[ 57.033384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.040334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.051703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.058585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.432303] Bluetooth: hci3: command 0x0406 tx timeout [ 170.437845] Bluetooth: hci0: command 0x0406 tx timeout [ 170.453644] Bluetooth: hci1: command 0x0406 tx timeout [ 170.468139] Bluetooth: hci4: command 0x0406 tx timeout [ 170.489699] Bluetooth: hci5: command 0x0406 tx timeout [ 170.503235] Bluetooth: hci2: command 0x0406 tx timeout [ 468.749750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.757071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.765660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.772760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.781158] device bridge_slave_1 left promiscuous mode [ 468.786920] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.844364] device bridge_slave_0 left promiscuous mode [ 468.850375] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.895893] device veth1_macvtap left promiscuous mode [ 468.901670] device veth0_macvtap left promiscuous mode [ 468.908006] device veth1_vlan left promiscuous mode [ 468.913674] device veth0_vlan left promiscuous mode [ 469.015930] device hsr_slave_1 left promiscuous mode [ 469.056119] device hsr_slave_0 left promiscuous mode [ 469.111448] team0 (unregistering): Port device team_slave_1 removed [ 469.120675] team0 (unregistering): Port device team_slave_0 removed [ 469.129916] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 469.168212] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 469.222913] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. [ 473.611837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.622322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.645429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.660152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.679064] device bridge_slave_1 left promiscuous mode [ 473.691513] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.757706] device bridge_slave_0 left promiscuous mode [ 473.765959] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.815858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.824981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.842101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.856019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.873955] device bridge_slave_1 left promiscuous mode [ 473.882750] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.913881] device bridge_slave_0 left promiscuous mode [ 473.919954] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.966174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.975106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.996331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.011642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.038404] device bridge_slave_1 left promiscuous mode [ 474.046943] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.093593] device bridge_slave_0 left promiscuous mode [ 474.099713] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.147967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.159607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.178967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.199424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.218170] device bridge_slave_1 left promiscuous mode [ 474.230602] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.288211] device bridge_slave_0 left promiscuous mode [ 474.294840] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.350170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.365808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.380251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.399117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.418199] device bridge_slave_1 left promiscuous mode [ 474.429509] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.473825] device bridge_slave_0 left promiscuous mode [ 474.481453] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.537738] device veth1_macvtap left promiscuous mode [ 474.557132] device veth0_macvtap left promiscuous mode [ 474.574076] device veth1_vlan left promiscuous mode [ 474.587237] device veth0_vlan left promiscuous mode [ 474.597949] device veth1_macvtap left promiscuous mode [ 474.610150] device veth0_macvtap left promiscuous mode [ 474.619901] device veth1_vlan left promiscuous mode [ 474.634262] device veth0_vlan left promiscuous mode [ 474.650823] device veth1_macvtap left promiscuous mode [ 474.666783] device veth0_macvtap left promiscuous mode [ 474.679113] device veth1_vlan left promiscuous mode [ 474.692209] device veth0_vlan left promiscuous mode [ 474.706683] device veth1_macvtap left promiscuous mode [ 474.714925] device veth0_macvtap left promiscuous mode [ 474.730117] device veth1_vlan left promiscuous mode [ 474.738726] device veth0_vlan left promiscuous mode [ 474.753814] device veth1_macvtap left promiscuous mode [ 474.767569] device veth0_macvtap left promiscuous mode [ 474.778688] device veth1_vlan left promiscuous mode [ 474.792803] device veth0_vlan left promiscuous mode [ 475.604867] device hsr_slave_1 left promiscuous mode [ 475.647074] device hsr_slave_0 left promiscuous mode [ 475.698049] team0 (unregistering): Port device team_slave_1 removed [ 475.715569] team0 (unregistering): Port device team_slave_0 removed [ 475.733475] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 475.778996] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 475.867428] bond0 (unregistering): Released all slaves [ 476.006940] device hsr_slave_1 left promiscuous mode [ 476.056545] device hsr_slave_0 left promiscuous mode [ 476.104140] team0 (unregistering): Port device team_slave_1 removed [ 476.127199] team0 (unregistering): Port device team_slave_0 removed [ 476.148297] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 476.197158] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 476.282482] bond0 (unregistering): Released all slaves [ 476.404799] device hsr_slave_1 left promiscuous mode [ 476.435912] device hsr_slave_0 left promiscuous mode [ 476.488549] team0 (unregistering): Port device team_slave_1 removed [ 476.509889] team0 (unregistering): Port device team_slave_0 removed [ 476.528454] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 476.587032] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 476.698519] bond0 (unregistering): Released all slaves [ 476.861221] device hsr_slave_1 left promiscuous mode [ 476.906798] device hsr_slave_0 left promiscuous mode [ 476.959518] team0 (unregistering): Port device team_slave_1 removed [ 476.980037] team0 (unregistering): Port device team_slave_0 removed [ 477.003658] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 477.046597] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 477.147586] bond0 (unregistering): Released all slaves [ 477.316488] device hsr_slave_1 left promiscuous mode [ 477.350581] device hsr_slave_0 left promiscuous mode [ 477.398991] team0 (unregistering): Port device team_slave_1 removed [ 477.426565] team0 (unregistering): Port device team_slave_0 removed [ 477.448167] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 477.497044] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 477.613338] bond0 (unregistering): Released all slaves [ 484.515323] kasan: CONFIG_KASAN_INLINE enabled [ 484.525144] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 484.536831] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 484.543065] CPU: 0 PID: 2128 Comm: syz-executor659 Not tainted 4.19.163-syzkaller #0 [ 484.550933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.560283] RIP: 0010:vgem_fence_attach_ioctl+0x24f/0x580 [ 484.565812] Code: 03 80 3c 02 00 0f 85 01 03 00 00 4d 8b bd 10 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bf e0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ce 02 00 00 49 8b 87 e0 00 00 00 4c 89 f2 48 c1 [ 484.584703] RSP: 0018:ffff8881d675fa70 EFLAGS: 00010202 [ 484.590061] RAX: dffffc0000000000 RBX: ffff8881cdeb9080 RCX: 0000000000000000 [ 484.597319] RDX: 000000000000001c RSI: 0000000000000001 RDI: 00000000000000e0 [ 484.604576] RBP: ffff8881d675fab0 R08: ffffed103ec84561 R09: 0000000000000000 [ 484.611834] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d5577b80 [ 484.619095] R13: ffff8881d44a0a80 R14: ffff8881cdeb9084 R15: 0000000000000000 [ 484.626368] FS: 00007f7ebcf32700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 [ 484.634580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.640456] CR2: 00007f7ebceefe78 CR3: 00000001c46a1006 CR4: 00000000001606f0 [ 484.647719] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.654978] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.662243] Call Trace: [ 484.664833] drm_ioctl_kernel+0x1b7/0x240 [ 484.668978] ? __vgem_fence_idr_fini+0x40/0x40 [ 484.673553] ? drm_ioctl_permit+0x1a0/0x1a0 [ 484.677871] ? kasan_check_write+0x14/0x20 [ 484.682102] drm_ioctl+0x6a9/0xae0 [ 484.685637] ? __vgem_fence_idr_fini+0x40/0x40 [ 484.690218] ? drm_getstats+0x20/0x20 [ 484.694011] ? mark_held_locks+0x130/0x130 [ 484.698237] ? __x64_sys_open+0x79/0xb0 [ 484.702200] ? do_syscall_64+0xd0/0x4e0 [ 484.706163] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.711516] ? mark_held_locks+0x130/0x130 [ 484.715744] ? debug_check_no_obj_freed+0x1ed/0x428 [ 484.720754] do_vfs_ioctl+0x196/0x10c0 [ 484.724632] ? lock_downgrade+0x860/0x860 [ 484.728774] ? ioctl_preallocate+0x1c0/0x1c0 [ 484.733174] ? __fget+0x2a2/0x400 [ 484.736638] ? do_dup2+0x3f0/0x3f0 [ 484.740173] ? do_futex+0x1930/0x1930 [ 484.744003] ? putname+0xa8/0xe0 [ 484.747366] ? __fget_light+0x174/0x1e0 [ 484.751883] ksys_ioctl+0x62/0x90 [ 484.755327] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 484.759900] __x64_sys_ioctl+0x6e/0xb0 [ 484.763787] do_syscall_64+0xd0/0x4e0 [ 484.767766] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.772954] RIP: 0033:0x44a6c9 [ 484.776140] Code: e8 0c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb ca fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.795043] RSP: 002b:00007f7ebcf31db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.804512] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 000000000044a6c9 [ 484.811777] RDX: 0000000020000140 RSI: 00000000c10c5541 RDI: 0000000000000005 [ 484.819039] RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000 [ 484.826301] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 484.833562] R13: 00007ffcf54d699f R14: 00007f7ebcf329c0 R15: 0000000000000000 [ 484.840825] Modules linked in: [ 484.856174] ---[ end trace 58bc4fcdb865ffe3 ]--- [ 484.862792] RIP: 0010:vgem_fence_attach_ioctl+0x24f/0x580 [ 484.871417] Code: 03 80 3c 02 00 0f 85 01 03 00 00 4d 8b bd 10 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bf e0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ce 02 00 00 49 8b 87 e0 00 00 00 4c 89 f2 48 c1 [ 484.920356] RSP: 0018:ffff8881d675fa70 EFLAGS: 00010202 [ 484.927400] RAX: dffffc0000000000 RBX: ffff8881cdeb9080 RCX: 0000000000000000 [ 484.938003] RDX: 000000000000001c RSI: 0000000000000001 RDI: 00000000000000e0 [ 484.947183] RBP: ffff8881d675fab0 R08: ffffed103ec84561 R09: 0000000000000000 [ 484.956644] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d5577b80 [ 484.965681] R13: ffff8881d44a0a80 R14: ffff8881cdeb9084 R15: 0000000000000000 [ 484.974943] FS: 00007f7ebcf32700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 [ 484.984058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.991968] CR2: 00007f7ebcf31e78 CR3: 00000001c46a1003 CR4: 00000000001606e0 [ 485.000519] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.009738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.020204] Kernel panic - not syncing: Fatal exception [ 485.026309] Kernel Offset: disabled [ 485.029922] Rebooting in 86400 seconds..