last executing test programs: 598.336273ms ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 408.699567ms ago: executing program 1 (id=7): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) 280.783042ms ago: executing program 1 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x10) 113.290957ms ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000240)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000001740)="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", 0x723, 0x1) 0s ago: executing program 1 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124d00000000006113520000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee6b1f7bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad15010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062a1faca036d9cc7db6671573e202e0a92ee4ba12b064985cc32d1ac0b9ecc8f604dcac2563e1c90491726de3b0afccc000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 84.200322][ T5819] cgroup: Unknown subsys name 'net' [ 84.325440][ T5819] cgroup: Unknown subsys name 'cpuset' [ 84.334685][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.883611][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.004129][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.011634][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.019057][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.027433][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.035985][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.044499][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.056294][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.061516][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.064746][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.077591][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.078219][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.091473][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.092760][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.100228][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.113115][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.120380][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.122286][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.127722][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.135112][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.151482][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.151769][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.158948][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.166904][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.180423][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.185367][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.188490][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.205679][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.218275][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.227250][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.235576][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.980768][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.995398][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 90.163384][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.358849][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.370710][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.378019][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.385327][ T5836] bridge_slave_0: entered allmulticast mode [ 90.393114][ T5836] bridge_slave_0: entered promiscuous mode [ 90.402126][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.409223][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.416465][ T5836] bridge_slave_1: entered allmulticast mode [ 90.424251][ T5836] bridge_slave_1: entered promiscuous mode [ 90.437366][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.544875][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.552076][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.559430][ T5838] bridge_slave_0: entered allmulticast mode [ 90.566959][ T5838] bridge_slave_0: entered promiscuous mode [ 90.613096][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.662508][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.669714][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.677339][ T5838] bridge_slave_1: entered allmulticast mode [ 90.686001][ T5838] bridge_slave_1: entered promiscuous mode [ 90.732661][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.763058][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.770191][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.777966][ T5844] bridge_slave_0: entered allmulticast mode [ 90.786636][ T5844] bridge_slave_0: entered promiscuous mode [ 90.852929][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.860103][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.867361][ T5844] bridge_slave_1: entered allmulticast mode [ 90.874921][ T5844] bridge_slave_1: entered promiscuous mode [ 90.886023][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.926954][ T5836] team0: Port device team_slave_0 added [ 90.936289][ T5836] team0: Port device team_slave_1 added [ 91.000482][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.024519][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.032554][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.039702][ T5840] bridge_slave_0: entered allmulticast mode [ 91.047539][ T5840] bridge_slave_0: entered promiscuous mode [ 91.118121][ T43] cfg80211: failed to load regulatory.db [ 91.141548][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.148772][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.157293][ T5840] bridge_slave_1: entered allmulticast mode [ 91.165151][ T5840] bridge_slave_1: entered promiscuous mode [ 91.172306][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.186301][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.193913][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.220475][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.220526][ T5853] Bluetooth: hci3: command tx timeout [ 91.233901][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.244085][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.270193][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.271471][ T5851] Bluetooth: hci4: command tx timeout [ 91.280910][ T5843] Bluetooth: hci2: command tx timeout [ 91.286655][ T5851] Bluetooth: hci5: command tx timeout [ 91.291755][ T51] Bluetooth: hci0: command tx timeout [ 91.297297][ T5853] Bluetooth: hci1: command tx timeout [ 91.303696][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.315154][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.322393][ T5837] bridge_slave_0: entered allmulticast mode [ 91.329781][ T5837] bridge_slave_0: entered promiscuous mode [ 91.342143][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.354918][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.380294][ T5838] team0: Port device team_slave_0 added [ 91.436275][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.443749][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.451269][ T5837] bridge_slave_1: entered allmulticast mode [ 91.458682][ T5837] bridge_slave_1: entered promiscuous mode [ 91.482757][ T5838] team0: Port device team_slave_1 added [ 91.519871][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.532853][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.603709][ T5844] team0: Port device team_slave_0 added [ 91.612106][ T5844] team0: Port device team_slave_1 added [ 91.691988][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.698935][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.725025][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.771546][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.778504][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.804752][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.817966][ T5840] team0: Port device team_slave_0 added [ 91.825162][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.832664][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.858803][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.876521][ T5836] hsr_slave_0: entered promiscuous mode [ 91.883201][ T5836] hsr_slave_1: entered promiscuous mode [ 91.893000][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.902799][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.909733][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.936073][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.956735][ T5840] team0: Port device team_slave_1 added [ 91.990414][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.092442][ T5837] team0: Port device team_slave_0 added [ 92.100840][ T5837] team0: Port device team_slave_1 added [ 92.140031][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.150624][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.176942][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.238781][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.246007][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.254216][ T5839] bridge_slave_0: entered allmulticast mode [ 92.261875][ T5839] bridge_slave_0: entered promiscuous mode [ 92.284046][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.290977][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.317734][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.351585][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.358524][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.385190][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.396832][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.404360][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.411588][ T5839] bridge_slave_1: entered allmulticast mode [ 92.418970][ T5839] bridge_slave_1: entered promiscuous mode [ 92.450897][ T5844] hsr_slave_0: entered promiscuous mode [ 92.457623][ T5844] hsr_slave_1: entered promiscuous mode [ 92.463965][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 92.469744][ T5844] Cannot create hsr debugfs directory [ 92.504369][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.511791][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.537916][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.584404][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.606853][ T5838] hsr_slave_0: entered promiscuous mode [ 92.614957][ T5838] hsr_slave_1: entered promiscuous mode [ 92.621112][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 92.626823][ T5838] Cannot create hsr debugfs directory [ 92.683890][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.842642][ T5840] hsr_slave_0: entered promiscuous mode [ 92.848987][ T5840] hsr_slave_1: entered promiscuous mode [ 92.855454][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 92.861205][ T5840] Cannot create hsr debugfs directory [ 92.890937][ T5839] team0: Port device team_slave_0 added [ 92.912348][ T5837] hsr_slave_0: entered promiscuous mode [ 92.918719][ T5837] hsr_slave_1: entered promiscuous mode [ 92.925548][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 92.931459][ T5837] Cannot create hsr debugfs directory [ 92.974120][ T5839] team0: Port device team_slave_1 added [ 93.133788][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.140747][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.167369][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.179807][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.186804][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.212788][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.271925][ T5853] Bluetooth: hci3: command tx timeout [ 93.361418][ T5853] Bluetooth: hci0: command tx timeout [ 93.366825][ T5853] Bluetooth: hci2: command tx timeout [ 93.372360][ T5851] Bluetooth: hci4: command tx timeout [ 93.372383][ T51] Bluetooth: hci1: command tx timeout [ 93.377740][ T5851] Bluetooth: hci5: command tx timeout [ 93.532370][ T5839] hsr_slave_0: entered promiscuous mode [ 93.538767][ T5839] hsr_slave_1: entered promiscuous mode [ 93.545578][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 93.551602][ T5839] Cannot create hsr debugfs directory [ 93.594639][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.608182][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.619457][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.678461][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.860532][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.873422][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.884554][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.913546][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.013544][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.029837][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.043680][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.057796][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.190052][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.202444][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.238877][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.284121][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.348404][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.367626][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.387360][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.397703][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.408734][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.483822][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.520640][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.569895][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.577206][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.588501][ T5839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.623386][ T5839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.657267][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.664403][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.676849][ T5839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.700875][ T5839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.727134][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.747874][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.776459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.783570][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.804465][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.811658][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.860804][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.905880][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.913016][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.952984][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.960115][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.023832][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.065432][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.184378][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.225498][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.267307][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.274469][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.347901][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.355063][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.361550][ T5851] Bluetooth: hci3: command tx timeout [ 95.379857][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.387041][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.397181][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.404321][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.431364][ T5851] Bluetooth: hci5: command tx timeout [ 95.436772][ T5851] Bluetooth: hci2: command tx timeout [ 95.442310][ T5853] Bluetooth: hci1: command tx timeout [ 95.444780][ T51] Bluetooth: hci4: command tx timeout [ 95.447717][ T5853] Bluetooth: hci0: command tx timeout [ 95.504613][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.647000][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.673285][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.680423][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.726060][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.733245][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.769762][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.804128][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.938239][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.986067][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.105484][ T5836] veth0_vlan: entered promiscuous mode [ 96.148086][ T5836] veth1_vlan: entered promiscuous mode [ 96.185728][ T5844] veth0_vlan: entered promiscuous mode [ 96.276471][ T5844] veth1_vlan: entered promiscuous mode [ 96.335367][ T5836] veth0_macvtap: entered promiscuous mode [ 96.416225][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.437703][ T5836] veth1_macvtap: entered promiscuous mode [ 96.485232][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.529674][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.545871][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.578508][ T5844] veth0_macvtap: entered promiscuous mode [ 96.615524][ T1156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.629996][ T5844] veth1_macvtap: entered promiscuous mode [ 96.673436][ T1156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.688493][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.736397][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.806924][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.864710][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.896118][ T5840] veth0_vlan: entered promiscuous mode [ 96.909415][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.920898][ T5837] veth0_vlan: entered promiscuous mode [ 96.946637][ T5840] veth1_vlan: entered promiscuous mode [ 96.983098][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.990994][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.026501][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.047523][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.096882][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.106409][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.130709][ T5837] veth1_vlan: entered promiscuous mode [ 97.194108][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.205814][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.210641][ T5840] veth0_macvtap: entered promiscuous mode [ 97.225046][ T5838] veth0_vlan: entered promiscuous mode [ 97.276046][ T5840] veth1_macvtap: entered promiscuous mode [ 97.315362][ T5837] veth0_macvtap: entered promiscuous mode [ 97.355127][ T5838] veth1_vlan: entered promiscuous mode [ 97.388351][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.394092][ T5837] veth1_macvtap: entered promiscuous mode [ 97.423164][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.438083][ T51] Bluetooth: hci3: command tx timeout [ 97.506403][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.513741][ T51] Bluetooth: hci4: command tx timeout [ 97.515526][ T5853] Bluetooth: hci1: command tx timeout [ 97.519609][ T51] Bluetooth: hci0: command tx timeout [ 97.525053][ T5843] Bluetooth: hci2: command tx timeout [ 97.525092][ T5843] Bluetooth: hci5: command tx timeout [ 97.543640][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.553436][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.625389][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.634858][ T1135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.647916][ T1135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.657233][ T1135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.705254][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.721915][ T1135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.736849][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.747645][ T5838] veth0_macvtap: entered promiscuous mode [ 97.796847][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.814877][ T5838] veth1_macvtap: entered promiscuous mode [ 97.879510][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.899793][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.917269][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.926373][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.999725][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.020567][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.056443][ T5988] ------------[ cut here ]------------ [ 98.062170][ T5988] verifier bug: error during ctx access conversion(1) [ 98.080800][ T5986] loop3: detected capacity change from 0 to 2048 [ 98.103147][ T5988] WARNING: CPU: 0 PID: 5988 at kernel/bpf/verifier.c:21448 bpf_check+0x1b6ec/0x1d2d0 [ 98.113145][ T5988] Modules linked in: [ 98.116057][ T5839] veth0_vlan: entered promiscuous mode [ 98.117052][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.1.9 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 98.132976][ T5986] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.134005][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.147978][ T5839] veth1_vlan: entered promiscuous mode [ 98.150427][ T5988] RIP: 0010:bpf_check+0x1b6ec/0x1d2d0 [ 98.161995][ T5988] Code: 8b e8 48 4a af ff 90 0f 0b 90 90 e9 6b 60 ff ff e8 e9 ab eb ff c6 05 6a 75 b6 0d 01 90 48 c7 c7 20 02 92 8b e8 25 4a af ff 90 <0f> 0b 90 90 e9 b5 bd ff ff e8 c6 ab eb ff c6 05 4c 75 b6 0d 01 90 [ 98.181771][ T5988] RSP: 0018:ffffc90004f87600 EFLAGS: 00010246 [ 98.187849][ T5988] RAX: f372847531f8fd00 RBX: 0000000000000000 RCX: 0000000000080000 [ 98.191546][ T5839] veth0_macvtap: entered promiscuous mode [ 98.196240][ T5988] RDX: ffffc9000bb09000 RSI: 000000000000888b RDI: 000000000000888c [ 98.209826][ T5988] RBP: ffffc90004f87b50 R08: 0000000000000003 R09: 0000000000000004 [ 98.217950][ T5988] R10: dffffc0000000000 R11: fffffbfff1bfa5dc R12: ffffc90000ade04a [ 98.226027][ T5988] R13: dffffc0000000000 R14: ffff888023b10000 R15: 0000000000000004 [ 98.234434][ T5988] FS: 00007f284ef8f6c0(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 98.243431][ T5988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.250021][ T5988] CR2: 00007f284ef8ef98 CR3: 0000000070e1c000 CR4: 0000000000350ef0 [ 98.258073][ T5988] Call Trace: [ 98.261384][ T5988] [ 98.264313][ T5988] ? is_bpf_text_address+0x26/0x2b0 [ 98.269561][ T5988] ? __pfx_flow_dissector_convert_ctx_access+0x10/0x10 [ 98.276586][ T5988] ? __pfx_bpf_check+0x10/0x10 [ 98.281413][ T5988] ? ktime_get_with_offset+0x8c/0x2a0 [ 98.286800][ T5988] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 98.293494][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.299149][ T5988] ? ktime_get_with_offset+0x8c/0x2a0 [ 98.304909][ T5988] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 98.311660][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.317311][ T5988] ? __asan_memset+0x22/0x50 [ 98.321979][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.327625][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.333318][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.338959][ T5988] ? security_bpf_prog_load+0x7f/0x310 [ 98.344483][ T5988] bpf_prog_load+0x1318/0x1930 [ 98.349284][ T5988] ? __pfx_bpf_prog_load+0x10/0x10 [ 98.354486][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.360134][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.365811][ T5988] ? security_bpf+0x7e/0x300 [ 98.370419][ T5988] __sys_bpf+0x528/0x870 [ 98.370577][ T5986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.374788][ T5988] ? __pfx___sys_bpf+0x10/0x10 [ 98.374843][ T5988] ? exc_page_fault+0x76/0xf0 [ 98.374884][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.374925][ T5988] __x64_sys_bpf+0x7c/0x90 [ 98.374958][ T5988] do_syscall_64+0xfa/0x3b0 [ 98.374998][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.418070][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.424203][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.429851][ T5988] ? exc_page_fault+0x9f/0xf0 [ 98.433561][ T5986] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 234: padding at end of block bitmap is not set [ 98.434628][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.454568][ T5988] RIP: 0033:0x7f284e18e9a9 [ 98.455075][ T5986] EXT4-fs (loop3): Remounting filesystem read-only [ 98.458980][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.468854][ T5986] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.3.4: cleanup dec ref error -28 [ 98.485484][ T5988] RSP: 002b:00007f284ef8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.485518][ T5988] RAX: ffffffffffffffda RBX: 00007f284e3b5fa0 RCX: 00007f284e18e9a9 [ 98.485539][ T5988] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 98.485557][ T5988] RBP: 00007f284e210d69 R08: 0000000000000000 R09: 0000000000000000 [ 98.485573][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.485589][ T5988] R13: 0000000000000001 R14: 00007f284e3b5fa0 R15: 00007ffd0a923ec8 [ 98.485625][ T5988] [ 98.485639][ T5988] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.485657][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.1.9 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 98.485687][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.485702][ T5988] Call Trace: [ 98.485712][ T5988] [ 98.485723][ T5988] dump_stack_lvl+0x99/0x250 [ 98.485754][ T5988] ? __asan_memcpy+0x40/0x70 [ 98.485787][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.485813][ T5988] ? __pfx__printk+0x10/0x10 [ 98.485853][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.485885][ T5988] panic+0x2db/0x790 [ 98.485917][ T5988] ? __pfx_panic+0x10/0x10 [ 98.485940][ T5988] ? show_trace_log_lvl+0x4fb/0x550 [ 98.485986][ T5988] __warn+0x31b/0x4b0 [ 98.486009][ T5988] ? bpf_check+0x1b6ec/0x1d2d0 [ 98.486041][ T5988] ? bpf_check+0x1b6ec/0x1d2d0 [ 98.486069][ T5988] report_bug+0x2be/0x4f0 [ 98.486104][ T5988] ? bpf_check+0x1b6ec/0x1d2d0 [ 98.486133][ T5988] ? bpf_check+0x1b6ec/0x1d2d0 [ 98.486161][ T5988] ? bpf_check+0x1b6ee/0x1d2d0 [ 98.486198][ T5988] handle_bug+0x84/0x160 [ 98.486224][ T5988] exc_invalid_op+0x1a/0x50 [ 98.486248][ T5988] asm_exc_invalid_op+0x1a/0x20 [ 98.486272][ T5988] RIP: 0010:bpf_check+0x1b6ec/0x1d2d0 [ 98.486301][ T5988] Code: 8b e8 48 4a af ff 90 0f 0b 90 90 e9 6b 60 ff ff e8 e9 ab eb ff c6 05 6a 75 b6 0d 01 90 48 c7 c7 20 02 92 8b e8 25 4a af ff 90 <0f> 0b 90 90 e9 b5 bd ff ff e8 c6 ab eb ff c6 05 4c 75 b6 0d 01 90 [ 98.486321][ T5988] RSP: 0018:ffffc90004f87600 EFLAGS: 00010246 [ 98.486344][ T5988] RAX: f372847531f8fd00 RBX: 0000000000000000 RCX: 0000000000080000 [ 98.486361][ T5988] RDX: ffffc9000bb09000 RSI: 000000000000888b RDI: 000000000000888c [ 98.486379][ T5988] RBP: ffffc90004f87b50 R08: 0000000000000003 R09: 0000000000000004 [ 98.486395][ T5988] R10: dffffc0000000000 R11: fffffbfff1bfa5dc R12: ffffc90000ade04a [ 98.486414][ T5988] R13: dffffc0000000000 R14: ffff888023b10000 R15: 0000000000000004 [ 98.486451][ T5988] ? is_bpf_text_address+0x26/0x2b0 [ 98.486518][ T5988] ? __pfx_flow_dissector_convert_ctx_access+0x10/0x10 [ 98.486625][ T5988] ? __pfx_bpf_check+0x10/0x10 [ 98.486653][ T5988] ? ktime_get_with_offset+0x8c/0x2a0 [ 98.486690][ T5988] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 98.486718][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.486749][ T5988] ? ktime_get_with_offset+0x8c/0x2a0 [ 98.486778][ T5988] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 98.486817][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.486845][ T5988] ? __asan_memset+0x22/0x50 [ 98.486876][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.486904][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.486932][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.486960][ T5988] ? security_bpf_prog_load+0x7f/0x310 [ 98.486996][ T5988] bpf_prog_load+0x1318/0x1930 [ 98.487046][ T5988] ? __pfx_bpf_prog_load+0x10/0x10 [ 98.487106][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.487134][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.487162][ T5988] ? security_bpf+0x7e/0x300 [ 98.487199][ T5988] __sys_bpf+0x528/0x870 [ 98.487236][ T5988] ? __pfx___sys_bpf+0x10/0x10 [ 98.487284][ T5988] ? exc_page_fault+0x76/0xf0 [ 98.487322][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.487361][ T5988] __x64_sys_bpf+0x7c/0x90 [ 98.487393][ T5988] do_syscall_64+0xfa/0x3b0 [ 98.487429][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.487464][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.487488][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.487516][ T5988] ? exc_page_fault+0x9f/0xf0 [ 98.487553][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.487577][ T5988] RIP: 0033:0x7f284e18e9a9 [ 98.487599][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.487619][ T5988] RSP: 002b:00007f284ef8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.487643][ T5988] RAX: ffffffffffffffda RBX: 00007f284e3b5fa0 RCX: 00007f284e18e9a9 [ 98.487662][ T5988] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 98.487679][ T5988] RBP: 00007f284e210d69 R08: 0000000000000000 R09: 0000000000000000 [ 98.487695][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.487711][ T5988] R13: 0000000000000001 R14: 00007f284e3b5fa0 R15: 00007ffd0a923ec8 [ 98.487746][ T5988] [ 98.498694][ T5988] Kernel Offset: disabled