Warning: Permanently added '[localhost]:40236' (ECDSA) to the list of known hosts.
2020/07/15 03:53:31 fuzzer started
2020/07/15 03:53:32 dialing manager at 10.0.2.10:42091
2020/07/15 03:53:32 syscalls: 3178
2020/07/15 03:53:32 code coverage: enabled
2020/07/15 03:53:32 comparison tracing: enabled
2020/07/15 03:53:32 extra coverage: enabled
2020/07/15 03:53:32 setuid sandbox: enabled
2020/07/15 03:53:32 namespace sandbox: enabled
2020/07/15 03:53:32 Android sandbox: /sys/fs/selinux/policy does not exist
2020/07/15 03:53:32 fault injection: enabled
2020/07/15 03:53:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/07/15 03:53:32 net packet injection: enabled
2020/07/15 03:53:32 net device setup: enabled
2020/07/15 03:53:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/07/15 03:53:32 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/07/15 03:53:32 USB emulation: enabled
03:54:19 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:20 executing program 1:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x101802)
write$char_usb(r0, &(0x7f00000000c0)="ed", 0x1)
ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0)

03:54:20 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x11)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

syzkaller login: [  197.655651][ T8619] IPVS: ftp: loaded support on port[0] = 21
[  197.655815][ T8618] IPVS: ftp: loaded support on port[0] = 21
03:54:20 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xd}]}, 0x3c}}, 0x0)

[  198.091600][ T8622] IPVS: ftp: loaded support on port[0] = 21
[  198.373523][ T8623] IPVS: ftp: loaded support on port[0] = 21
[  198.404277][ T8618] chnl_net:caif_netlink_parms(): no params data found
[  198.443288][ T8619] chnl_net:caif_netlink_parms(): no params data found
[  198.639387][ T8622] chnl_net:caif_netlink_parms(): no params data found
[  198.737144][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.754919][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.780376][ T8619] device bridge_slave_0 entered promiscuous mode
[  198.829326][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.850263][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.867797][ T8618] device bridge_slave_0 entered promiscuous mode
[  198.884856][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.900141][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.915594][ T8619] device bridge_slave_1 entered promiscuous mode
[  198.958277][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.977473][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.996161][ T8618] device bridge_slave_1 entered promiscuous mode
[  199.054300][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.107117][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.156046][ T8619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.184231][ T8619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.231882][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.251193][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.276598][ T8622] device bridge_slave_0 entered promiscuous mode
[  199.302962][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.326955][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.340987][ T8622] device bridge_slave_1 entered promiscuous mode
[  199.359831][ T8618] team0: Port device team_slave_0 added
[  199.401617][ T8618] team0: Port device team_slave_1 added
[  199.431659][ T8619] team0: Port device team_slave_0 added
[  199.444582][ T8619] team0: Port device team_slave_1 added
[  199.457192][ T8623] chnl_net:caif_netlink_parms(): no params data found
[  199.516136][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.551544][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.583160][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.598534][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.664373][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.703130][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.722630][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.799453][ T8619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.847778][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.872651][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.956261][ T8619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.989802][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.006225][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.066243][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.105746][ T8622] team0: Port device team_slave_0 added
[  200.122221][ T8622] team0: Port device team_slave_1 added
[  200.195027][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.213270][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.267346][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.350569][ T8618] device hsr_slave_0 entered promiscuous mode
[  200.417416][ T8618] device hsr_slave_1 entered promiscuous mode
[  200.559051][ T8619] device hsr_slave_0 entered promiscuous mode
[  200.637191][ T8619] device hsr_slave_1 entered promiscuous mode
[  200.717058][ T8619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.736589][ T8619] Cannot create hsr debugfs directory
[  200.750900][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.769799][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.790714][ T8623] device bridge_slave_0 entered promiscuous mode
[  200.807420][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.825374][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.899386][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.966167][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.000120][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.029587][ T8623] device bridge_slave_1 entered promiscuous mode
[  201.131792][ T8622] device hsr_slave_0 entered promiscuous mode
[  201.187302][ T8622] device hsr_slave_1 entered promiscuous mode
[  201.247384][ T8622] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.262695][ T8622] Cannot create hsr debugfs directory
[  201.277410][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.317553][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.388844][ T8623] team0: Port device team_slave_0 added
[  201.434477][ T8623] team0: Port device team_slave_1 added
[  201.489285][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.504699][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.557212][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.588894][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.606971][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.670832][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.875144][ T8623] device hsr_slave_0 entered promiscuous mode
[  201.967829][ T8623] device hsr_slave_1 entered promiscuous mode
[  202.057108][ T8623] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.085102][ T8623] Cannot create hsr debugfs directory
[  202.163359][ T8618] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  202.474438][ T8618] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  202.571074][ T8618] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  202.643945][ T8618] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  202.816217][ T8619] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  202.885246][ T8619] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  202.983148][ T8619] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  203.063115][ T8619] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  203.295968][ T8622] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  203.360319][ T8622] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  203.482588][ T8622] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  203.623684][ T8622] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  203.774502][ T8623] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  203.880863][ T8623] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  203.979634][ T8623] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  204.064645][ T8623] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  204.334984][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.373910][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.405976][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.432126][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.462104][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  204.492253][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  204.518968][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  204.542332][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  204.577954][ T8619] 8021q: adding VLAN 0 to HW filter on device team0
[  204.616397][ T8618] 8021q: adding VLAN 0 to HW filter on device team0
[  204.652104][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  204.684318][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  204.784492][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.805798][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.834891][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  204.863291][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  204.905262][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.919859][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.965959][ T8623] 8021q: adding VLAN 0 to HW filter on device team0
[  205.023130][ T8622] 8021q: adding VLAN 0 to HW filter on device team0
[  205.051535][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  205.078368][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  205.104933][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  205.125216][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  205.143105][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  205.165773][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  205.188073][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  205.204902][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  205.226264][ T8639] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.240944][ T8639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.258290][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  205.275941][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  205.294864][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  205.313863][ T8639] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.330666][ T8639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.374511][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  205.394710][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  205.419837][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  205.440705][   T23] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.457937][   T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.473135][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  205.488550][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  205.503312][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  205.519079][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  205.533737][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.546450][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.562063][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  205.577466][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  205.598642][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  205.620340][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  205.643979][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  205.664777][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  205.680783][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  205.700206][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  205.744456][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  205.778741][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  205.797627][   T23] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.817419][   T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.834935][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  205.851095][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  205.870712][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  205.885921][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  205.905926][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  205.926028][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  205.941827][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  205.965779][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  205.983175][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  206.010103][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.043282][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.088497][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  206.128564][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  206.169444][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  206.210506][ T8619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  206.243675][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  206.276450][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  206.327903][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  206.371567][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  206.408376][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  206.441684][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  206.470474][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  206.495709][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  206.524276][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  206.573592][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  206.603683][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  206.649222][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  206.697912][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  206.719795][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  206.739007][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  206.757313][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  206.774107][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  206.794205][ T8622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  206.815983][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  206.840636][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  206.854730][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  206.869247][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  206.888344][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  206.904913][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.920083][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.936627][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  206.951938][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  206.982352][ T8623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.004432][ T8623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  207.025966][ T8619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.040045][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  207.060702][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  207.078650][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  207.100824][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  207.147346][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.169855][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  207.186076][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  207.202145][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  207.218914][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  207.256393][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.274166][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.289047][ T2406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  207.305691][ T2406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  207.339628][ T2406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  207.358610][ T2406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  207.378918][ T2406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  207.403137][ T2406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  207.444495][ T2406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  207.458465][ T2406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  207.484462][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  207.499603][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  207.515789][ T8619] device veth0_vlan entered promiscuous mode
[  207.537319][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  207.551956][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  207.575874][ T8623] device veth0_vlan entered promiscuous mode
[  207.590953][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  207.604622][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  207.618050][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  207.631627][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  207.650148][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  207.663274][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  207.679911][ T8622] device veth0_vlan entered promiscuous mode
[  207.695338][ T8619] device veth1_vlan entered promiscuous mode
[  207.708366][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  207.722914][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  207.737699][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  207.777173][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  207.790760][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  207.805308][ T8623] device veth1_vlan entered promiscuous mode
[  207.822011][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  207.836296][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  207.851386][ T8622] device veth1_vlan entered promiscuous mode
[  207.869775][ T8618] device veth0_vlan entered promiscuous mode
[  207.902545][ T8618] device veth1_vlan entered promiscuous mode
[  207.915108][ T8619] device veth0_macvtap entered promiscuous mode
[  207.929475][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  207.943532][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  207.958838][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  207.975228][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  207.998053][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  208.012632][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  208.029499][ T8623] device veth0_macvtap entered promiscuous mode
[  208.048680][ T8619] device veth1_macvtap entered promiscuous mode
[  208.068711][ T8623] device veth1_macvtap entered promiscuous mode
[  208.099076][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  208.114777][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  208.131878][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  208.149757][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  208.171824][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  208.189257][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  208.213540][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.238117][ T8622] device veth0_macvtap entered promiscuous mode
[  208.256440][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  208.274683][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  208.289993][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  208.306994][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.326459][ T8622] device veth1_macvtap entered promiscuous mode
[  208.350677][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  208.383297][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.410915][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.430507][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  208.448908][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  208.469688][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  208.488366][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  208.505699][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  208.543175][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  208.562766][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.584569][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.613497][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  208.631216][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  208.792377][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  208.816025][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.838846][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  208.873700][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.902751][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.930313][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  208.951490][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  208.980001][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.000188][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.158542][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  209.195320][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.226102][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  209.257793][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.295324][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.317592][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  209.340199][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  209.422736][ T8618] device veth0_macvtap entered promiscuous mode
[  209.526459][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  209.811934][ T8618] device veth1_macvtap entered promiscuous mode
[  209.975320][ T8619] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[  210.159827][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  210.262069][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.330445][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  210.388785][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.441426][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  210.522304][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.686435][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.728584][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  210.792897][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  210.823439][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  210.876206][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.921613][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  210.960089][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.011391][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
03:54:34 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x11)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

[  211.050169][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.112516][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.151382][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
03:54:34 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

[  211.204533][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
03:54:34 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x11)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

03:54:34 executing program 1:
r0 = socket(0x1c, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c)

03:54:34 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:34 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x11)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

03:54:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r1, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

03:54:34 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:34 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r1, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

03:54:34 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:34 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

03:54:34 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:34 executing program 0:
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:34 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 0:
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

03:54:35 executing program 0:
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)

03:54:35 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 1:
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:54:35 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 1:
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:54:35 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 1:
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x11)
fcntl$notify(0xffffffffffffffff, 0x402, 0xc67174f2414fbad0)

03:54:35 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
write$P9_RCREATE(r0, &(0x7f0000000000)={0x18}, 0x18)

03:54:35 executing program 1:
r0 = socket(0x11, 0x3, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

03:54:35 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x11)
fcntl$notify(0xffffffffffffffff, 0x402, 0xc67174f2414fbad0)

03:54:35 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

03:54:35 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x11)
fcntl$notify(0xffffffffffffffff, 0x402, 0xc67174f2414fbad0)

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

03:54:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x2e1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000400)="fa01711425a6b42ddc5c46757f6b420f356f4f008ce309074327bfdd3558461fe59a8fd6186e0a11a693ed5f54b054e87042b72df1ce9aa8d1c176bea1239e42ab4119d8ebba7d7572e655238e8156a75410f44a7665b186275f2182aeae9570569bea3a5a5e22475ef4d24a9fa031de380e0d1a5ddf665a39fa4317200e1cf4457dd6a9c3a948a4d159e7c13db66c42327db092a6924604db4343b6386fd648d7e27be1cfc4ebcd71ff34048236cd59a7d4401307f3277e5ed875001a30134ed752a5b811689ab9c8060db2b73c61fa347bbe6b13411aac0c51618cd32e543960310be51c882ddd5577b9a06c", 0xe3f270009808bfb, 0x2000400d, 0x0, 0xfffffffffffffff2)
sendto$inet6(r0, &(0x7f0000000100)="96", 0x1, 0x0, 0x0, 0x0)

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

03:54:35 executing program 2:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x11)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

03:54:35 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000)

03:54:35 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

03:54:35 executing program 2:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x11)
fcntl$notify(r0, 0x402, 0xc67174f2414fbad0)

03:54:35 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4})

[  212.854848][ T8859] ==================================================================
[  212.855753][ T8859] BUG: KASAN: vmalloc-out-of-bounds in bitfill_aligned+0x34a/0x400
[  212.855884][ T8859] Write of size 8 at addr ffffc90009b81000 by task syz-executor.0/8859
[  212.855887][ T8859] 
[  212.856027][ T8859] CPU: 0 PID: 8859 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0
[  212.856032][ T8859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
[  212.856065][ T8859] Call Trace:
[  212.856514][ T8859]  dump_stack+0x18f/0x20d
[  212.856589][ T8859]  ? bitfill_aligned+0x34a/0x400
[  212.856597][ T8859]  ? bitfill_aligned+0x34a/0x400
[  212.856608][ T8859]  print_address_description.constprop.0.cold+0x5/0x436
[  212.856826][ T8859]  ? lockdep_hardirqs_off+0x66/0xa0
[  212.856826][ T8859]  ? vprintk_func+0x97/0x1a6
[  212.856826][ T8859]  ? bitfill_aligned+0x34a/0x400
[  212.856826][ T8859]  kasan_report.cold+0x1f/0x37
[  212.856826][ T8859]  ? bitfill_aligned+0x34a/0x400
[  212.856826][ T8859]  bitfill_aligned+0x34a/0x400
[  212.856826][ T8859]  sys_fillrect+0x408/0x7a0
[  212.856826][ T8859]  ? sys_fillrect+0x7a0/0x7a0
[  212.856826][ T8859]  drm_fb_helper_sys_fillrect+0x1e/0x190
[  212.856826][ T8859]  bit_clear_margins+0x2d5/0x4a0
[  212.856826][ T8859]  ? bit_bmove+0x210/0x210
[  212.856826][ T8859]  ? fb_get_color_depth+0x11a/0x240
[  212.856826][ T8859]  fbcon_clear_margins+0x1d5/0x230
[  212.856826][ T8859]  fbcon_switch+0xb6e/0x16c0
[  212.856826][ T8859]  ? fbcon_scroll+0x3600/0x3600
[  212.856826][ T8859]  ? fbcon_cursor+0x52b/0x650
[  212.856826][ T8859]  ? kmalloc_array.constprop.0+0x20/0x20
[  212.856826][ T8859]  ? is_console_locked+0x5/0x10
[  212.856826][ T8859]  ? fbcon_set_origin+0x26/0x50
[  212.856826][ T8859]  redraw_screen+0x2ae/0x770
[  212.856826][ T8859]  ? vc_init+0x440/0x440
[  212.856826][ T8859]  ? fb_get_color_depth+0x11a/0x240
[  212.856826][ T8859]  ? fbcon_set_palette+0x3a8/0x490
[  212.856826][ T8859]  fbcon_modechanged+0x575/0x710
[  212.856826][ T8859]  fbcon_update_vcs+0x3a/0x50
[  212.856826][ T8859]  fb_set_var+0xae8/0xd60
[  212.856826][ T8859]  ? fb_blank+0x190/0x190
[  212.856826][ T8859]  ? lock_release+0x8d0/0x8d0
[  212.856826][ T8859]  ? lock_is_held_type+0xb0/0xe0
[  212.856826][ T8859]  ? do_fb_ioctl+0x2f2/0x6c0
[  212.856826][ T8859]  ? _raw_spin_unlock_irqrestore+0x62/0xe0
[  212.856826][ T8859]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  212.856826][ T8859]  ? trace_hardirqs_on+0x5f/0x220
[  212.856826][ T8859]  do_fb_ioctl+0x33f/0x6c0
[  212.856826][ T8859]  ? fb_set_suspend+0x1a0/0x1a0
[  212.856826][ T8859]  ? lock_downgrade+0x820/0x820
[  212.856826][ T8859]  ? trace_hardirqs_on+0x5f/0x220
[  212.856826][ T8859]  ? lockdep_hardirqs_on+0x6a/0xe0
[  212.856826][ T8859]  ? tomoyo_path_number_perm+0x244/0x4d0
[  212.856826][ T8859]  ? tomoyo_execute_permission+0x470/0x470
[  212.856826][ T8859]  ? __might_fault+0xef/0x1d0
[  212.856826][ T8859]  ? __sanitizer_cov_trace_switch+0x45/0x70
[  212.856826][ T8859]  ? do_vfs_ioctl+0x27d/0x1090
[  212.856826][ T8859]  ? generic_block_fiemap+0x60/0x60
[  212.856826][ T8859]  fb_compat_ioctl+0x175/0xc10
[  212.856826][ T8859]  ? fb_open+0x430/0x430
[  212.856826][ T8859]  ? __fget_files+0x294/0x400
[  212.856826][ T8859]  ? fb_open+0x430/0x430
[  212.856826][ T8859]  __do_compat_sys_ioctl+0x1d3/0x230
[  212.856826][ T8859]  do_syscall_32_irqs_on+0x3f/0x60
[  212.856826][ T8859]  do_fast_syscall_32+0x7f/0x120
[  212.856826][ T8859]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  212.856826][ T8859] RIP: 0023:0xf7fdd569
[  212.856826][ T8859] Code: Bad RIP value.
[  212.856826][ T8859] RSP: 002b:00000000f5dd80bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  212.856826][ T8859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601
[  212.856826][ T8859] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  212.856826][ T8859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  212.856826][ T8859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  212.856826][ T8859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  212.856826][ T8859] 
[  212.856826][ T8859] 
[  212.856826][ T8859] Memory state around the buggy address:
[  212.856826][ T8859]  ffffc90009b80f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  212.856826][ T8859]  ffffc90009b80f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  212.856826][ T8859] >ffffc90009b81000: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[  212.856826][ T8859]                    ^
[  212.856826][ T8859]  ffffc90009b81080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[  212.856826][ T8859]  ffffc90009b81100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[  212.856826][ T8859] ==================================================================
[  212.856826][ T8859] Disabling lock debugging due to kernel taint
[  212.865296][ T8859] Kernel panic - not syncing: panic_on_warn set ...
[  212.865322][ T8859] CPU: 0 PID: 8859 Comm: syz-executor.0 Tainted: G    B             5.8.0-rc5-syzkaller #0
[  212.865327][ T8859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
[  212.865349][ T8859] Call Trace:
[  212.865460][ T8859]  dump_stack+0x18f/0x20d
[  212.865472][ T8859]  ? bitfill_aligned+0x300/0x400
[  212.865482][ T8859]  panic+0x2e3/0x75c
[  212.865490][ T8859]  ? __warn_printk+0xf3/0xf3
[  212.865500][ T8859]  ? preempt_schedule_common+0x59/0xc0
[  212.865508][ T8859]  ? bitfill_aligned+0x34a/0x400
[  212.865517][ T8859]  ? preempt_schedule_thunk+0x16/0x18
[  212.865525][ T8859]  ? trace_hardirqs_on+0x55/0x220
[  212.865533][ T8859]  ? bitfill_aligned+0x34a/0x400
[  212.865540][ T8859]  ? bitfill_aligned+0x34a/0x400
[  212.865547][ T8859]  end_report+0x4d/0x53
[  212.865554][ T8859]  kasan_report.cold+0xd/0x37
[  212.865562][ T8859]  ? bitfill_aligned+0x34a/0x400
[  212.865570][ T8859]  bitfill_aligned+0x34a/0x400
[  212.865579][ T8859]  sys_fillrect+0x408/0x7a0
[  212.865586][ T8859]  ? sys_fillrect+0x7a0/0x7a0
[  212.865597][ T8859]  drm_fb_helper_sys_fillrect+0x1e/0x190
[  212.865605][ T8859]  bit_clear_margins+0x2d5/0x4a0
[  212.865612][ T8859]  ? bit_bmove+0x210/0x210
[  212.865622][ T8859]  ? fb_get_color_depth+0x11a/0x240
[  212.865630][ T8859]  fbcon_clear_margins+0x1d5/0x230
[  212.865637][ T8859]  fbcon_switch+0xb6e/0x16c0
[  212.865646][ T8859]  ? fbcon_scroll+0x3600/0x3600
[  212.865657][ T8859]  ? fbcon_cursor+0x52b/0x650
[  212.865664][ T8859]  ? kmalloc_array.constprop.0+0x20/0x20
[  212.865673][ T8859]  ? is_console_locked+0x5/0x10
[  212.865679][ T8859]  ? fbcon_set_origin+0x26/0x50
[  212.865688][ T8859]  redraw_screen+0x2ae/0x770
[  212.865696][ T8859]  ? vc_init+0x440/0x440
[  212.865704][ T8859]  ? fb_get_color_depth+0x11a/0x240
[  212.865711][ T8859]  ? fbcon_set_palette+0x3a8/0x490
[  212.865747][ T8859]  fbcon_modechanged+0x575/0x710
[  212.865756][ T8859]  fbcon_update_vcs+0x3a/0x50
[  212.865765][ T8859]  fb_set_var+0xae8/0xd60
[  212.865773][ T8859]  ? fb_blank+0x190/0x190
[  212.865781][ T8859]  ? lock_release+0x8d0/0x8d0
[  212.865790][ T8859]  ? lock_is_held_type+0xb0/0xe0
[  212.865800][ T8859]  ? do_fb_ioctl+0x2f2/0x6c0
[  212.865812][ T8859]  ? _raw_spin_unlock_irqrestore+0x62/0xe0
[  212.865831][ T8859]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  212.865839][ T8859]  ? trace_hardirqs_on+0x5f/0x220
[  212.865849][ T8859]  do_fb_ioctl+0x33f/0x6c0
[  212.865857][ T8859]  ? fb_set_suspend+0x1a0/0x1a0
[  212.865864][ T8859]  ? lock_downgrade+0x820/0x820
[  212.865873][ T8859]  ? trace_hardirqs_on+0x5f/0x220
[  212.865881][ T8859]  ? lockdep_hardirqs_on+0x6a/0xe0
[  212.865892][ T8859]  ? tomoyo_path_number_perm+0x244/0x4d0
[  212.865901][ T8859]  ? tomoyo_execute_permission+0x470/0x470
[  212.865908][ T8859]  ? __might_fault+0xef/0x1d0
[  212.865920][ T8859]  ? __sanitizer_cov_trace_switch+0x45/0x70
[  212.865932][ T8859]  ? do_vfs_ioctl+0x27d/0x1090
[  212.865940][ T8859]  ? generic_block_fiemap+0x60/0x60
[  212.865949][ T8859]  fb_compat_ioctl+0x175/0xc10
[  212.865961][ T8859]  ? fb_open+0x430/0x430
[  212.865970][ T8859]  ? __fget_files+0x294/0x400
[  212.865983][ T8859]  ? fb_open+0x430/0x430
[  212.865991][ T8859]  __do_compat_sys_ioctl+0x1d3/0x230
[  212.866001][ T8859]  do_syscall_32_irqs_on+0x3f/0x60
[  212.866010][ T8859]  do_fast_syscall_32+0x7f/0x120
[  212.866019][ T8859]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  212.866060][ T8859] RIP: 0023:0xf7fdd569
[  212.866062][ T8859] Code: Bad RIP value.
[  212.866066][ T8859] RSP: 002b:00000000f5dd80bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  212.866073][ T8859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601
[  212.866078][ T8859] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  212.866082][ T8859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  212.866086][ T8859] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  212.866090][ T8859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  212.873472][ T8859] Kernel Offset: disabled
[  212.873472][ T8859] Rebooting in 86400 seconds..