[ 468.546450][T12148] n_tty_write+0x90e/0xfa0 [ 468.550856][T12148] ? do_raw_spin_lock+0x123/0x2d0 [ 468.555869][T12148] ? __might_fault+0xf1/0x1b0 [ 468.560662][T12148] ? lock_downgrade+0x900/0x900 [ 468.565493][T12148] ? lock_acquire+0x194/0x410 [ 468.570157][T12148] ? n_tty_open+0x160/0x160 [ 468.574666][T12148] ? prepare_to_wait_exclusive+0x390/0x390 [ 468.580468][T12148] ? __kasan_check_write+0x14/0x20 [ 468.585584][T12148] tty_write+0x381/0x7d0 [ 468.589818][T12148] ? n_tty_open+0x160/0x160 [ 468.595022][T12148] do_iter_write+0x368/0x510 [ 468.599601][T12148] ? dup_iter+0x230/0x230 [ 468.604057][T12148] vfs_writev+0x16d/0x2d0 [ 468.608388][T12148] ? vfs_iter_write+0xb0/0xb0 [ 468.613107][T12148] ? ksys_dup3+0x2e0/0x2e0 [ 468.617515][T12148] ? wait_for_completion+0x460/0x460 [ 468.623073][T12148] ? __fget_light+0x179/0x1f0 [ 468.627741][T12148] do_writev+0x112/0x2e0 [ 468.631970][T12148] ? ksys_write+0x181/0x220 [ 468.636460][T12148] ? vfs_writev+0x2d0/0x2d0 [ 468.640946][T12148] ? trace_hardirqs_off_thunk+0x1a/0x20 [ 468.646480][T12148] __x64_sys_writev+0x70/0xb0 [ 468.651156][T12148] do_syscall_64+0xd0/0x540 [ 468.655665][T12148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.661537][T12148] RIP: 0033:0x45b399 [ 468.665571][T12148] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 468.685160][T12148] RSP: 002b:00007f60d58e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 468.693663][T12148] RAX: ffffffffffffffda RBX: 00007f60d58e36d4 RCX: 000000000045b399 [ 468.701625][T12148] RDX: 1000000000000252 RSI: 00000000200023c0 RDI: 0000000000000004 [ 468.709582][T12148] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 468.717541][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 468.725497][T12148] R13: 0000000000000cda R14: 00000000004c9ca0 R15: 0000000000000002 [ 468.733477][T12153] CPU: 0 PID: 12153 Comm: syz-executor.2 Not tainted 5.3.0-rc3-syzkaller #0 [ 468.742146][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.752329][T12153] Call Trace: [ 468.755609][T12153] dump_stack+0x113/0x167 [ 468.758383][T12157] FAULT_INJECTION: forcing a failure. [ 468.758383][T12157] name failslab, interval 1, probability 0, space 0, times 0 [ 468.759931][T12153] should_fail.cold.4+0x5/0x13 [ 468.777390][T12153] ? fault_create_debugfs_attr+0x150/0x150 [ 468.783179][T12153] ? lock_acquire+0x194/0x410 [ 468.787973][T12153] ? n_tty_write+0x8d8/0xfa0 [ 468.792656][T12153] __should_failslab+0xba/0xf0 [ 468.797490][T12153] should_failslab+0x9/0x14 [ 468.801980][T12153] __kmalloc+0x70/0x790 [ 468.806138][T12153] ? n_tty_write+0x8d8/0xfa0 [ 468.810708][T12153] ? __tty_buffer_request_room+0x1b1/0x550 [ 468.816649][T12153] __tty_buffer_request_room+0x1b1/0x550 [ 468.822277][T12153] tty_insert_flip_string_fixed_flag+0x77/0x1a0 [ 468.828519][T12153] pty_write+0xf3/0x200 [ 468.832664][T12153] n_tty_write+0x90e/0xfa0 [ 468.837071][T12153] ? __might_fault+0xf1/0x1b0 [ 468.842608][T12153] ? lock_downgrade+0x900/0x900 [ 468.847456][T12153] ? lock_acquire+0x194/0x410 [ 468.852140][T12153] ? n_tty_open+0x160/0x160 [ 468.856747][T12153] ? prepare_to_wait_exclusive+0x390/0x390 [ 468.862577][T12153] ? __kasan_check_write+0x14/0x20 [ 468.867672][T12153] tty_write+0x381/0x7d0 [ 468.871962][T12153] ? n_tty_open+0x160/0x160 [ 468.876464][T12153] do_iter_write+0x368/0x510 [ 468.881045][T12153] ? dup_iter+0x230/0x230 [ 468.885358][T12153] vfs_writev+0x16d/0x2d0 [ 468.889800][T12153] ? vfs_iter_write+0xb0/0xb0 [ 468.894566][T12153] ? ksys_dup3+0x2e0/0x2e0 [ 468.898964][T12153] ? wait_for_completion+0x460/0x460 [ 468.904353][T12153] ? __fget_light+0x179/0x1f0 [ 468.909009][T12153] do_writev+0x112/0x2e0 [ 468.913229][T12153] ? ksys_write+0x181/0x220 [ 468.917868][T12153] ? vfs_writev+0x2d0/0x2d0 [ 468.922596][T12153] ? trace_hardirqs_off_thunk+0x1a/0x20 [ 468.928137][T12153] __x64_sys_writev+0x70/0xb0 [ 468.932808][T12153] do_syscall_64+0xd0/0x540 [ 468.937299][T12153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.943175][T12153] RIP: 0033:0x45b399 [ 468.947051][T12153] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 468.967577][T12153] RSP: 002b:00007fcf9f62cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 468.975976][T12153] RAX: ffffffffffffffda RBX: 00007fcf9f62d6d4 RCX: 000000000045b399 [ 468.984085][T12153] RDX: 1000000000000252 RSI: 00000000200023c0 RDI: 0000000000000005 [ 468.992045][T12153] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 469.000379][T12153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 469.008469][T12153] R13: 0000000000000cda R14: 00000000004c9ca0 R15: 0000000000000002 [ 469.016459][T12157] CPU: 1 PID: 12157 Comm: syz-executor.1 Not tainted 5.3.0-rc3-syzkaller #0 [ 469.025128][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.035311][T12157] Call Trace: [ 469.039125][T12157] dump_stack+0x113/0x167 [ 469.043452][T12157] should_fail.cold.4+0x5/0x13 [ 469.048208][T12157] ? fault_create_debugfs_attr+0x150/0x150 [ 469.054152][T12157] ? lock_acquire+0x194/0x410 [ 469.058822][T12157] ? n_tty_write+0x8d8/0xfa0 [ 469.060099][T12162] FAULT_INJECTION: forcing a failure. [ 469.060099][T12162] name failslab, interval 1, probability 0, space 0, times 0 [ 469.063396][T12157] __should_failslab+0xba/0xf0 [ 469.080735][T12157] should_failslab+0x9/0x14 [ 469.085226][T12157] __kmalloc+0x70/0x790 [ 469.089377][T12157] ? n_tty_write+0x8d8/0xfa0 [ 469.093963][T12157] ? __tty_buffer_request_room+0x1b1/0x550 [ 469.099769][T12157] __tty_buffer_request_room+0x1b1/0x550 [ 469.105403][T12157] tty_insert_flip_string_fixed_flag+0x77/0x1a0 [ 469.111646][T12157] pty_write+0xf3/0x200 [ 469.115784][T12157] n_tty_write+0x90e/0xfa0 [ 469.120195][T12157] ? __might_fault+0xf1/0x1b0 [ 469.124961][T12157] ? lock_downgrade+0x900/0x900 [ 469.129790][T12157] ? lock_acquire+0x194/0x410 [ 469.134466][T12157] ? n_tty_open+0x160/0x160 [ 469.138956][T12157] ? prepare_to_wait_exclusive+0x390/0x390 [ 469.144742][T12157] ? __kasan_check_write+0x14/0x20 [ 469.149976][T12157] tty_write+0x381/0x7d0 [ 469.154297][T12157] ? n_tty_open+0x160/0x160 [ 469.158783][T12157] do_iter_write+0x368/0x510 [ 469.163370][T12157] ? dup_iter+0x230/0x230 [ 469.167685][T12157] vfs_writev+0x16d/0x2d0 [ 469.171997][T12157] ? vfs_iter_write+0xb0/0xb0 [ 469.176668][T12157] ? ksys_dup3+0x2e0/0x2e0 [ 469.181074][T12157] ? wait_for_completion+0x460/0x460 [ 469.186335][T12157] ? __fget_light+0x179/0x1f0 [ 469.191042][T12157] do_writev+0x112/0x2e0 [ 469.195264][T12157] ? ksys_write+0x181/0x220 [ 469.199855][T12157] ? vfs_writev+0x2d0/0x2d0 [ 469.204342][T12157] ? trace_hardirqs_off_thunk+0x1a/0x20 [ 469.209876][T12157] __x64_sys_writev+0x70/0xb0 [ 469.214552][T12157] do_syscall_64+0xd0/0x540 [ 469.219064][T12157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.225102][T12157] RIP: 0033:0x45b399 [ 469.228985][T12157] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 469.249707][T12157] RSP: 002b:00007f91e6db8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 469.258232][T12157] RAX: ffffffffffffffda RBX: 00007f91e6db96d4 RCX: 000000000045b399 [ 469.266198][T12157] RDX: 1000000000000252 RSI: 00000000200023c0 RDI: 0000000000000005 [ 469.274250][T12157] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 469.282215][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 469.290616][T12157] R13: 0000000000000cda R14: 00000000004c9ca0 R15: 0000000000000002 [ 469.298600][T12162] CPU: 0 PID: 12162 Comm: syz-executor.3 Not tainted 5.3.0-rc3-syzkaller #0 [ 469.307265][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.317183][T12160] FAULT_INJECTION: forcing a failure. [ 469.317183][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 469.317311][T12162] Call Trace: [ 469.333283][T12162] dump_stack+0x113/0x167 [ 469.337601][T12162] should_fail.cold.4+0x5/0x13 [ 469.342475][T12162] ? fault_create_debugfs_attr+0x150/0x150 [ 469.348385][T12162] ? lock_acquire+0x194/0x410 [ 469.353051][T12162] ? n_tty_write+0x8d8/0xfa0 [ 469.357659][T12162] __should_failslab+0xba/0xf0 [ 469.362419][T12162] should_failslab+0x9/0x14 [ 469.367035][T12162] __kmalloc+0x70/0x790 [ 469.371172][T12162] ? n_tty_write+0x8d8/0xfa0 [ 469.375757][T12162] ? __tty_buffer_request_room+0x1b1/0x550 [ 469.381555][T12162] __tty_buffer_request_room+0x1b1/0x550 [ 469.387186][T12162] tty_insert_flip_string_fixed_flag+0x77/0x1a0 [ 469.393458][T12162] pty_write+0xf3/0x200 [ 469.397610][T12162] n_tty_write+0x90e/0xfa0 [ 469.402029][T12162] ? __might_fault+0xf1/0x1b0 [ 469.406697][T12162] ? lock_downgrade+0x900/0x900 [ 469.411544][T12162] ? lock_acquire+0x194/0x410 [ 469.416218][T12162] ? n_tty_open+0x160/0x160 [ 469.420726][T12162] ? prepare_to_wait_exclusive+0x390/0x390 [ 469.426550][T12162] ? __kasan_check_write+0x14/0x20 [ 469.431785][T12162] tty_write+0x381/0x7d0 [ 469.436113][T12162] ? n_tty_open+0x160/0x160 [ 469.440609][T12162] do_iter_write+0x368/0x510 [ 469.445352][T12162] ? dup_iter+0x230/0x230 [ 469.449677][T12162] vfs_writev+0x16d/0x2d0 [ 469.454169][T12162] ? vfs_iter_write+0xb0/0xb0 [ 469.458862][T12162] ? ksys_dup3+0x2e0/0x2e0 [ 469.463309][T12162] ? wait_for_completion+0x460/0x460 [ 469.468583][T12162] ? __fget_light+0x179/0x1f0 [ 469.473250][T12162] do_writev+0x112/0x2e0 [ 469.477503][T12162] ? ksys_write+0x181/0x220 [ 469.481995][T12162] ? vfs_writev+0x2d0/0x2d0 [ 469.486505][T12162] ? trace_hardirqs_off_thunk+0x1a/0x20 [ 469.492046][T12162] __x64_sys_writev+0x70/0xb0 [ 469.496713][T12162] do_syscall_64+0xd0/0x540 [ 469.501208][T12162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.507087][T12162] RIP: 0033:0x45b399 [ 469.510968][T12162] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 469.531012][T12162] RSP: 002b:00007f607ad16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 469.539405][T12162] RAX: ffffffffffffffda RBX: 00007f607ad176d4 RCX: 000000000045b399 [ 469.547506][T12162] RDX: 1000000000000252 RSI: 00000000200023c0 RDI: 0000000000000005 [ 469.555577][T12162] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 469.563550][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 469.571513][T12162] R13: 0000000000000cda R14: 00000000004c9ca0 R15: 0000000000000002 [ 469.580180][T12160] CPU: 1 PID: 12160 Comm: syz-executor.0 Not tainted 5.3.0-rc3-syzkaller #0 [ 469.588955][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.599128][T12160] Call Trace: [ 469.602407][T12160] dump_stack+0x113/0x167 [ 469.606246][T12166] FAULT_INJECTION: forcing a failure. [ 469.606246][T12166] name failslab, interval 1, probability 0, space 0, times 0 [ 469.606888][T12160] should_fail.cold.4+0x5/0x13 [ 469.624309][T12160] ? fault_create_debugfs_attr+0x150/0x150 [ 469.630106][T12160] ? lock_acquire+0x194/0x410 [ 469.634858][T12160] ? n_tty_write+0x8d8/0xfa0 [ 469.639425][T12160] __should_failslab+0xba/0xf0 [ 469.644176][T12160] should_failslab+0x9/0x14 [ 469.648665][T12160] __kmalloc+0x70/0x790 [ 469.652838][T12160] ? n_tty_write+0x8d8/0xfa0 [ 469.657534][T12160] ? __tty_buffer_request_room+0x1b1/0x550 [ 469.663330][T12160] __tty_buffer_request_room+0x1b1/0x550 [ 469.668942][T12160] tty_insert_flip_string_fixed_flag+0x77/0x1a0 [ 469.676223][T12160] pty_write+0xf3/0x200 [ 469.680359][T12160] n_tty_write+0x90e/0xfa0 [ 469.684767][T12160] ? __might_fault+0xf1/0x1b0 [ 469.689431][T12160] ? lock_downgrade+0x900/0x900 [ 469.694470][T12160] ? lock_acquire+0x194/0x410 [ 469.699147][T12160] ? n_tty_open+0x160/0x160 [ 469.703634][T12160] ? prepare_to_wait_exclusive+0x390/0x390 [ 469.709511][T12160] ? __kasan_check_write+0x14/0x20 [ 469.714612][T12160] tty_write+0x381/0x7d0 [ 469.718833][T12160] ? n_tty_open+0x160/0x160 [ 469.723320][T12160] do_iter_write+0x368/0x510 [ 469.728002][T12160] ? dup_iter+0x230/0x230 [ 469.732328][T12160] vfs_writev+0x16d/0x2d0 [ 469.736649][T12160] ? vfs_iter_write+0xb0/0xb0 [ 469.741447][T12160] ? ksys_dup3+0x2e0/0x2e0 [ 469.745851][T12160] ? wait_for_completion+0x460/0x460 [ 469.751202][T12160] ? __fget_light+0x179/0x1f0 [ 469.755939][T12160] do_writev+0x112/0x2e0 [ 469.760293][T12160] ? ksys_write+0x181/0x220 [ 469.764773][T12160] ? vfs_writev+0x2d0/0x2d0 [ 469.769257][T12160] ? trace_hardirqs_off_thunk+0x1a/0x20 [ 469.774798][T12160] __x64_sys_writev+0x70/0xb0 [ 469.779468][T12160] do_syscall_64+0xd0/0x540 [ 469.783957][T12160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.789825][T12160] RIP: 0033:0x45b399 [ 469.793697][T12160] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 469.813598][T12160] RSP: 002b:00007f371001dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 469.822100][T12160] RAX: ffffffffffffffda RBX: 00007f371001e6d4 RCX: 000000000045b399 [ 469.830058][T12160] RDX: 1000000000000252 RSI: 00000000200023c0 RDI: 0000000000000005 [ 469.838029][T12160] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 469.846010][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 469.853961][T12160] R13: 0000000000000cda R14: 00000000004c9ca0 R15: 0000000000000002 [ 469.861936][T12166] CPU: 0 PID: 12166 Comm: syz-executor.4 Not tainted 5.3.0-rc3-syzkaller #0 [ 469.870607][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.880652][T12166] Call Trace: [ 469.883952][T12166] dump_stack+0x113/0x167 [ 469.888273][T12166] should_fail.cold.4+0x5/0x13 [ 469.889318][T12165] FAULT_INJECTION: forcing a failure. [ 469.889318][T12165] name failslab, interval 1, probability 0, space 0, times 0 [ 469.893035][T12166] ? fault_create_debugfs_attr+0x150/0x150 [ 469.912147][T12166] ? lock_acquire+0x194/0x410 [ 469.916802][T12166] ? n_tty_write+0x8d8/0xfa0 [ 469.921366][T12166] __should_failslab+0xba/0xf0 [ 469.926122][T12166] should_failslab+0x9/0x14 [ 469.930620][T12166] __kmalloc+0x70/0x790 [ 469.934760][T12166] ? n_tty_write+0x8d8/0xfa0 [ 469.939328][T12166] ? __tty_buffer_request_room+0x1b1/0x550 [ 469.945203][T12166] __tty_buffer_request_room+0x1b1/0x550 [ 469.950814][T12166] tty_insert_flip_string_fixed_flag+0x77/0x1a0 [ 469.957064][T12166] pty_write+0xf3/0x200 [ 469.961196][T12166] n_tty_write+0x90e/0xfa0 [ 469.965605][T12166] ? __might_fault+0xf1/0x1b0 [ 469.970262][T12166] ? lock_downgrade+0x900/0x900 [ 469.975094][T12166] ? lock_acquire+0x194/0x410 [ 469.979745][T12166] ? n_tty_open+0x160/0x160 [ 469.984235][T12166] ? prepare_to_wait_exclusive+0x390/0x390 [ 469.990020][T12166] ? __kasan_check_write+0x14/0x20 [ 469.995124][T12166] tty_write+0x381/0x7d0 [ 469.999363][T12166] ? n_tty_open+0x160/0x160 [ 470.003861][T12166] do_iter_write+0x368/0x510 [ 470.008441][T12166] ? dup_iter+0x230/0x230 [ 470.012753][T12166] vfs_writev+0x16d/0x2d0 [ 470.017063][T12166] ? vfs_iter_write+0xb0/0xb0 [ 470.021726][T12166] ? ksys_dup3+0x2e0/0x2e0 [ 470.026122][T12166] ? wait_for_completion+0x460/0x460 [ 470.031384][T12166] ? __fget_light+0x179/0x1f0 [ 470.036048][T12166] do_writev+0x112/0x2e0 [ 470.041223][T12166] ? ksys_write+0x181/0x220 [ 470.045704][T12166] ? vfs_writev+0x2d0/0x2d0 [ 470.050187][T12166] ? trace_hardirqs_off_thunk+0x1a/0x20 [ 470.055737][T12166] __x64_sys_writev+0x70/0xb0 [ 470.060396][T12166] do_syscall_64+0xd0/0x540 [ 470.064892][T12166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.071805][T12166] RIP: 0033:0x45b399 [ 470.075681][T12166] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.095295][T12166] RSP: 002b:00007f93392cfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 470.103701][T12166] RAX: ffffffffffffffda RBX: 00007f93392d06d4 RCX: 000000000045b399 [ 470.111676][T12166] RDX: 1000000000000252 RSI: 00000000200023c0 RDI: 0000000000000005 [ 470.119776][T12166] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 470.127950][T12166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 470.135932][T12166] R13: 0000000000000cda R14: 00000000004c9ca0 R15: 0000000000000002 [ 470.143915][T12165] CPU: 1 PID: 12165 Comm: syz-executor.5 Not tainted 5.3.0-rc3-syzkaller #0 [ 470.152585][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.162895][T12165] Call Trace: [ 470.166169][T12165] dump_stack+0x113/0x167 [ 470.170486][T12165] should_fail.cold.4+0x5/0x13 [ 470.175248][T12165] ? fault_create_debugfs_attr+0x150/0x150 [ 470.181042][T12165] ? lock_acquire+0x194/0x410 [ 470.185716][T12165] ? n_tty_write+0x8d8/0xfa0 [ 470.190299][T12165] __should_failslab+0xba/0xf0 [ 470.195060][T12165] should_failslab+0x9/0x14 [ 470.199551][T12165] __kmalloc+0x70/0x790 [ 470.203695][T12165] ? n_tty_write+0x8d8/0xfa0 [ 470.208284][T12165] ? __tty_buffer_request_room+0x1b1/0x550 [ 470.214194][T12165] __tty_buffer_request_room+0x1b1/0x550 [ 470.219838][T12165] tty_insert_flip_string_fixed_flag+0x77/0x1a0 [ 470.226090][T12165] pty_write+0xf3/0x200 [ 470.230416][T12165] n_tty_write+0x90e/0xfa0 [ 470.234815][T12165] ? __might_fault+0xf1/0x1b0 [ 470.239469][T12165] ? lock_downgrade+0x900/0x900 [ 470.244296][T12165] ? lock_acquire+0x194/0x410 [ 470.248962][T12165] ? n_tty_open+0x160/0x160 [ 470.253453][T12165] ? prepare_to_wait_exclusive+0x390/0x390 [ 470.259231][T12165] ? __kasan_check_write+0x14/0x20 [ 470.264578][T12165] tty_write+0x381/0x7d0 [ 470.268804][T12165] ? n_tty_open+0x160/0x160 [ 470.273279][T12165] do_iter_write+0x368/0x510 [ 470.277847][T12165] ? dup_iter+0x230/0x230 [ 470.282171][T12165] vfs_writev+0x16d/0x2d0 [ 470.286487][T12165] ? vfs_iter_write+0xb0/0xb0 [ 470.291149][T12165] ? ksys_dup3+0x2e0/0x2e0 [ 470.295538][T12165] ? wait_for_completion+0x460/0x460 [ 470.300809][T12165] ? __fget_light+0x179/0x1f0 [ 470.305466][T12165] do_writev+0x112/0x2e0 [ 470.309675][T12165] ? ksys_write+0x181/0x220 [ 470.314164][T12165] ? vfs_writev+0x2d0/0x2d0 [ 470.318637][T12165] ? trace_hardirqs_off_thunk+0x1a/0x20 [ 470.324176][T12165] __x64_sys_writev+0x70/0xb0 [ 470.328823][T12165] do_syscall_64+0xd0/0x540 [ 470.333297][T12165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.339254][T12165] RIP: 0033:0x45b399 [ 470.343136][T12165] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.362914][T12165] RSP: 002b:00007f60d58e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 470.371441][T12165] RAX: ffffffffffffffda RBX: 00007f60d58e36d4 RCX: 000000000045b399 [ 470.379932][T12165] RDX: 1000000000000252 RSI: 00000000200023c0 RDI: 0000000000000005 [ 470.387913][T12165] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 470.395956][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 470.403907][T12165] R13: 0000000000000cda R14: 00000000004c9ca0 R15: 0000000000000002 [ 471.352911][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.360473][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.368726][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.376154][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.384119][ T7387] device bridge_slave_1 left promiscuous mode [ 471.390390][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.421282][ T7387] device bridge_slave_0 left promiscuous mode [ 471.427439][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.492701][ T7387] device veth1_macvtap left promiscuous mode [ 471.498969][ T7387] device veth0_macvtap left promiscuous mode [ 471.505241][ T7387] device veth1_vlan left promiscuous mode [ 471.511000][ T7387] device veth0_vlan left promiscuous mode [ 472.401384][ T7387] device hsr_slave_0 left promiscuous mode [ 472.440886][ T7387] device hsr_slave_1 left promiscuous mode [ 472.486378][ T7387] team0 (unregistering): Port device team_slave_1 removed [ 472.495263][ T7387] team0 (unregistering): Port device team_slave_0 removed [ 472.504488][ T7387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.563931][ T7387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.610850][ T7387] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. [ 473.695407][T12189] IPVS: ftp: loaded support on port[0] = 21 [ 473.697010][T12197] IPVS: ftp: loaded support on port[0] = 21 [ 473.704834][T12193] IPVS: ftp: loaded support on port[0] = 21 [ 473.716771][T12195] IPVS: ftp: loaded support on port[0] = 21 [ 473.717424][T12198] IPVS: ftp: loaded support on port[0] = 21 [ 473.723065][T12196] IPVS: ftp: loaded support on port[0] = 21 [ 473.837279][T12197] chnl_net:caif_netlink_parms(): no params data found [ 473.896829][T12189] chnl_net:caif_netlink_parms(): no params data found [ 473.922634][T12193] chnl_net:caif_netlink_parms(): no params data found [ 473.946995][T12196] chnl_net:caif_netlink_parms(): no params data found [ 473.957665][T12195] chnl_net:caif_netlink_parms(): no params data found [ 473.974471][T12198] chnl_net:caif_netlink_parms(): no params data found [ 474.183558][T12197] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.190638][T12197] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.198420][T12197] device bridge_slave_0 entered promiscuous mode [ 474.208484][T12197] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.215629][T12197] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.223807][T12197] device bridge_slave_1 entered promiscuous mode [ 474.350409][T12197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.367173][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.375241][T12189] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.383326][T12189] device bridge_slave_0 entered promiscuous mode [ 474.488740][T12197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.502259][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.509454][T12189] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.517067][T12189] device bridge_slave_1 entered promiscuous mode [ 474.524081][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.531786][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.540287][T12193] device bridge_slave_0 entered promiscuous mode [ 474.550328][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.557707][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.565852][T12193] device bridge_slave_1 entered promiscuous mode [ 474.684539][T12197] team0: Port device team_slave_0 added [ 474.702144][T12198] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.709250][T12198] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.716844][T12198] device bridge_slave_0 entered promiscuous mode [ 474.724882][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.734189][T12196] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.741877][T12196] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.749334][T12196] device bridge_slave_0 entered promiscuous mode [ 474.756662][T12196] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.765270][T12196] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.772875][T12196] device bridge_slave_1 entered promiscuous mode [ 474.781717][T12197] team0: Port device team_slave_1 added [ 474.791483][T12193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.800825][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.808100][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.816250][T12195] device bridge_slave_0 entered promiscuous mode [ 474.823348][T12198] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.833450][T12198] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.841318][T12198] device bridge_slave_1 entered promiscuous mode [ 474.848728][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.994078][T12193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.004382][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.011634][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.019089][T12195] device bridge_slave_1 entered promiscuous mode [ 475.033672][T12197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.040645][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.067167][T12197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.079148][T12196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.093005][T12196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.117265][T12196] team0: Port device team_slave_0 added [ 475.123288][T12197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.130221][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.156551][T12197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.270204][T12193] team0: Port device team_slave_0 added [ 475.277088][T12198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.287366][T12189] team0: Port device team_slave_0 added [ 475.293749][T12196] team0: Port device team_slave_1 added [ 475.305077][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.317598][T12193] team0: Port device team_slave_1 added [ 475.324308][T12198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.334139][T12189] team0: Port device team_slave_1 added [ 475.347745][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.357288][T12196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.364590][T12196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.390910][T12196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.404777][T12196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.411817][T12196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.437976][T12196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.548927][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.556116][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.582202][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.597212][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.604463][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.632377][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.646779][T12193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.654324][T12193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.681781][T12193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.732634][T12197] device hsr_slave_0 entered promiscuous mode [ 475.771126][T12197] device hsr_slave_1 entered promiscuous mode [ 475.911945][T12193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.919136][T12193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.946432][T12193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.957856][T12198] team0: Port device team_slave_0 added [ 475.965216][T12195] team0: Port device team_slave_0 added [ 475.973415][T12195] team0: Port device team_slave_1 added [ 476.032599][T12196] device hsr_slave_0 entered promiscuous mode [ 476.081067][T12196] device hsr_slave_1 entered promiscuous mode [ 476.140902][T12196] debugfs: Directory 'hsr0' with parent '/' already present! [ 476.237818][T12198] team0: Port device team_slave_1 added [ 476.312490][T12189] device hsr_slave_0 entered promiscuous mode [ 476.381033][T12189] device hsr_slave_1 entered promiscuous mode [ 476.460837][T12189] debugfs: Directory 'hsr0' with parent '/' already present! [ 476.479376][T12195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.486483][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.513095][T12195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.527324][T12195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.534454][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.560632][T12195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.642810][T12193] device hsr_slave_0 entered promiscuous mode [ 476.681147][T12193] device hsr_slave_1 entered promiscuous mode [ 476.720864][T12193] debugfs: Directory 'hsr0' with parent '/' already present! [ 476.728740][T12198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.735946][T12198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.762306][T12198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.774963][T12198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.783536][T12198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.809696][T12198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.872659][T12195] device hsr_slave_0 entered promiscuous mode [ 476.911004][T12195] device hsr_slave_1 entered promiscuous mode [ 476.980914][T12195] debugfs: Directory 'hsr0' with parent '/' already present! [ 477.004928][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.012705][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.020482][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.028188][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.035930][ T7387] device bridge_slave_1 left promiscuous mode [ 477.042298][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.071384][ T7387] device bridge_slave_0 left promiscuous mode [ 477.077698][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.132765][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.140420][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.148460][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.156190][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.164301][ T7387] device bridge_slave_1 left promiscuous mode [ 477.170443][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.231221][ T7387] device bridge_slave_0 left promiscuous mode [ 477.237482][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.292386][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.299830][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.307597][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.315070][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.322942][ T7387] device bridge_slave_1 left promiscuous mode [ 477.329074][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.361390][ T7387] device bridge_slave_0 left promiscuous mode [ 477.367663][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.402906][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.410414][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.418297][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.425764][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.433276][T12214] kasan: CONFIG_KASAN_INLINE enabled [ 477.438566][T12214] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 477.446755][T12214] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 477.453778][T12214] CPU: 0 PID: 12214 Comm: kworker/u4:0 Not tainted 5.3.0-rc3-syzkaller #0 [ 477.462249][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.472468][T12214] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 477.480310][T12214] RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xe50 [ 477.486488][T12214] Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 a2 0b 00 00 [ 477.506140][T12214] RSP: 0018:ffff88807583fab8 EFLAGS: 00010246 [ 477.512217][T12214] RAX: dffffc0000000000 RBX: ffff8880a7841380 RCX: 0000000000000000 [ 477.520169][T12214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 477.528121][T12214] RBP: ffff88807583fbd0 R08: ffff888078b5e040 R09: 0000000000000001 [ 477.536178][T12214] R10: ffffed100eb07f8f R11: 0000000000000003 R12: 0000000000000007 [ 477.544326][T12214] R13: ffff888078b5e068 R14: ffff888078b5e040 R15: 000000000000003c [ 477.552286][T12214] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 477.561193][T12214] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.567793][T12214] CR2: 00007fe4ce60ec90 CR3: 0000000090108000 CR4: 00000000001406f0 [ 477.575807][T12214] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.583767][T12214] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 477.591805][T12214] Call Trace: [ 477.595080][T12214] ? mark_held_locks+0x130/0x130 [ 477.600017][T12214] ? batadv_tvlv_container_ogm_append+0x383/0x4c0 [ 477.606477][T12214] ? batadv_iv_ogm_schedule+0x62f/0xe90 [ 477.612002][T12214] ? lock_downgrade+0x900/0x900 [ 477.616984][T12214] ? batadv_iv_gw_get_best_gw_node+0x5a0/0x5a0 [ 477.623157][T12214] ? lock_acquire+0x194/0x410 [ 477.628040][T12214] ? batadv_iv_ogm_schedule+0x92b/0xe90 [ 477.633782][T12214] batadv_iv_ogm_schedule+0xb60/0xe90 [ 477.639662][T12214] ? batadv_iv_ogm_receive+0x17a0/0x17a0 [ 477.645273][T12214] ? process_one_work+0x780/0x1630 [ 477.650453][T12214] ? lock_downgrade+0x900/0x900 [ 477.655555][T12214] batadv_iv_send_outstanding_bat_ogm_packet+0x54c/0x77d [ 477.662553][T12214] ? process_one_work+0x79f/0x1630 [ 477.667768][T12214] ? trace_hardirqs_on+0x28/0x1a0 [ 477.672776][T12214] process_one_work+0x856/0x1630 [ 477.678395][T12214] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 477.683850][T12214] ? lock_acquire+0x194/0x410 [ 477.688507][T12214] worker_thread+0x85/0xb60 [ 477.692991][T12214] ? __kthread_parkme+0x47/0x1a0 [ 477.697959][T12214] kthread+0x331/0x3f0 [ 477.702009][T12214] ? process_one_work+0x1630/0x1630 [ 477.707232][T12214] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 477.713499][T12214] ret_from_fork+0x24/0x30 [ 477.717998][T12214] Modules linked in: [ 477.722229][T12214] ---[ end trace cd9c8f93b3055f39 ]--- [ 477.727723][T12214] RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xe50 [ 477.733909][T12214] Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 a2 0b 00 00 [ 477.754757][T12214] RSP: 0018:ffff88807583fab8 EFLAGS: 00010246 [ 477.760856][T12214] RAX: dffffc0000000000 RBX: ffff8880a7841380 RCX: 0000000000000000 [ 477.768933][T12214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 477.776941][T12214] RBP: ffff88807583fbd0 R08: ffff888078b5e040 R09: 0000000000000001 [ 477.785143][T12214] R10: ffffed100eb07f8f R11: 0000000000000003 R12: 0000000000000007 [ 477.793184][T12214] R13: ffff888078b5e068 R14: ffff888078b5e040 R15: 000000000000003c [ 477.801485][T12214] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 477.810407][T12214] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.817040][T12214] CR2: 00007fe4ce60ec90 CR3: 0000000090108000 CR4: 00000000001406f0 [ 477.825046][T12214] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.833223][T12214] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 477.841208][T12214] Kernel panic - not syncing: Fatal exception [ 477.849443][T12214] Kernel Offset: disabled [ 477.853856][T12214] Rebooting in 86400 seconds..