Warning: Permanently added '[localhost]:2506' (ECDSA) to the list of known hosts. 2020/07/15 12:30:27 fuzzer started 2020/07/15 12:30:28 dialing manager at 10.0.2.10:42091 2020/07/15 12:30:28 syscalls: 3178 2020/07/15 12:30:28 code coverage: enabled 2020/07/15 12:30:28 comparison tracing: enabled 2020/07/15 12:30:28 extra coverage: enabled 2020/07/15 12:30:28 setuid sandbox: enabled 2020/07/15 12:30:28 namespace sandbox: enabled 2020/07/15 12:30:28 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/15 12:30:28 fault injection: enabled 2020/07/15 12:30:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/15 12:30:28 net packet injection: enabled 2020/07/15 12:30:28 net device setup: enabled 2020/07/15 12:30:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/15 12:30:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/15 12:30:28 USB emulation: enabled 12:31:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x5, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:31:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 12:31:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/44, 0x2c}], 0x1, 0x0) 12:31:24 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) syzkaller login: [ 205.838335][ T8051] IPVS: ftp: loaded support on port[0] = 21 [ 205.936669][ T8053] IPVS: ftp: loaded support on port[0] = 21 [ 206.275386][ T8055] IPVS: ftp: loaded support on port[0] = 21 [ 206.547491][ T8056] IPVS: ftp: loaded support on port[0] = 21 [ 206.613022][ T8053] chnl_net:caif_netlink_parms(): no params data found [ 206.658748][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 206.783845][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 206.900980][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.916507][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.936069][ T8051] device bridge_slave_0 entered promiscuous mode [ 206.964883][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.981697][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.996674][ T8053] device bridge_slave_0 entered promiscuous mode [ 207.011971][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.026120][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.040261][ T8053] device bridge_slave_1 entered promiscuous mode [ 207.055593][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.070166][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.083819][ T8051] device bridge_slave_1 entered promiscuous mode [ 207.138568][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.174885][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.190857][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.205575][ T8055] device bridge_slave_0 entered promiscuous mode [ 207.226326][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.240364][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.254617][ T8055] device bridge_slave_1 entered promiscuous mode [ 207.269329][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.312112][ T8053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.338255][ T8053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.382916][ T8051] team0: Port device team_slave_0 added [ 207.409261][ T8051] team0: Port device team_slave_1 added [ 207.484523][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.511253][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.556293][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.569246][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.620295][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.655870][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.670605][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.726546][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.751809][ T8053] team0: Port device team_slave_0 added [ 207.764962][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 207.799882][ T8053] team0: Port device team_slave_1 added [ 207.824297][ T8055] team0: Port device team_slave_0 added [ 207.851674][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.866982][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.926542][ T8053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.956339][ T8055] team0: Port device team_slave_1 added [ 208.027638][ T8051] device hsr_slave_0 entered promiscuous mode [ 208.104329][ T8051] device hsr_slave_1 entered promiscuous mode [ 208.161575][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.178560][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.236899][ T8053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.269565][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.282615][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.332672][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.365502][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.381685][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.443837][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.547824][ T8053] device hsr_slave_0 entered promiscuous mode [ 208.613683][ T8053] device hsr_slave_1 entered promiscuous mode [ 208.683524][ T8053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.699477][ T8053] Cannot create hsr debugfs directory [ 208.764821][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.777902][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.792998][ T8056] device bridge_slave_0 entered promiscuous mode [ 208.822803][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.836579][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.850681][ T8056] device bridge_slave_1 entered promiscuous mode [ 208.936712][ T8055] device hsr_slave_0 entered promiscuous mode [ 209.003746][ T8055] device hsr_slave_1 entered promiscuous mode [ 209.073463][ T8055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.091244][ T8055] Cannot create hsr debugfs directory [ 209.144927][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.186278][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.261488][ T8056] team0: Port device team_slave_0 added [ 209.290878][ T8056] team0: Port device team_slave_1 added [ 209.366161][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.392519][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.457238][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.503213][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.529656][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.578779][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.796007][ T8056] device hsr_slave_0 entered promiscuous mode [ 209.853982][ T8056] device hsr_slave_1 entered promiscuous mode [ 209.943456][ T8056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.961247][ T8056] Cannot create hsr debugfs directory [ 210.002547][ T8051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.129329][ T8051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.211745][ T8051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.319599][ T8051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.472358][ T8053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.532223][ T8053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.632346][ T8053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.751539][ T8053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.929340][ T8055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.998327][ T8055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.057470][ T8055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.151142][ T8055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.279085][ T8056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.367797][ T8056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.455245][ T8056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.600206][ T8056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.771267][ T8051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.820152][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.839825][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.860245][ T8051] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.891888][ T2859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.922720][ T2859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.942236][ T2859] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.959982][ T2859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.995158][ T2859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.015428][ T2859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.033794][ T2859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.053915][ T2859] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.069055][ T2859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.098693][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.120727][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.165543][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.193181][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.210605][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.228729][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.244984][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.266226][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.282386][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.297628][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.318909][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.342579][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.359257][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.379091][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.411325][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.449387][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.477301][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.500673][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.558842][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.583709][ T8051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.613214][ T8051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.640589][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.667288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.698275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.726195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.744473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.762226][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.779079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.801198][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.820819][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.847157][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.875331][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.904259][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.924813][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.940428][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.955494][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.974785][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.991900][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.007951][ T8078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.024274][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.041499][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.058678][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.073940][ T8078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.088388][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.105696][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.139935][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.157293][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.173061][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.190123][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.203878][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.223873][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.246448][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.263304][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.277101][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.291186][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.305900][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.321208][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.337556][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.353916][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.386804][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.403875][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.423535][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.447558][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.475805][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.510285][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.536537][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.558373][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.578606][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.615412][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.640619][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.661219][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.686849][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.704289][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.727955][ T8051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.766839][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.791736][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.808440][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.833014][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.856417][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.872540][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.888895][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.917597][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.939188][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.958962][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.975827][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.994409][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.017489][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.048128][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.086620][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.111623][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.131150][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.155240][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.170845][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.189997][ T8053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.214538][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.255799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.271607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.297219][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.315348][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.342145][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.361922][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.384368][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.412397][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.437678][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.454485][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.474992][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.492656][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.511886][ T8051] device veth0_vlan entered promiscuous mode [ 214.538844][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.571567][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.619640][ T8051] device veth1_vlan entered promiscuous mode [ 214.645123][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.665943][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.684957][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.703134][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.726980][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.754084][ T8053] device veth0_vlan entered promiscuous mode [ 214.779273][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.813725][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.836530][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.855947][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.882269][ T8053] device veth1_vlan entered promiscuous mode [ 214.920983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.936726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.954859][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.976307][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.993800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.012759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.027599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.050886][ T8055] device veth0_vlan entered promiscuous mode [ 215.072872][ T8056] device veth0_vlan entered promiscuous mode [ 215.088441][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.108050][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.131697][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.150179][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.178383][ T8056] device veth1_vlan entered promiscuous mode [ 215.205097][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.225891][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.246361][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.264876][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.284142][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.300972][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.323759][ T8055] device veth1_vlan entered promiscuous mode [ 215.340785][ T8051] device veth0_macvtap entered promiscuous mode [ 215.361152][ T8051] device veth1_macvtap entered promiscuous mode [ 215.388272][ T8053] device veth0_macvtap entered promiscuous mode [ 215.408688][ T8053] device veth1_macvtap entered promiscuous mode [ 215.441546][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.464353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.479860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.498936][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.512910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.527034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.541459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.554870][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.572079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.601633][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.624303][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.651957][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.704053][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.727041][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.748928][ T8056] device veth0_macvtap entered promiscuous mode [ 215.778654][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.812598][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.850027][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.868645][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.889815][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.910215][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.930313][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.949030][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.102506][ T8055] device veth0_macvtap entered promiscuous mode [ 216.125828][ T8056] device veth1_macvtap entered promiscuous mode [ 216.141331][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.162539][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.185733][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.202851][ T8055] device veth1_macvtap entered promiscuous mode [ 216.299585][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.325306][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.342994][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.363513][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.385349][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.508942][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.531188][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.553776][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.581736][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.605474][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.747077][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.769488][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.814817][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.836428][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.854885][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.875334][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.896856][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.921712][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.941195][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.032525][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.036337][ T8051] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 217.056125][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.101655][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.130907][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.169848][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.209213][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.246934][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.291762][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.325247][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.352881][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.380538][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.415805][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.447286][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.481295][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.512246][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.551841][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_1 12:31:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 217.586491][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.615526][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.698866][ T8091] ================================================================== [ 217.699538][ T8091] BUG: KASAN: vmalloc-out-of-bounds in bitfill_aligned+0x34a/0x400 [ 217.699546][ T8091] Write of size 8 at addr ffffc90009701000 by task syz-executor.1/8091 [ 217.699548][ T8091] [ 217.699662][ T8091] CPU: 2 PID: 8091 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 217.699710][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 217.699768][ T8091] Call Trace: [ 217.700551][ T8091] dump_stack+0x18f/0x20d [ 217.700691][ T8091] ? bitfill_aligned+0x34a/0x400 [ 217.700700][ T8091] ? bitfill_aligned+0x34a/0x400 [ 217.700940][ T8091] print_address_description.constprop.0.cold+0x5/0x436 [ 217.701181][ T8091] ? trace_hardirqs_on+0x5f/0x220 [ 217.702943][ T8091] ? lockdep_hardirqs_off+0x66/0xa0 [ 217.703126][ T8091] ? vprintk_func+0x97/0x1a6 [ 217.703139][ T8091] ? bitfill_aligned+0x34a/0x400 [ 217.703148][ T8091] kasan_report.cold+0x1f/0x37 [ 217.703318][ T8091] ? bitfill_aligned+0x101/0x400 [ 217.703318][ T8091] ? bitfill_aligned+0x34a/0x400 [ 217.703318][ T8091] bitfill_aligned+0x34a/0x400 [ 217.703318][ T8091] sys_fillrect+0x408/0x7a0 [ 217.703318][ T8091] ? sys_fillrect+0x7a0/0x7a0 [ 217.703318][ T8091] drm_fb_helper_sys_fillrect+0x1e/0x190 [ 217.703318][ T8091] bit_clear_margins+0x3f6/0x4a0 [ 217.703318][ T8091] ? bit_bmove+0x210/0x210 [ 217.703318][ T8091] ? fb_get_color_depth+0x11a/0x240 [ 217.703318][ T8091] fbcon_clear_margins+0x1d5/0x230 [ 217.703318][ T8091] fbcon_switch+0xb6e/0x16c0 [ 217.703318][ T8091] ? fbcon_scroll+0x3600/0x3600 [ 217.703318][ T8091] ? fbcon_cursor+0x52b/0x650 [ 217.703318][ T8091] ? kmalloc_array.constprop.0+0x20/0x20 [ 217.703318][ T8091] ? is_console_locked+0x5/0x10 [ 217.703318][ T8091] ? fbcon_set_origin+0x26/0x50 [ 217.703318][ T8091] redraw_screen+0x2ae/0x770 [ 217.703318][ T8091] ? vc_init+0x440/0x440 [ 217.703318][ T8091] ? fb_get_color_depth+0x11a/0x240 [ 217.703318][ T8091] ? fbcon_set_palette+0x3a8/0x490 [ 217.703318][ T8091] fbcon_modechanged+0x575/0x710 [ 217.703318][ T8091] fbcon_update_vcs+0x3a/0x50 [ 217.703318][ T8091] fb_set_var+0xae8/0xd60 [ 217.703318][ T8091] ? fb_blank+0x190/0x190 [ 217.703318][ T8091] ? lock_release+0x8d0/0x8d0 [ 217.703318][ T8091] ? lock_is_held_type+0xb0/0xe0 [ 217.703318][ T8091] ? lock_release+0x8d0/0x8d0 [ 217.703318][ T8091] ? do_fb_ioctl+0x2f2/0x6c0 [ 217.703318][ T8091] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 217.703318][ T8091] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 217.703318][ T8091] ? trace_hardirqs_on+0x5f/0x220 [ 217.703318][ T8091] do_fb_ioctl+0x33f/0x6c0 [ 217.703318][ T8091] ? fb_set_suspend+0x1a0/0x1a0 [ 217.703318][ T8091] ? lock_downgrade+0x820/0x820 [ 217.703318][ T8091] ? trace_hardirqs_on+0x5f/0x220 [ 217.703318][ T8091] ? lockdep_hardirqs_on+0x6a/0xe0 [ 217.703318][ T8091] ? tomoyo_path_number_perm+0x244/0x4d0 [ 217.703318][ T8091] ? tomoyo_execute_permission+0x470/0x470 [ 217.703318][ T8091] ? __might_fault+0xef/0x1d0 [ 217.703318][ T8091] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 217.703318][ T8091] ? do_vfs_ioctl+0x27d/0x1090 [ 217.703318][ T8091] ? generic_block_fiemap+0x60/0x60 [ 217.703318][ T8091] fb_compat_ioctl+0x175/0xc10 [ 217.703318][ T8091] ? fb_open+0x430/0x430 [ 217.703318][ T8091] ? __fget_files+0x294/0x400 [ 217.703318][ T8091] ? fb_open+0x430/0x430 [ 217.703318][ T8091] __do_compat_sys_ioctl+0x1d3/0x230 [ 217.703318][ T8091] do_syscall_32_irqs_on+0x3f/0x60 [ 217.703318][ T8091] do_fast_syscall_32+0x7f/0x120 [ 217.703318][ T8091] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 217.703318][ T8091] RIP: 0023:0xf7f66569 [ 217.703318][ T8091] Code: Bad RIP value. [ 217.703318][ T8091] RSP: 002b:00000000f5d610bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 217.703318][ T8091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 217.703318][ T8091] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.703318][ T8091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.703318][ T8091] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 217.703318][ T8091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.703318][ T8091] [ 217.703318][ T8091] [ 217.703318][ T8091] Memory state around the buggy address: [ 217.703318][ T8091] ffffc90009700f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.703318][ T8091] ffffc90009700f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.703318][ T8091] >ffffc90009701000: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 217.703318][ T8091] ^ [ 217.703318][ T8091] ffffc90009701080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 217.703318][ T8091] ffffc90009701100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 217.703318][ T8091] ================================================================== [ 217.703318][ T8091] Disabling lock debugging due to kernel taint [ 217.710831][ T8091] Kernel panic - not syncing: panic_on_warn set ... [ 217.710868][ T8091] CPU: 2 PID: 8091 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 217.710925][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 217.710981][ T8091] Call Trace: [ 217.711108][ T8091] dump_stack+0x18f/0x20d [ 217.711120][ T8091] ? bitfill_aligned+0x300/0x400 [ 217.711248][ T8091] panic+0x2e3/0x75c [ 217.711256][ T8091] ? __warn_printk+0xf3/0xf3 [ 217.711266][ T8091] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 217.711276][ T8091] ? trace_hardirqs_on+0x55/0x220 [ 217.711284][ T8091] ? bitfill_aligned+0x34a/0x400 [ 217.711290][ T8091] ? bitfill_aligned+0x34a/0x400 [ 217.711297][ T8091] end_report+0x4d/0x53 [ 217.711304][ T8091] kasan_report.cold+0xd/0x37 [ 217.711312][ T8091] ? bitfill_aligned+0x101/0x400 [ 217.711320][ T8091] ? bitfill_aligned+0x34a/0x400 [ 217.711328][ T8091] bitfill_aligned+0x34a/0x400 [ 217.711337][ T8091] sys_fillrect+0x408/0x7a0 [ 217.711344][ T8091] ? sys_fillrect+0x7a0/0x7a0 [ 217.711355][ T8091] drm_fb_helper_sys_fillrect+0x1e/0x190 [ 217.711363][ T8091] bit_clear_margins+0x3f6/0x4a0 [ 217.711370][ T8091] ? bit_bmove+0x210/0x210 [ 217.711379][ T8091] ? fb_get_color_depth+0x11a/0x240 [ 217.711387][ T8091] fbcon_clear_margins+0x1d5/0x230 [ 217.711395][ T8091] fbcon_switch+0xb6e/0x16c0 [ 217.711403][ T8091] ? fbcon_scroll+0x3600/0x3600 [ 217.711413][ T8091] ? fbcon_cursor+0x52b/0x650 [ 217.711420][ T8091] ? kmalloc_array.constprop.0+0x20/0x20 [ 217.711429][ T8091] ? is_console_locked+0x5/0x10 [ 217.711435][ T8091] ? fbcon_set_origin+0x26/0x50 [ 217.711444][ T8091] redraw_screen+0x2ae/0x770 [ 217.711452][ T8091] ? vc_init+0x440/0x440 [ 217.711459][ T8091] ? fb_get_color_depth+0x11a/0x240 [ 217.711467][ T8091] ? fbcon_set_palette+0x3a8/0x490 [ 217.711475][ T8091] fbcon_modechanged+0x575/0x710 [ 217.711483][ T8091] fbcon_update_vcs+0x3a/0x50 [ 217.711490][ T8091] fb_set_var+0xae8/0xd60 [ 217.711497][ T8091] ? fb_blank+0x190/0x190 [ 217.711505][ T8091] ? lock_release+0x8d0/0x8d0 [ 217.711513][ T8091] ? lock_is_held_type+0xb0/0xe0 [ 217.711519][ T8091] ? lock_release+0x8d0/0x8d0 [ 217.711529][ T8091] ? do_fb_ioctl+0x2f2/0x6c0 [ 217.711540][ T8091] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 217.711547][ T8091] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 217.711554][ T8091] ? trace_hardirqs_on+0x5f/0x220 [ 217.711562][ T8091] do_fb_ioctl+0x33f/0x6c0 [ 217.711570][ T8091] ? fb_set_suspend+0x1a0/0x1a0 [ 217.711577][ T8091] ? lock_downgrade+0x820/0x820 [ 217.711585][ T8091] ? trace_hardirqs_on+0x5f/0x220 [ 217.711591][ T8091] ? lockdep_hardirqs_on+0x6a/0xe0 [ 217.711600][ T8091] ? tomoyo_path_number_perm+0x244/0x4d0 [ 217.711608][ T8091] ? tomoyo_execute_permission+0x470/0x470 [ 217.711616][ T8091] ? __might_fault+0xef/0x1d0 [ 217.711628][ T8091] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 217.711635][ T8091] ? do_vfs_ioctl+0x27d/0x1090 [ 217.711642][ T8091] ? generic_block_fiemap+0x60/0x60 [ 217.711650][ T8091] fb_compat_ioctl+0x175/0xc10 [ 217.711657][ T8091] ? fb_open+0x430/0x430 [ 217.711666][ T8091] ? __fget_files+0x294/0x400 [ 217.711674][ T8091] ? fb_open+0x430/0x430 [ 217.711681][ T8091] __do_compat_sys_ioctl+0x1d3/0x230 [ 217.711691][ T8091] do_syscall_32_irqs_on+0x3f/0x60 [ 217.711699][ T8091] do_fast_syscall_32+0x7f/0x120 [ 217.711707][ T8091] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 217.711737][ T8091] RIP: 0023:0xf7f66569 [ 217.711740][ T8091] Code: Bad RIP value. [ 217.711744][ T8091] RSP: 002b:00000000f5d610bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 217.711751][ T8091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 217.711755][ T8091] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.711760][ T8091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.711764][ T8091] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 217.711768][ T8091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.719568][ T8091] Kernel Offset: disabled [ 217.719568][ T8091] Rebooting in 86400 seconds..