[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.136' (ECDSA) to the list of known hosts. 2020/09/08 16:16:34 fuzzer started 2020/09/08 16:16:35 dialing manager at 10.128.0.26:35305 2020/09/08 16:16:35 syscalls: 3332 2020/09/08 16:16:35 code coverage: enabled 2020/09/08 16:16:35 comparison tracing: enabled 2020/09/08 16:16:35 extra coverage: enabled 2020/09/08 16:16:35 setuid sandbox: enabled 2020/09/08 16:16:35 namespace sandbox: enabled 2020/09/08 16:16:35 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/08 16:16:35 fault injection: enabled 2020/09/08 16:16:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/08 16:16:35 net packet injection: enabled 2020/09/08 16:16:35 net device setup: enabled 2020/09/08 16:16:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/08 16:16:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/08 16:16:35 USB emulation: enabled 2020/09/08 16:16:35 hci packet injection: enabled 16:20:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="440f20c0663502000000440f22c026660f388127baa100ed0fc73a99bad004b04bee0f01cb670fe838dfe0ba210066b80000000066ef"}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:20:23 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 16:20:24 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 16:20:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) accept$inet(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 16:20:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000613756ca1fdec1cb8e17cda153ad0726c89cdaceec68f0d9a3b3ecf09b358159c3273494be17dbfe5c89a7a3da82c7c281f50a0f60206d0e9a4f04ecdf23fe38034b25b3378ebfba332eb9a44406e023c2f9467e079d39e91b0401818513f81839e262c27ed72705f0207d917e7b1314227b002049aa5da6965c5d8bcb7139c535ab17363c1947301ac0f2418894458e2ef584d4e3887d81651ef59a648ddda847af23e32b9e82cc177d5da467ab5d51b53854398729005f549670aa5eb3cf8ebfe1c146f28f7e09e83f5353520cd1f8e3cf30a5d59be6124b05dcc7b4b423fdb038434ed37d405f9073909b16ac971e80ba4e2943a8648966b3076bf7f6c3bb34"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x270, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x212, 0x10, &(0x7f0000000000), 0xfffffffffffffea8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000), 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) 16:20:24 executing program 5: fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syzkaller login: [ 290.073373][ T6879] IPVS: ftp: loaded support on port[0] = 21 [ 290.288255][ T6881] IPVS: ftp: loaded support on port[0] = 21 [ 290.365072][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 290.514015][ T6883] IPVS: ftp: loaded support on port[0] = 21 [ 290.642496][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.650212][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.659151][ T6879] device bridge_slave_0 entered promiscuous mode [ 290.695235][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.722515][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.730829][ T6879] device bridge_slave_1 entered promiscuous mode [ 290.739955][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 290.781234][ T6885] IPVS: ftp: loaded support on port[0] = 21 [ 290.821237][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.866268][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.915004][ T6887] IPVS: ftp: loaded support on port[0] = 21 [ 291.014436][ T6879] team0: Port device team_slave_0 added [ 291.034497][ T6879] team0: Port device team_slave_1 added [ 291.149981][ T6889] IPVS: ftp: loaded support on port[0] = 21 [ 291.206222][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.216951][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.232637][ T6881] device bridge_slave_0 entered promiscuous mode [ 291.246429][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.254910][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.264602][ T6881] device bridge_slave_1 entered promiscuous mode [ 291.282804][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.290093][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.318348][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.335217][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.342966][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.369593][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.395620][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 291.419949][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.439900][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.539048][ T6879] device hsr_slave_0 entered promiscuous mode [ 291.545795][ T6879] device hsr_slave_1 entered promiscuous mode [ 291.613328][ T6881] team0: Port device team_slave_0 added [ 291.630375][ T6881] team0: Port device team_slave_1 added [ 291.740512][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.750874][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.762171][ T6883] device bridge_slave_0 entered promiscuous mode [ 291.772500][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.780374][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.789234][ T6883] device bridge_slave_1 entered promiscuous mode [ 291.879097][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.886094][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.914601][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.971590][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.981068][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.009445][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.039654][ T17] Bluetooth: hci0: command 0x0409 tx timeout [ 292.042223][ T6889] chnl_net:caif_netlink_parms(): no params data found [ 292.084231][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.094200][ T6885] chnl_net:caif_netlink_parms(): no params data found [ 292.159231][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.205671][ T6881] device hsr_slave_0 entered promiscuous mode [ 292.214513][ T6881] device hsr_slave_1 entered promiscuous mode [ 292.221908][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.230874][ T6881] Cannot create hsr debugfs directory [ 292.273888][ T6887] chnl_net:caif_netlink_parms(): no params data found [ 292.287705][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 292.313200][ T6883] team0: Port device team_slave_0 added [ 292.355712][ T6883] team0: Port device team_slave_1 added [ 292.437744][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 292.512756][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.520933][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.549378][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.565673][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.573325][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.600099][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.623159][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.630763][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.639817][ T6889] device bridge_slave_0 entered promiscuous mode [ 292.677985][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 292.695583][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.704349][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.713707][ T6889] device bridge_slave_1 entered promiscuous mode [ 292.759052][ T6883] device hsr_slave_0 entered promiscuous mode [ 292.765986][ T6883] device hsr_slave_1 entered promiscuous mode [ 292.773901][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.781651][ T6883] Cannot create hsr debugfs directory [ 292.827236][ T6879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.849590][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.856702][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.868576][ T6885] device bridge_slave_0 entered promiscuous mode [ 292.882346][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.911200][ T6879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.917733][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 292.926126][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.933600][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.941943][ T6885] device bridge_slave_1 entered promiscuous mode [ 292.970314][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.980637][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.989314][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.997046][ T6887] device bridge_slave_0 entered promiscuous mode [ 293.011323][ T6879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.060369][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.068959][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.076831][ T6887] device bridge_slave_1 entered promiscuous mode [ 293.083530][ T7882] Bluetooth: hci5: command 0x0409 tx timeout [ 293.091572][ T6879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.110413][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.150742][ T6889] team0: Port device team_slave_0 added [ 293.180729][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.202185][ T6889] team0: Port device team_slave_1 added [ 293.262858][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.307695][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.314682][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.340947][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.354586][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.376222][ T6885] team0: Port device team_slave_0 added [ 293.383940][ T6881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.403898][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.417103][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.447972][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.471555][ T6885] team0: Port device team_slave_1 added [ 293.500035][ T6881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.534803][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.542257][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.570375][ T6885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.585674][ T6887] team0: Port device team_slave_0 added [ 293.602837][ T6881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.630487][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.637462][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.674228][ T6885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.687347][ T6887] team0: Port device team_slave_1 added [ 293.702467][ T6881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.716030][ T6889] device hsr_slave_0 entered promiscuous mode [ 293.727362][ T6889] device hsr_slave_1 entered promiscuous mode [ 293.735170][ T6889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.743402][ T6889] Cannot create hsr debugfs directory [ 293.826186][ T6885] device hsr_slave_0 entered promiscuous mode [ 293.834300][ T6885] device hsr_slave_1 entered promiscuous mode [ 293.842827][ T6885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.851294][ T6885] Cannot create hsr debugfs directory [ 293.860691][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.871715][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.899832][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.927364][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.936064][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.965332][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.054560][ T6887] device hsr_slave_0 entered promiscuous mode [ 294.064175][ T6887] device hsr_slave_1 entered promiscuous mode [ 294.072913][ T6887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.080712][ T6887] Cannot create hsr debugfs directory [ 294.117810][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 294.213831][ T6883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.226107][ T6883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.300006][ T6883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.316444][ T6883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.357705][ T2462] Bluetooth: hci1: command 0x041b tx timeout [ 294.502711][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.518243][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 294.531422][ T6885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 294.569637][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.580742][ T6885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 294.632996][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.648330][ T6885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 294.665632][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.675178][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.684782][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.700567][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.717929][ T6889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.732514][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.749935][ T6885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 294.757718][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 294.778145][ T6889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.795147][ T6889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 294.822975][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.832290][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.841849][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.849333][ T3713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.857543][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.866574][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.875148][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.882374][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.894509][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.904105][ T6889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.953084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.961915][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.976994][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.984209][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.995616][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.004654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.007748][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 295.013800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.028006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.036410][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.043650][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.052296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.095573][ T6887] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.105686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.115743][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.125812][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.136826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.157938][ T3713] Bluetooth: hci5: command 0x041b tx timeout [ 295.167026][ T6887] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.178552][ T6887] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.202285][ T6887] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.221294][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.230443][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.240442][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.249525][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.258925][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.267441][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.276498][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.286579][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.296039][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.305037][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.333444][ T6879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.345295][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.363899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.375112][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.417450][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.427509][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.465360][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.475466][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.509703][ T6881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.542599][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.589683][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.597260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.645169][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.661954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.670764][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.695888][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.706544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.714950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.751930][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.781359][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.839302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.849519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.858287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.865345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.874411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.883392][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.892386][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.901500][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.911816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.954624][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.976446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.986699][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.995729][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.002937][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.011514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.019745][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.028142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.036361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.045815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.054820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.071610][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.091111][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.123751][ T6879] device veth0_vlan entered promiscuous mode [ 296.144290][ T6881] device veth0_vlan entered promiscuous mode [ 296.174633][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.183684][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.198043][ T17] Bluetooth: hci0: command 0x040f tx timeout [ 296.200206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.220951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.231556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.243013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.252253][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.259405][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.267449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.279450][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.325169][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.334957][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.344104][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.351369][ T8185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.360824][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.370308][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.379864][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.388077][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.399500][ T6879] device veth1_vlan entered promiscuous mode [ 296.410298][ T6881] device veth1_vlan entered promiscuous mode [ 296.424257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.438480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.439816][ T17] Bluetooth: hci1: command 0x040f tx timeout [ 296.446735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.461429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.470548][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.484294][ T6885] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.520329][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.528751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.536959][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.546166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.554673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.564498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.573932][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.584225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.592998][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.602561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.617691][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 296.618840][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.658902][ T6883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.687695][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.696568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.706014][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.713190][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.721203][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.731020][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.739981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.749164][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.756249][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.764421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.773956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.782930][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.790089][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.798107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.806742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.815994][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.823167][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.831114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.841835][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.850248][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.867593][ T6879] device veth0_macvtap entered promiscuous mode [ 296.880997][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 296.908915][ T6881] device veth0_macvtap entered promiscuous mode [ 296.940513][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.950304][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.968842][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.977405][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.986588][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.995450][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.004941][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.014776][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.025074][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.034124][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.043155][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.052162][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.060974][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.069939][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.079262][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.088509][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.096625][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.105504][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.116354][ T12] Bluetooth: hci4: command 0x040f tx timeout [ 297.138712][ T6881] device veth1_macvtap entered promiscuous mode [ 297.150103][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.168158][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.178687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.188470][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.196939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.206523][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.216097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.225057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.238653][ T6879] device veth1_macvtap entered promiscuous mode [ 297.247800][ T5] Bluetooth: hci5: command 0x040f tx timeout [ 297.281760][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.289896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.299139][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.307169][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.316819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.327098][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.335599][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.343301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.352055][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.361494][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.370604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.402229][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.423663][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.446574][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.487736][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.496657][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.506393][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.516923][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.526329][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.535458][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.544691][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.552944][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.563283][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.576567][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.590648][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.603589][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.621576][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.636645][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.659585][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.674475][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.686271][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.695716][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.710585][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.725131][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.739346][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.750529][ T6881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.764105][ T6881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.773510][ T6881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.783233][ T6881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.805926][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.826273][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.842253][ T6879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.853408][ T6879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.869112][ T6879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.882423][ T6879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.919923][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.931421][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.010560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.020273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.028045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.036277][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.046982][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.058563][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.072206][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.118461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.126028][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.148186][ T6883] device veth0_vlan entered promiscuous mode [ 298.161795][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.197467][ T8194] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 298.230602][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.264887][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.310558][ T17] Bluetooth: hci0: command 0x0419 tx timeout [ 298.315841][ T6883] device veth1_vlan entered promiscuous mode [ 298.377854][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.387389][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.397019][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.408387][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.479086][ T6883] device veth0_macvtap entered promiscuous mode [ 298.497486][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.509438][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.519636][ T3713] Bluetooth: hci1: command 0x0419 tx timeout [ 298.530010][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.531502][ T8212] overlayfs: filesystem on './bus' not supported as upperdir [ 298.549223][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.560767][ T6889] device veth0_vlan entered promiscuous mode 16:20:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008000c00060000001940a307040001", 0x2f}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) 16:20:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000002678693b43fd28da626475d9a67dc2208700737904"], 0x3c}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x17a, &(0x7f0000000180)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) [ 298.597790][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.618636][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.650034][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.678485][ T3713] Bluetooth: hci2: command 0x0419 tx timeout [ 298.679272][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.700426][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.720030][ T6883] device veth1_macvtap entered promiscuous mode [ 298.751824][ T6885] device veth0_vlan entered promiscuous mode [ 298.785009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.794932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.805252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.819875][ T8218] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.841008][ T6889] device veth1_vlan entered promiscuous mode [ 298.869241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.881894][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.893110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.913226][ T6885] device veth1_vlan entered promiscuous mode 16:20:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x300, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x2}) [ 298.940285][ T3713] Bluetooth: hci3: command 0x0419 tx timeout [ 298.961292][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.989530][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.022309][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 299.022337][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.024510][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.051314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.052059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.065164][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.065174][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.065183][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.065189][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.066597][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.081576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.082484][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.089838][ T6883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.089868][ T6883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.089893][ T6883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.089919][ T6883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.114983][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.115736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.116576][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.117193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.147245][ T8225] ================================================================== [ 299.147325][ T8225] BUG: KASAN: global-out-of-bounds in vga16fb_imageblit+0x1c36/0x2210 [ 299.147339][ T8225] Read of size 2 at addr ffffffff8899f6be by task syz-executor.1/8225 [ 299.147344][ T8225] [ 299.147363][ T8225] CPU: 0 PID: 8225 Comm: syz-executor.1 Not tainted 5.9.0-rc4-syzkaller #0 [ 299.147372][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.147379][ T8225] Call Trace: [ 299.147399][ T8225] dump_stack+0x198/0x1fd [ 299.147420][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.147436][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.147457][ T8225] print_address_description.constprop.0.cold+0x5/0x497 [ 299.147478][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.147579][ T8225] ? lockdep_hardirqs_off+0x96/0xd0 [ 299.147601][ T8225] ? vprintk_func+0x97/0x1a6 [ 299.147622][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.147639][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.147652][ T8225] kasan_report.cold+0x1f/0x37 [ 299.147673][ T8225] ? vga16fb_imageblit+0x1140/0x2210 [ 299.147689][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.147711][ T8225] vga16fb_imageblit+0x1c36/0x2210 [ 299.147738][ T8225] ? fb_pad_aligned_buffer+0xff/0x150 [ 299.147765][ T8225] soft_cursor+0x514/0xa30 [ 299.147799][ T8225] bit_cursor+0x1166/0x17d0 [ 299.147830][ T8225] ? kmalloc_array.constprop.0+0x20/0x20 [ 299.147859][ T8225] ? do_update_region+0x47c/0x630 [ 299.147880][ T8225] ? fb_get_color_depth+0x11a/0x240 [ 299.147898][ T8225] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 299.147920][ T8225] ? get_color+0x20e/0x410 [ 299.147943][ T8225] fbcon_cursor+0x537/0x660 [ 299.147961][ T8225] ? kmalloc_array.constprop.0+0x20/0x20 [ 299.147977][ T8225] ? fbcon_set_palette+0x3a8/0x490 [ 299.148000][ T8225] set_cursor+0x1d2/0x240 [ 299.148020][ T8225] redraw_screen+0x4b9/0x770 [ 299.148039][ T8225] ? vga16fb_update_fix+0x4a0/0x4a0 [ 299.148058][ T8225] ? vc_init+0x430/0x430 [ 299.148082][ T8225] ? fbcon_set_palette+0x3a8/0x490 [ 299.148104][ T8225] fbcon_modechanged+0x575/0x710 [ 299.148128][ T8225] fbcon_update_vcs+0x3a/0x50 [ 299.148147][ T8225] do_fb_ioctl+0x62e/0x690 [ 299.148167][ T8225] ? fb_set_suspend+0x1a0/0x1a0 [ 299.148186][ T8225] ? tomoyo_execute_permission+0x470/0x470 [ 299.148217][ T8225] ? lock_is_held_type+0xbb/0xf0 [ 299.148258][ T8225] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 299.148279][ T8225] ? do_vfs_ioctl+0x27d/0x1090 [ 299.148321][ T8225] ? __fget_files+0x294/0x400 [ 299.148349][ T8225] fb_ioctl+0xdd/0x130 [ 299.148365][ T8225] ? do_fb_ioctl+0x690/0x690 [ 299.148382][ T8225] __x64_sys_ioctl+0x193/0x200 [ 299.148402][ T8225] do_syscall_64+0x2d/0x70 [ 299.148462][ T8225] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 299.148478][ T8225] RIP: 0033:0x45d5b9 [ 299.148496][ T8225] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.148507][ T8225] RSP: 002b:00007f1a11c4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.148524][ T8225] RAX: ffffffffffffffda RBX: 000000000000e200 RCX: 000000000045d5b9 [ 299.148537][ T8225] RDX: 00000000200000c0 RSI: 0000000000004601 RDI: 0000000000000003 [ 299.148551][ T8225] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 299.148562][ T8225] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 299.148575][ T8225] R13: 00007ffc4346616f R14: 00007f1a11c4f9c0 R15: 000000000118cf4c [ 299.148601][ T8225] [ 299.148607][ T8225] The buggy address belongs to the variable: [ 299.148659][ T8225] transl_h+0x3e/0x40 [ 299.148666][ T8225] [ 299.148671][ T8225] Memory state around the buggy address: [ 299.148686][ T8225] ffffffff8899f580: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 299.148700][ T8225] ffffffff8899f600: 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 [ 299.148714][ T8225] >ffffffff8899f680: 00 00 00 00 f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 [ 299.148723][ T8225] ^ [ 299.148735][ T8225] ffffffff8899f700: 00 01 f9 f9 f9 f9 f9 f9 00 00 00 04 f9 f9 f9 f9 [ 299.148748][ T8225] ffffffff8899f780: 00 00 04 f9 f9 f9 f9 f9 00 00 00 00 00 00 02 f9 [ 299.148754][ T8225] ================================================================== [ 299.148760][ T8225] Disabling lock debugging due to kernel taint [ 299.150377][ T8225] Kernel panic - not syncing: panic_on_warn set ... [ 299.150395][ T8225] CPU: 0 PID: 8225 Comm: syz-executor.1 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 299.150405][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.150408][ T8225] Call Trace: [ 299.150428][ T8225] dump_stack+0x198/0x1fd [ 299.150445][ T8225] ? vga16fb_imageblit+0x1b40/0x2210 [ 299.150460][ T8225] panic+0x347/0x7c0 [ 299.150476][ T8225] ? __warn_printk+0xf3/0xf3 [ 299.150495][ T8225] ? preempt_schedule_common+0x59/0xc0 [ 299.150513][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.150531][ T8225] ? preempt_schedule_thunk+0x16/0x18 [ 299.150546][ T8225] ? trace_hardirqs_on+0x55/0x220 [ 299.150566][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.150583][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.150599][ T8225] end_report+0x4d/0x53 [ 299.150613][ T8225] kasan_report.cold+0xd/0x37 [ 299.150630][ T8225] ? vga16fb_imageblit+0x1140/0x2210 [ 299.150644][ T8225] ? vga16fb_imageblit+0x1c36/0x2210 [ 299.150659][ T8225] vga16fb_imageblit+0x1c36/0x2210 [ 299.150677][ T8225] ? fb_pad_aligned_buffer+0xff/0x150 [ 299.150693][ T8225] soft_cursor+0x514/0xa30 [ 299.150712][ T8225] bit_cursor+0x1166/0x17d0 [ 299.150733][ T8225] ? kmalloc_array.constprop.0+0x20/0x20 [ 299.150752][ T8225] ? do_update_region+0x47c/0x630 [ 299.150768][ T8225] ? fb_get_color_depth+0x11a/0x240 [ 299.150781][ T8225] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 299.150794][ T8225] ? get_color+0x20e/0x410 [ 299.150808][ T8225] fbcon_cursor+0x537/0x660 [ 299.150822][ T8225] ? kmalloc_array.constprop.0+0x20/0x20 [ 299.150836][ T8225] ? fbcon_set_palette+0x3a8/0x490 [ 299.150854][ T8225] set_cursor+0x1d2/0x240 [ 299.150872][ T8225] redraw_screen+0x4b9/0x770 [ 299.150889][ T8225] ? vga16fb_update_fix+0x4a0/0x4a0 [ 299.150906][ T8225] ? vc_init+0x430/0x430 [ 299.150923][ T8225] ? fbcon_set_palette+0x3a8/0x490 [ 299.150948][ T8225] fbcon_modechanged+0x575/0x710 [ 299.150967][ T8225] fbcon_update_vcs+0x3a/0x50 [ 299.150984][ T8225] do_fb_ioctl+0x62e/0x690 [ 299.150999][ T8225] ? fb_set_suspend+0x1a0/0x1a0 [ 299.151015][ T8225] ? tomoyo_execute_permission+0x470/0x470 [ 299.151029][ T8225] ? lock_is_held_type+0xbb/0xf0 [ 299.151050][ T8225] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 299.151066][ T8225] ? do_vfs_ioctl+0x27d/0x1090 [ 299.151086][ T8225] ? __fget_files+0x294/0x400 [ 299.151103][ T8225] fb_ioctl+0xdd/0x130 [ 299.151117][ T8225] ? do_fb_ioctl+0x690/0x690 [ 299.151130][ T8225] __x64_sys_ioctl+0x193/0x200 [ 299.151148][ T8225] do_syscall_64+0x2d/0x70 [ 299.151162][ T8225] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 299.151173][ T8225] RIP: 0033:0x45d5b9 [ 299.151188][ T8225] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.151207][ T8225] RSP: 002b:00007f1a11c4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.151223][ T8225] RAX: ffffffffffffffda RBX: 000000000000e200 RCX: 000000000045d5b9 [ 299.151232][ T8225] RDX: 00000000200000c0 RSI: 0000000000004601 RDI: 0000000000000003 [ 299.151242][ T8225] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 299.151250][ T8225] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 299.151259][ T8225] R13: 00007ffc4346616f R14: 00007f1a11c4f9c0 R15: 000000000118cf4c [ 299.152331][ T8225] Kernel Offset: disabled [ 300.074478][ T8225] Rebooting in 86400 seconds..