632] Kernel Offset: disabled [ 483.691283] Rebooting in 86400 seconds..