Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:65314' (ECDSA) to the list of known hosts. 2020/07/24 06:18:59 fuzzer started 2020/07/24 06:19:00 dialing manager at 10.0.2.10:40863 2020/07/24 06:19:01 syscalls: 3210 2020/07/24 06:19:01 code coverage: enabled 2020/07/24 06:19:01 comparison tracing: enabled 2020/07/24 06:19:01 extra coverage: enabled 2020/07/24 06:19:01 setuid sandbox: enabled 2020/07/24 06:19:01 namespace sandbox: enabled 2020/07/24 06:19:01 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/24 06:19:01 fault injection: enabled 2020/07/24 06:19:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/24 06:19:01 net packet injection: enabled 2020/07/24 06:19:01 net device setup: enabled 2020/07/24 06:19:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/24 06:19:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/24 06:19:01 USB emulation: enabled 06:20:11 executing program 0: 06:20:12 executing program 1: 06:20:12 executing program 2: 06:20:13 executing program 3: syzkaller login: [ 277.383813][ T9776] IPVS: ftp: loaded support on port[0] = 21 [ 277.407428][ T9774] IPVS: ftp: loaded support on port[0] = 21 [ 277.851737][ T9778] IPVS: ftp: loaded support on port[0] = 21 [ 278.295545][ T9776] chnl_net:caif_netlink_parms(): no params data found [ 278.308619][ T9779] IPVS: ftp: loaded support on port[0] = 21 [ 278.443012][ T9774] chnl_net:caif_netlink_parms(): no params data found [ 278.617897][ T9778] chnl_net:caif_netlink_parms(): no params data found [ 278.712301][ T9776] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.730136][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.751257][ T9776] device bridge_slave_0 entered promiscuous mode [ 278.781551][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.797538][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.818485][ T9776] device bridge_slave_1 entered promiscuous mode [ 278.881381][ T9774] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.910131][ T9774] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.934591][ T9774] device bridge_slave_0 entered promiscuous mode [ 278.997819][ T9774] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.026606][ T9774] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.058102][ T9774] device bridge_slave_1 entered promiscuous mode [ 279.102710][ T9776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.148315][ T9776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.233733][ T9774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.259594][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.277586][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.296694][ T9778] device bridge_slave_0 entered promiscuous mode [ 279.321254][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.341073][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.362934][ T9778] device bridge_slave_1 entered promiscuous mode [ 279.390307][ T9774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.449059][ T9776] team0: Port device team_slave_0 added [ 279.470222][ T9774] team0: Port device team_slave_0 added [ 279.486699][ T9779] chnl_net:caif_netlink_parms(): no params data found [ 279.536402][ T9776] team0: Port device team_slave_1 added [ 279.570624][ T9774] team0: Port device team_slave_1 added [ 279.608714][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.743112][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.801185][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.819393][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.903695][ T9776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.965367][ T9774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.981756][ T9774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.064409][ T9774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.102566][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.125959][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.193864][ T9776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.240025][ T9774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.255795][ T9774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.329237][ T9774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.370271][ T9778] team0: Port device team_slave_0 added [ 280.397728][ T9778] team0: Port device team_slave_1 added [ 280.438889][ T9779] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.457353][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.477916][ T9779] device bridge_slave_0 entered promiscuous mode [ 280.504739][ T9779] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.531345][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.568474][ T9779] device bridge_slave_1 entered promiscuous mode [ 280.605309][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.631521][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.749161][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.824508][ T9779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.863512][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.884290][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.969721][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.084952][ T9776] device hsr_slave_0 entered promiscuous mode [ 281.171504][ T9776] device hsr_slave_1 entered promiscuous mode [ 281.308614][ T9774] device hsr_slave_0 entered promiscuous mode [ 281.366023][ T9774] device hsr_slave_1 entered promiscuous mode [ 281.456902][ T9774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.484160][ T9774] Cannot create hsr debugfs directory [ 281.504933][ T9779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.679153][ T9778] device hsr_slave_0 entered promiscuous mode [ 281.746089][ T9778] device hsr_slave_1 entered promiscuous mode [ 281.836324][ T9778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.875396][ T9778] Cannot create hsr debugfs directory [ 281.907812][ T9779] team0: Port device team_slave_0 added [ 281.946418][ T9779] team0: Port device team_slave_1 added [ 282.049771][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.069084][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.136048][ T9779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.188758][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.206437][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.270325][ T9779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.528889][ T9779] device hsr_slave_0 entered promiscuous mode [ 282.597511][ T9779] device hsr_slave_1 entered promiscuous mode [ 282.676450][ T9779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.701743][ T9779] Cannot create hsr debugfs directory [ 282.886726][ T9776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.986783][ T9776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.084165][ T9776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.156448][ T9776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 283.323529][ T9774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.411234][ T9774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.508680][ T9774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.630492][ T9774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.740698][ T9778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.832101][ T9778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.934353][ T9778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 284.021514][ T9778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.172998][ T9779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.279846][ T9779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.373454][ T9779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.482837][ T9779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 284.812996][ T9776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.917141][ T9774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.993737][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.034329][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.089004][ T9776] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.121267][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.152562][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.221593][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.292283][ T9774] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.383643][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.458746][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.526671][ T2850] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.587128][ T2850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.670674][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.714619][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.751439][ T2850] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.805184][ T2850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.862033][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.931669][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.988714][ T2850] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.028501][ T2850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.070390][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.129932][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.215180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.272968][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.321802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.364066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.411185][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.456988][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.507405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.558804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.612067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.675219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.728559][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.778350][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.871885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.924573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.979282][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.034531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.088784][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.145053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.200730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.277535][ T9778] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.331519][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.388821][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.468808][ T9774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.543983][ T9774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.633466][ T9779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.687553][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.740577][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.792673][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.862765][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.931039][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.986375][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.037627][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.087204][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.127407][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.177875][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.232691][ T9799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.287506][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.337630][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.413554][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.465023][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.528831][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.599639][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.657606][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.705152][ T9800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.766703][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.807837][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.873741][ T9779] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.914890][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.966453][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.010267][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.050005][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.109997][ T9776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.166765][ T9774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.216713][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.258788][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.308334][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.355332][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.408427][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.447476][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.487073][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.540860][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.581332][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.621980][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.676206][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.710638][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.758054][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.827133][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.891290][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.962331][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.055362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.128635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.222532][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.323260][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.449701][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.541742][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.681089][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.773683][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.858720][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.940599][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.025215][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.091508][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.197887][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.262620][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.329012][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.395028][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.461610][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.534087][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.599218][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.661686][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.730738][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.817067][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.914601][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.001073][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.081284][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.167429][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.244288][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.350245][ T9774] device veth0_vlan entered promiscuous mode [ 292.420216][ T9779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.499410][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.566248][ T9776] device veth0_vlan entered promiscuous mode [ 292.648454][ T9774] device veth1_vlan entered promiscuous mode [ 292.728483][ T9776] device veth1_vlan entered promiscuous mode [ 292.798391][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.867544][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.944940][ T9779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.012859][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.082341][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.195355][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.274754][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.370918][ T9774] device veth0_macvtap entered promiscuous mode [ 293.438918][ T9778] device veth0_vlan entered promiscuous mode [ 293.512336][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.582369][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.650933][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.718702][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.787986][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.861616][ T9774] device veth1_macvtap entered promiscuous mode [ 293.940446][ T9778] device veth1_vlan entered promiscuous mode [ 294.017523][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.096755][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.170121][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.257980][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.341921][ T9776] device veth0_macvtap entered promiscuous mode [ 294.414401][ T9776] device veth1_macvtap entered promiscuous mode [ 294.527119][ T9779] device veth0_vlan entered promiscuous mode [ 294.601743][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.679146][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.753934][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.817829][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.894630][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.969844][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.049041][ T9774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.129270][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.210940][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.305676][ T9776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.403415][ T9776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.526475][ T9776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.633291][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.711320][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.787245][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.860988][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.946282][ T9774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.030917][ T9779] device veth1_vlan entered promiscuous mode [ 296.108857][ T9776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 296.217335][ T9776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.332520][ T9776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.408640][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.497319][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.572224][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.647968][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.027730][ T9778] device veth0_macvtap entered promiscuous mode [ 297.092615][ T9778] device veth1_macvtap entered promiscuous mode [ 297.452984][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.581534][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.661478][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.759964][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.857866][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.024720][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.118545][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.210137][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.300270][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.387789][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.497983][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.609184][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.698850][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.712730][ T9774] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 298.789881][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.354220][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.556260][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 06:20:35 executing program 0: [ 299.729171][ T9779] device veth0_macvtap entered promiscuous mode [ 299.829822][ T9779] device veth1_macvtap entered promiscuous mode 06:20:35 executing program 0: 06:20:36 executing program 1: 06:20:36 executing program 0: 06:20:36 executing program 0: [ 300.179047][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:20:36 executing program 1: [ 300.284609][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.386278][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.509795][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.617260][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.740430][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.842470][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.923785][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.009215][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.097606][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.202469][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.335001][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.449281][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.562001][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.687740][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.797486][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.912882][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.008787][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 06:20:38 executing program 2: [ 302.110965][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:20:38 executing program 3: 06:20:38 executing program 0: 06:20:38 executing program 1: 06:20:38 executing program 2: 06:20:38 executing program 1: 06:20:38 executing program 0: 06:20:38 executing program 2: 06:20:38 executing program 3: 06:20:38 executing program 2: 06:20:38 executing program 0: 06:20:39 executing program 3: 06:20:39 executing program 1: 06:20:39 executing program 0: 06:20:39 executing program 2: 06:20:39 executing program 1: 06:20:39 executing program 2: 06:20:39 executing program 3: 06:20:39 executing program 1: 06:20:39 executing program 0: 06:20:39 executing program 2: 06:20:39 executing program 3: 06:20:39 executing program 0: 06:20:39 executing program 2: 06:20:39 executing program 1: 06:20:39 executing program 3: 06:20:39 executing program 0: 06:20:40 executing program 3: 06:20:40 executing program 1: 06:20:40 executing program 2: 06:20:40 executing program 0: 06:20:40 executing program 3: 06:20:40 executing program 2: 06:20:40 executing program 1: 06:20:40 executing program 3: 06:20:40 executing program 1: 06:20:40 executing program 0: 06:20:40 executing program 2: 06:20:40 executing program 1: 06:20:40 executing program 3: 06:20:40 executing program 1: 06:20:40 executing program 0: 06:20:40 executing program 3: 06:20:40 executing program 1: 06:20:40 executing program 2: 06:20:40 executing program 3: 06:20:40 executing program 0: 06:20:41 executing program 2: 06:20:41 executing program 1: 06:20:41 executing program 0: 06:20:41 executing program 3: 06:20:41 executing program 2: 06:20:41 executing program 0: 06:20:41 executing program 1: 06:20:41 executing program 3: 06:20:41 executing program 0: 06:20:41 executing program 2: 06:20:41 executing program 0: 06:20:41 executing program 1: 06:20:41 executing program 3: 06:20:41 executing program 0: 06:20:41 executing program 2: 06:20:41 executing program 1: 06:20:41 executing program 3: 06:20:41 executing program 0: 06:20:41 executing program 2: 06:20:41 executing program 3: 06:20:41 executing program 0: 06:20:41 executing program 1: 06:20:41 executing program 3: 06:20:41 executing program 2: 06:20:41 executing program 0: 06:20:41 executing program 1: 06:20:41 executing program 3: 06:20:41 executing program 0: 06:20:42 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 06:20:42 executing program 1: acct(0x0) creat(&(0x7f0000000000)='./file0\x00', 0x15c) 06:20:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 306.931139][ T3047] usb 8-1: new high-speed USB device number 2 using dummy_hcd 06:20:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 307.327155][ T3047] usb 8-1: device descriptor read/64, error 18 [ 307.683759][ T9955] ================================================================== [ 307.686022][ T9955] BUG: KASAN: vmalloc-out-of-bounds in bitfill_aligned+0x34a/0x400 [ 307.686022][ T9955] Write of size 8 at addr ffffc9000a311000 by task syz-executor.1/9955 [ 307.686022][ T9955] [ 307.686022][ T9955] CPU: 0 PID: 9955 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 307.686022][ T9955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 307.686022][ T9955] Call Trace: [ 307.686022][ T9955] dump_stack+0x18f/0x20d [ 307.686022][ T9955] ? bitfill_aligned+0x34a/0x400 [ 307.686022][ T9955] ? bitfill_aligned+0x34a/0x400 [ 307.686022][ T9955] print_address_description.constprop.0.cold+0x5/0x436 [ 307.686022][ T9955] ? lockdep_hardirqs_off+0x66/0xa0 [ 307.686022][ T9955] ? vprintk_func+0x97/0x1a6 [ 307.686022][ T9955] ? bitfill_aligned+0x34a/0x400 [ 307.686022][ T9955] kasan_report.cold+0x1f/0x37 [ 307.686022][ T9955] ? bitfill_aligned+0x34a/0x400 [ 307.686022][ T9955] bitfill_aligned+0x34a/0x400 [ 307.686022][ T9955] sys_fillrect+0x408/0x7a0 [ 307.686022][ T9955] ? sys_fillrect+0x7a0/0x7a0 [ 307.686022][ T9955] drm_fb_helper_sys_fillrect+0x1e/0x190 [ 307.686022][ T9955] bit_clear_margins+0x2d5/0x4a0 [ 307.686022][ T9955] ? bit_bmove+0x210/0x210 [ 307.686022][ T9955] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 307.686022][ T9955] ? fb_get_color_depth+0x11a/0x240 [ 307.686022][ T9955] fbcon_clear_margins+0x1d5/0x230 [ 307.686022][ T9955] fbcon_switch+0xb6e/0x16c0 [ 307.686022][ T9955] ? fbcon_scroll+0x3600/0x3600 [ 307.686022][ T9955] ? set_origin+0x156/0x3e0 [ 307.686022][ T9955] redraw_screen+0x2ae/0x770 [ 307.686022][ T9955] ? vc_init+0x440/0x440 [ 307.686022][ T9955] ? fb_get_color_depth+0x11a/0x240 [ 307.702309][ T9955] ? fbcon_set_palette+0x3a8/0x490 [ 307.702309][ T9955] fbcon_modechanged+0x575/0x710 [ 307.702309][ T9955] fbcon_update_vcs+0x3a/0x50 [ 307.702309][ T9955] fb_set_var+0xae8/0xd60 [ 307.702309][ T9955] ? fb_blank+0x190/0x190 [ 307.702309][ T9955] ? lock_release+0x8d0/0x8d0 [ 307.702309][ T9955] ? lock_is_held_type+0xb0/0xe0 [ 307.702309][ T9955] ? do_fb_ioctl+0x2f2/0x6c0 [ 307.702309][ T9955] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 307.702309][ T9955] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 307.702309][ T9955] ? trace_hardirqs_on+0x5f/0x220 [ 307.702309][ T9955] do_fb_ioctl+0x33f/0x6c0 [ 307.702309][ T9955] ? fb_set_suspend+0x1a0/0x1a0 [ 307.702309][ T9955] ? lock_downgrade+0x820/0x820 [ 307.702309][ T9955] ? trace_hardirqs_on+0x5f/0x220 [ 307.702309][ T9955] ? lockdep_hardirqs_on+0x6a/0xe0 [ 307.702309][ T9955] ? tomoyo_path_number_perm+0x244/0x4d0 [ 307.702309][ T9955] ? tomoyo_execute_permission+0x470/0x470 [ 307.702309][ T9955] ? __might_fault+0xef/0x1d0 [ 307.702309][ T9955] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 307.702309][ T9955] ? do_vfs_ioctl+0x27d/0x1090 [ 307.702309][ T9955] ? generic_block_fiemap+0x60/0x60 [ 307.702309][ T9955] fb_compat_ioctl+0x175/0xc10 [ 307.702309][ T9955] ? fb_open+0x430/0x430 [ 307.702309][ T9955] ? __fget_files+0x294/0x400 [ 307.702309][ T9955] ? fb_open+0x430/0x430 [ 307.702309][ T9955] __do_compat_sys_ioctl+0x1d3/0x230 [ 307.702309][ T9955] do_syscall_32_irqs_on+0x3f/0x60 [ 307.702309][ T9955] do_fast_syscall_32+0x7f/0x120 [ 307.702309][ T9955] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 307.702309][ T9955] RIP: 0023:0xf7fd7569 [ 307.702309][ T9955] Code: Bad RIP value. [ 307.702309][ T9955] RSP: 002b:00000000f5dd20bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 307.702309][ T9955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 307.702309][ T9955] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.702309][ T9955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.702309][ T9955] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 307.702309][ T9955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.702309][ T9955] [ 307.702309][ T9955] [ 307.702309][ T9955] Memory state around the buggy address: [ 307.702309][ T9955] ffffc9000a310f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 307.702309][ T9955] ffffc9000a310f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 307.702309][ T9955] >ffffc9000a311000: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 307.702309][ T9955] ^ [ 307.702309][ T9955] ffffc9000a311080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 307.702309][ T9955] ffffc9000a311100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 307.702309][ T9955] ================================================================== [ 307.702309][ T9955] Disabling lock debugging due to kernel taint [ 307.719954][ T9955] Kernel panic - not syncing: panic_on_warn set ... [ 307.720061][ T9955] CPU: 0 PID: 9955 Comm: syz-executor.1 Tainted: G B 5.8.0-rc6-syzkaller #0 [ 307.720066][ T9955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 307.720205][ T9955] Call Trace: [ 307.720613][ T9955] dump_stack+0x18f/0x20d [ 307.720628][ T9955] ? bitfill_aligned+0x290/0x400 [ 307.720987][ T9955] panic+0x2e3/0x75c [ 307.721001][ T9955] ? __warn_printk+0xf3/0xf3 [ 307.721016][ T9955] ? preempt_schedule_common+0x59/0xc0 [ 307.721032][ T9955] ? bitfill_aligned+0x34a/0x400 [ 307.721048][ T9955] ? preempt_schedule_thunk+0x16/0x18 [ 307.721064][ T9955] ? trace_hardirqs_on+0x55/0x220 [ 307.721077][ T9955] ? bitfill_aligned+0x34a/0x400 [ 307.721093][ T9955] ? bitfill_aligned+0x34a/0x400 [ 307.721108][ T9955] end_report+0x4d/0x53 [ 307.721116][ T9955] kasan_report.cold+0xd/0x37 [ 307.721125][ T9955] ? bitfill_aligned+0x34a/0x400 [ 307.721137][ T9955] bitfill_aligned+0x34a/0x400 [ 307.721151][ T9955] sys_fillrect+0x408/0x7a0 [ 307.721160][ T9955] ? sys_fillrect+0x7a0/0x7a0 [ 307.721172][ T9955] drm_fb_helper_sys_fillrect+0x1e/0x190 [ 307.721181][ T9955] bit_clear_margins+0x2d5/0x4a0 [ 307.721189][ T9955] ? bit_bmove+0x210/0x210 [ 307.721199][ T9955] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 307.721209][ T9955] ? fb_get_color_depth+0x11a/0x240 [ 307.721221][ T9955] fbcon_clear_margins+0x1d5/0x230 [ 307.721232][ T9955] fbcon_switch+0xb6e/0x16c0 [ 307.721244][ T9955] ? fbcon_scroll+0x3600/0x3600 [ 307.721262][ T9955] ? set_origin+0x156/0x3e0 [ 307.721274][ T9955] redraw_screen+0x2ae/0x770 [ 307.721286][ T9955] ? vc_init+0x440/0x440 [ 307.721298][ T9955] ? fb_get_color_depth+0x11a/0x240 [ 307.721318][ T9955] ? fbcon_set_palette+0x3a8/0x490 [ 307.721330][ T9955] fbcon_modechanged+0x575/0x710 [ 307.721342][ T9955] fbcon_update_vcs+0x3a/0x50 [ 307.721354][ T9955] fb_set_var+0xae8/0xd60 [ 307.721366][ T9955] ? fb_blank+0x190/0x190 [ 307.721378][ T9955] ? lock_release+0x8d0/0x8d0 [ 307.721389][ T9955] ? lock_is_held_type+0xb0/0xe0 [ 307.721401][ T9955] ? do_fb_ioctl+0x2f2/0x6c0 [ 307.721413][ T9955] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 307.721430][ T9955] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 307.721445][ T9955] ? trace_hardirqs_on+0x5f/0x220 [ 307.721457][ T9955] do_fb_ioctl+0x33f/0x6c0 [ 307.721469][ T9955] ? fb_set_suspend+0x1a0/0x1a0 [ 307.721482][ T9955] ? lock_downgrade+0x820/0x820 [ 307.721500][ T9955] ? trace_hardirqs_on+0x5f/0x220 [ 307.721528][ T9955] ? lockdep_hardirqs_on+0x6a/0xe0 [ 307.721539][ T9955] ? tomoyo_path_number_perm+0x244/0x4d0 [ 307.721549][ T9955] ? tomoyo_execute_permission+0x470/0x470 [ 307.721557][ T9955] ? __might_fault+0xef/0x1d0 [ 307.721571][ T9955] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 307.721579][ T9955] ? do_vfs_ioctl+0x27d/0x1090 [ 307.721587][ T9955] ? generic_block_fiemap+0x60/0x60 [ 307.721596][ T9955] fb_compat_ioctl+0x175/0xc10 [ 307.721609][ T9955] ? fb_open+0x430/0x430 [ 307.721619][ T9955] ? __fget_files+0x294/0x400 [ 307.721632][ T9955] ? fb_open+0x430/0x430 [ 307.721640][ T9955] __do_compat_sys_ioctl+0x1d3/0x230 [ 307.721649][ T9955] do_syscall_32_irqs_on+0x3f/0x60 [ 307.721658][ T9955] do_fast_syscall_32+0x7f/0x120 [ 307.721672][ T9955] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 307.721679][ T9955] RIP: 0023:0xf7fd7569 [ 307.721681][ T9955] Code: Bad RIP value. [ 307.721685][ T9955] RSP: 002b:00000000f5dd20bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 307.721693][ T9955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 307.721698][ T9955] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.721702][ T9955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.721706][ T9955] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 307.721711][ T9955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.727170][ T9955] Kernel Offset: disabled [ 307.727170][ T9955] Rebooting in 86400 seconds..