[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.696170][ T27] audit: type=1800 audit(1576611568.081:25): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 64.732370][ T27] audit: type=1800 audit(1576611568.081:26): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 64.785887][ T27] audit: type=1800 audit(1576611568.081:27): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. 2019/12/17 19:39:40 fuzzer started 2019/12/17 19:39:42 dialing manager at 10.128.0.26:38847 2019/12/17 19:39:42 syscalls: 2535 2019/12/17 19:39:42 code coverage: enabled 2019/12/17 19:39:42 comparison tracing: enabled 2019/12/17 19:39:42 extra coverage: enabled 2019/12/17 19:39:42 setuid sandbox: enabled 2019/12/17 19:39:42 namespace sandbox: enabled 2019/12/17 19:39:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/17 19:39:42 fault injection: enabled 2019/12/17 19:39:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/17 19:39:42 net packet injection: enabled 2019/12/17 19:39:42 net device setup: enabled 2019/12/17 19:39:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/17 19:39:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 19:41:47 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x66) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000ec0)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:41:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/161, 0xa1}, {0x0}, {0x0}, {0x0, 0x322}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e007d9) shutdown(r0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x0) syzkaller login: [ 204.049352][ T9293] IPVS: ftp: loaded support on port[0] = 21 [ 204.187284][ T9293] chnl_net:caif_netlink_parms(): no params data found [ 204.235893][ T9293] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.245628][ T9295] IPVS: ftp: loaded support on port[0] = 21 [ 204.246689][ T9293] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.261166][ T9293] device bridge_slave_0 entered promiscuous mode [ 204.270573][ T9293] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.277711][ T9293] bridge0: port 2(bridge_slave_1) entered disabled state 19:41:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x59, 0x35}, [@call]}, &(0x7f0000000140)='\x17\xafL\x00', 0x4, 0x99, &(0x7f0000000240)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x55) [ 204.287309][ T9293] device bridge_slave_1 entered promiscuous mode [ 204.321934][ T9293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.342607][ T9293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.410637][ T9293] team0: Port device team_slave_0 added [ 204.430281][ T9293] team0: Port device team_slave_1 added 19:41:47 executing program 3: set_mempolicy(0x2, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 204.522613][ T9293] device hsr_slave_0 entered promiscuous mode [ 204.550906][ T9297] IPVS: ftp: loaded support on port[0] = 21 [ 204.559538][ T9293] device hsr_slave_1 entered promiscuous mode [ 204.756069][ T9295] chnl_net:caif_netlink_parms(): no params data found [ 204.775356][ T9300] IPVS: ftp: loaded support on port[0] = 21 [ 204.831544][ T9293] netdevsim netdevsim0 netdevsim0: renamed from eth0 19:41:48 executing program 4: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x3c4, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0xa, 0x2a77, 0xfc90000}, 0x80, &(0x7f0000000040), 0x5, &(0x7f0000001280)}, 0x0) [ 204.907030][ T9293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.011561][ T9293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.073692][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.101480][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.110146][ T9295] device bridge_slave_0 entered promiscuous mode 19:41:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0743cc05e38364785dd9bb9d95ae052b", 0x11) [ 205.123204][ T9293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.172812][ T9302] IPVS: ftp: loaded support on port[0] = 21 [ 205.228578][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.237691][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.248343][ T9295] device bridge_slave_1 entered promiscuous mode [ 205.271164][ T9305] IPVS: ftp: loaded support on port[0] = 21 [ 205.362099][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.404701][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.428318][ T9297] chnl_net:caif_netlink_parms(): no params data found [ 205.465883][ T9295] team0: Port device team_slave_0 added [ 205.528279][ T9295] team0: Port device team_slave_1 added [ 205.549177][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.557201][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.568748][ T9297] device bridge_slave_0 entered promiscuous mode [ 205.651081][ T9295] device hsr_slave_0 entered promiscuous mode [ 205.689459][ T9295] device hsr_slave_1 entered promiscuous mode [ 205.769275][ T9295] debugfs: Directory 'hsr0' with parent '/' already present! [ 205.780149][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.787225][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.795179][ T9297] device bridge_slave_1 entered promiscuous mode [ 205.834635][ T9302] chnl_net:caif_netlink_parms(): no params data found [ 205.869804][ T9293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.876810][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 205.888405][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.938176][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.987998][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.996988][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.005573][ T9302] device bridge_slave_0 entered promiscuous mode [ 206.015913][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.024035][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.032012][ T9302] device bridge_slave_1 entered promiscuous mode [ 206.053612][ T9297] team0: Port device team_slave_0 added [ 206.072644][ T9295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.141379][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 206.165664][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.176515][ T9297] team0: Port device team_slave_1 added [ 206.190875][ T9295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.235750][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.244120][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.273550][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.291448][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.298512][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.306951][ T9300] device bridge_slave_0 entered promiscuous mode [ 206.315363][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.323321][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.331499][ T9300] device bridge_slave_1 entered promiscuous mode [ 206.339702][ T9295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.385342][ T9293] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.393076][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.400488][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.408134][ T9305] device bridge_slave_0 entered promiscuous mode [ 206.472426][ T9297] device hsr_slave_0 entered promiscuous mode [ 206.509569][ T9297] device hsr_slave_1 entered promiscuous mode [ 206.549298][ T9297] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.567191][ T9295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.613239][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.620867][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.628591][ T9305] device bridge_slave_1 entered promiscuous mode [ 206.644375][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.656821][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.688985][ T9302] team0: Port device team_slave_0 added [ 206.702872][ T9302] team0: Port device team_slave_1 added [ 206.716616][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.726184][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.734997][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.742269][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.751867][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.762042][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.770580][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.777717][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.787607][ T9300] team0: Port device team_slave_0 added [ 206.805423][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.834245][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.845025][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.853621][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.864580][ T9300] team0: Port device team_slave_1 added [ 206.872745][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.973143][ T9302] device hsr_slave_0 entered promiscuous mode [ 207.009684][ T9302] device hsr_slave_1 entered promiscuous mode [ 207.079223][ T9302] debugfs: Directory 'hsr0' with parent '/' already present! [ 207.097543][ T9305] team0: Port device team_slave_0 added [ 207.107897][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.116671][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.125550][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.134477][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.143074][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.151622][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.160697][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.171900][ T9297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.238417][ T9297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.292634][ T9297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.342161][ T9297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.402482][ T9305] team0: Port device team_slave_1 added [ 207.411952][ T9293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.423483][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.446879][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.455879][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.545230][ T9300] device hsr_slave_0 entered promiscuous mode [ 207.610346][ T9300] device hsr_slave_1 entered promiscuous mode [ 207.640294][ T9300] debugfs: Directory 'hsr0' with parent '/' already present! [ 207.671127][ T9305] device hsr_slave_0 entered promiscuous mode [ 207.740084][ T9305] device hsr_slave_1 entered promiscuous mode [ 207.819295][ T9305] debugfs: Directory 'hsr0' with parent '/' already present! [ 207.854403][ T9293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.904411][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.920003][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.986667][ T9302] netdevsim netdevsim4 netdevsim0: renamed from eth0 19:41:51 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0) [ 208.064785][ T9300] netdevsim netdevsim3 netdevsim0: renamed from eth0 19:41:51 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0) [ 208.121535][ T9300] netdevsim netdevsim3 netdevsim1: renamed from eth1 19:41:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 208.182609][ T9302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.221821][ T9302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.261684][ T9302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.292967][ T9305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.341476][ T9300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.410537][ T9300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.443024][ T9305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.507482][ T9305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.556475][ T9305] netdevsim netdevsim5 netdevsim3: renamed from eth3 19:41:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100000000000000075d2dd15b6210d53eed19bc0080000033270c6a98d91c22def1125d7b1e821039a85ad8b91cea336a1b", 0xd4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 208.671360][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.732949][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.748569][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.757717][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.765616][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.787779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.796998][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.806007][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.813141][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.826539][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.834737][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.843515][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.852268][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.859478][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.885413][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.894538][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.903353][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.913957][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.923251][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.939030][ T9297] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.975601][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.988585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.996852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.004906][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.014878][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.023601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.032258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.041107][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.049876][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.058512][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.067243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.075593][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.082716][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.091419][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.100277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.108585][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.115757][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.132059][ T9295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.150128][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.158138][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.176792][ T9302] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.195552][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.204977][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.216627][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.248498][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.276884][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.285208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.293738][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.303963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.312799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.321828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.330765][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.337823][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.345689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.355772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.364486][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.371590][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.390496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.398382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.406671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.415387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.424242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.433494][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.442166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.450508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.473524][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.484478][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.534298][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.541483][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.567001][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.582679][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.591781][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.600521][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.608905][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.620580][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.628973][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.638496][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.647104][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.655441][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.668683][ T9302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 19:41:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xac300000, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000002000ffae00060c00000f000081000000fe018708546fabca07007d06a40000", 0x23}], 0x1}, 0x0) [ 209.682955][ T9302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.697810][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.725954][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.741702][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.753224][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.763534][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.771739][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 19:41:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffd74, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)=""/4096, 0xfffffffffffffe56}, 0x2000) [ 209.819663][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.828627][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.837774][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.845324][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.856960][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.866209][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.874946][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.882141][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.890584][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.899602][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.908473][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.917904][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.927167][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.934309][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.942871][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.950745][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 19:41:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffd74, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)=""/4096, 0xfffffffffffffe56}, 0x2000) [ 210.002455][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.018757][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.040215][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.056075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.064846][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.072009][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.086013][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.095739][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 19:41:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffd74, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)=""/4096, 0xfffffffffffffe56}, 0x2000) [ 210.112039][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.125148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.136320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.151780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.164860][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.175949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.188531][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.203362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.220081][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.227523][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.240689][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.249786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.257604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.266541][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.276745][ T9305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.311192][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.320090][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.333342][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.343840][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.352585][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.363974][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.373540][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.391604][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.403169][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.448878][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.463880][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.471841][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.506032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.539002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 19:41:53 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) [ 210.574031][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.110846][ T3674] BUG: unable to handle page fault for address: fffff52002c80000 [ 211.118622][ T3674] #PF: supervisor read access in kernel mode [ 211.124597][ T3674] #PF: error_code(0x0000) - not-present page [ 211.130587][ T3674] PGD 21ffee067 P4D 21ffee067 PUD aa51c067 PMD 5b3a3067 PTE 0 [ 211.138044][ T3674] Oops: 0000 [#1] PREEMPT SMP KASAN [ 211.143221][ T3674] CPU: 1 PID: 3674 Comm: ion_system_heap Not tainted 5.5.0-rc2-syzkaller #0 [ 211.151872][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.162527][ T3674] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 211.168324][ T3674] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 211.187916][ T3674] RSP: 0018:ffffc9000c70fab8 EFLAGS: 00010216 [ 211.193962][ T3674] RAX: fffff52002c80000 RBX: fffff52002c84000 RCX: ffffffff85ded289 [ 211.201909][ T3674] RDX: 0000000000000001 RSI: 0000000000020000 RDI: ffffc90016400000 [ 211.209874][ T3674] RBP: ffffc9000c70fad0 R08: fffff52002c84000 R09: 0000000000004000 [ 211.217823][ T3674] R10: fffff52002c83fff R11: ffffc9001641ffff R12: fffff52002c80000 [ 211.225772][ T3674] R13: 0000000000020000 R14: 0000000000000000 R15: ffffc9000c70fd08 [ 211.233742][ T3674] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 211.242670][ T3674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.249315][ T3674] CR2: fffff52002c80000 CR3: 0000000098afe000 CR4: 00000000001406e0 [ 211.257264][ T3674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.265210][ T3674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.273159][ T3674] Call Trace: [ 211.276431][ T3674] memset+0x24/0x40 [ 211.280218][ T3674] ion_heap_clear_pages+0x49/0x70 [ 211.285217][ T3674] ion_heap_sglist_zero+0x210/0x270 [ 211.290410][ T3674] ? ion_heap_deferred_free+0x630/0x630 [ 211.295936][ T3674] ? mark_lock+0xc2/0x1220 [ 211.300427][ T3674] ? pgprot_writecombine+0x5e/0xf0 [ 211.305530][ T3674] ? pagerange_is_ram_callback+0x130/0x130 [ 211.311324][ T3674] ? ion_heap_deferred_free+0x295/0x630 [ 211.316956][ T3674] ion_heap_buffer_zero+0xf5/0x150 [ 211.322048][ T3674] ion_system_heap_free+0x1eb/0x250 [ 211.327226][ T3674] ion_buffer_destroy+0x159/0x2d0 [ 211.332242][ T3674] ion_heap_deferred_free+0x29d/0x630 [ 211.337594][ T3674] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 211.342945][ T3674] ? trace_hardirqs_on+0x67/0x240 [ 211.348032][ T3674] ? finish_wait+0x260/0x260 [ 211.352600][ T3674] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 211.358819][ T3674] ? __kthread_parkme+0x108/0x1c0 [ 211.363832][ T3674] ? __kasan_check_read+0x11/0x20 [ 211.369457][ T3674] kthread+0x361/0x430 [ 211.373518][ T3674] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 211.378891][ T3674] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 211.384587][ T3674] ret_from_fork+0x24/0x30 [ 211.388991][ T3674] Modules linked in: [ 211.392871][ T3674] CR2: fffff52002c80000 [ 211.397022][ T3674] ---[ end trace af61e4bf663da25e ]--- [ 211.402480][ T3674] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 211.408277][ T3674] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 211.428909][ T3674] RSP: 0018:ffffc9000c70fab8 EFLAGS: 00010216 [ 211.435059][ T3674] RAX: fffff52002c80000 RBX: fffff52002c84000 RCX: ffffffff85ded289 [ 211.443115][ T3674] RDX: 0000000000000001 RSI: 0000000000020000 RDI: ffffc90016400000 [ 211.451080][ T3674] RBP: ffffc9000c70fad0 R08: fffff52002c84000 R09: 0000000000004000 [ 211.459041][ T3674] R10: fffff52002c83fff R11: ffffc9001641ffff R12: fffff52002c80000 [ 211.466992][ T3674] R13: 0000000000020000 R14: 0000000000000000 R15: ffffc9000c70fd08 [ 211.474942][ T3674] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 211.483847][ T3674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.490423][ T3674] CR2: fffff52002c80000 CR3: 0000000098afe000 CR4: 00000000001406e0 [ 211.498387][ T3674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.506349][ T3674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.514297][ T3674] Kernel panic - not syncing: Fatal exception [ 211.521737][ T3674] Kernel Offset: disabled [ 211.526079][ T3674] Rebooting in 86400 seconds..