program: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@empty, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x57, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x5}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100070086dd608a27f200142c00fe"], 0x0) [ 77.010905][ T46] Bluetooth: hci0: command tx timeout [ 77.014835][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.017687][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.195869][ T5323] bridge0: port 3(syz_tun) entered blocking state [ 77.199168][ T5323] bridge0: port 3(syz_tun) entered disabled state [ 77.204980][ T5323] syz_tun: entered allmulticast mode [ 77.213695][ T5323] syz_tun: entered promiscuous mode [ 77.217166][ T5323] bridge0: port 3(syz_tun) entered blocking state [ 77.220222][ T5323] bridge0: port 3(syz_tun) entered forwarding state [ 77.255164][ T5323] netlink: 'syz.0.0': attribute type 8 has an invalid length. [ 77.292034][ T5323] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 77.296863][ T5323] ------------[ cut here ]------------ [ 77.299530][ T5323] WARNING: CPU: 0 PID: 5323 at net/bridge/netfilter/nf_conntrack_bridge.c:357 nf_ct_bridge_post+0x3ff/0x1060 [ 77.305599][ T5323] Modules linked in: [ 77.307654][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.311701][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.315591][ T5323] RIP: 0010:nf_ct_bridge_post+0x3ff/0x1060 [ 77.317718][ T5323] Code: 89 ff 48 89 da 48 8d 8c 24 40 01 00 00 49 c7 c0 40 0c 2a 8a e8 12 d6 e1 ff 41 bf 02 00 00 00 e9 9c 07 00 00 e8 d2 1a 96 f7 90 <0f> 0b 90 45 31 ff e9 8b 07 00 00 e8 c1 1a 96 f7 eb 05 e8 ba 1a 96 [ 77.325875][ T5323] RSP: 0018:ffffc9000d4ceae0 EFLAGS: 00010287 [ 77.328549][ T5323] RAX: ffffffff8a29f88e RBX: ffff8880426a0c80 RCX: 0000000000100000 [ 77.332262][ T5323] RDX: ffffc9000f0dc000 RSI: 0000000000000910 RDI: 0000000000000911 [ 77.335801][ T5323] RBP: ffffc9000d4cecc0 R08: ffff888000d82480 R09: 0000000000000002 [ 77.338790][ T5323] R10: 000000000000dd86 R11: 0000000000000002 R12: 1ffff110084d4196 [ 77.341667][ T5323] R13: dffffc0000000000 R14: ffffc9000d4ced80 R15: 0000000000000081 [ 77.344618][ T5323] FS: 00007ff9fde326c0(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000 [ 77.347984][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.350663][ T5323] CR2: 00007fa202cabad8 CR3: 000000001fee2000 CR4: 0000000000352ef0 [ 77.354132][ T5323] Call Trace: [ 77.355687][ T5323] [ 77.356978][ T5323] ? __pfx_nf_ct_bridge_post+0x10/0x10 [ 77.359251][ T5323] ? __pfx_ebt_do_table+0x10/0x10 [ 77.361457][ T5323] ? NF_HOOK+0x9e/0x3c0 [ 77.363190][ T5323] ? NF_HOOK+0x9e/0x3c0 [ 77.365011][ T5323] ? __pfx_nf_ct_bridge_post+0x10/0x10 [ 77.367360][ T5323] nf_hook_slow+0xc5/0x220 [ 77.369364][ T5323] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 77.372266][ T5323] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 77.374838][ T5323] NF_HOOK+0x215/0x3c0 [ 77.376693][ T5323] ? NF_HOOK+0x9e/0x3c0 [ 77.378382][ T5323] ? __pfx_NF_HOOK+0x10/0x10 [ 77.380205][ T5323] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 77.382860][ T5323] br_forward_finish+0xd3/0x130 [ 77.384878][ T5323] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 77.387057][ T5323] ? __pfx_br_forward_finish+0x10/0x10 [ 77.389264][ T5323] ? __pfx_br_forward_finish+0x10/0x10 [ 77.391409][ T5323] NF_HOOK+0x320/0x3c0 [ 77.392931][ T5323] ? br_vlan_lookup+0x8a/0x7b0 [ 77.394842][ T5323] ? NF_HOOK+0x9e/0x3c0 [ 77.396448][ T5323] ? __pfx_NF_HOOK+0x10/0x10 [ 77.398251][ T5323] ? __pfx_br_forward_finish+0x10/0x10 [ 77.400582][ T5323] ? br_switchdev_frame_uses_tx_fwd_offload+0x14/0x70 [ 77.403343][ T5323] __br_forward+0x41e/0x600 [ 77.405363][ T5323] ? __pfx_br_forward_finish+0x10/0x10 [ 77.407709][ T5323] ? __pfx___br_forward+0x10/0x10 [ 77.409606][ T5323] ? skb_clone+0x246/0x3a0 [ 77.411195][ T5323] maybe_deliver+0xb5/0x160 [ 77.412807][ T5323] br_flood+0x31a/0x6a0 [ 77.414468][ T5323] br_handle_frame_finish+0x15a3/0x1c90 [ 77.416663][ T5323] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 77.418992][ T5323] ? net_generic+0x1e/0x240 [ 77.420798][ T5323] ? net_generic+0x1e/0x240 [ 77.422608][ T5323] ? net_generic+0x1e/0x240 [ 77.424251][ T5323] ? br_mrp_parse+0x2b1/0xdc0 [ 77.425916][ T5323] ? br_nf_pre_routing+0xc30/0x1470 [ 77.427767][ T5323] br_handle_frame+0xb75/0x14f0 [ 77.429765][ T5323] ? __pfx_br_handle_frame+0x10/0x10 [ 77.431680][ T5323] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 77.434077][ T5323] ? __pfx_br_handle_frame+0x10/0x10 [ 77.436192][ T5323] ? __pfx_packet_rcv+0x10/0x10 [ 77.438255][ T5323] __netif_receive_skb_core+0x10b9/0x4380 [ 77.440464][ T5323] ? __pfx___skb_flow_dissect+0x10/0x10 [ 77.442587][ T5323] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 77.445078][ T5323] ? arch_stack_walk+0xfc/0x150 [ 77.447069][ T5323] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 77.449642][ T5323] ? stack_trace_save+0x9c/0xe0 [ 77.451491][ T5323] ? __pfx_stack_trace_save+0x10/0x10 [ 77.453608][ T5323] ? stack_depot_save_flags+0x40/0x860 [ 77.455873][ T5323] ? __lock_acquire+0xab9/0xd20 [ 77.457817][ T5323] ? netif_receive_skb+0x115/0x790 [ 77.459858][ T5323] ? netif_receive_skb+0x115/0x790 [ 77.462042][ T5323] __netif_receive_skb+0x72/0x380 [ 77.464046][ T5323] ? netif_receive_skb+0x115/0x790 [ 77.466069][ T5323] netif_receive_skb+0x1cb/0x790 [ 77.467944][ T5323] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 77.470378][ T5323] ? __pfx_netif_receive_skb+0x10/0x10 [ 77.472591][ T5323] ? tun_rx_batched+0x160/0x730 [ 77.474484][ T5323] tun_rx_batched+0x1b9/0x730 [ 77.476434][ T5323] ? __lock_acquire+0xab9/0xd20 [ 77.478415][ T5323] ? __pfx_tun_rx_batched+0x10/0x10 [ 77.480652][ T5323] ? tun_get_user+0x272f/0x3e90 [ 77.482639][ T5323] tun_get_user+0x2b65/0x3e90 [ 77.484617][ T5323] ? tun_get_user+0x6f6/0x3e90 [ 77.486468][ T5323] ? tun_get_user+0x272f/0x3e90 [ 77.488439][ T5323] ? aa_file_perm+0x44d/0x1550 [ 77.490607][ T5323] ? __pfx_tun_get_user+0x10/0x10 [ 77.492645][ T5323] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 77.495031][ T5323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.497620][ T5323] ? ref_tracker_alloc+0x318/0x460 [ 77.499806][ T5323] ? __lock_acquire+0xab9/0xd20 [ 77.501852][ T5323] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 77.504173][ T5323] ? tun_get+0x1c/0x2f0 [ 77.505954][ T5323] ? tun_get+0x1c/0x2f0 [ 77.507709][ T5323] ? tun_get+0x1c/0x2f0 [ 77.509434][ T5323] tun_chr_write_iter+0x113/0x200 [ 77.511455][ T5323] vfs_write+0x5c9/0xb30 [ 77.513110][ T5323] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 77.515131][ T5323] ? __pfx_vfs_write+0x10/0x10 [ 77.517070][ T5323] ? __fget_files+0x2a/0x420 [ 77.518963][ T5323] ksys_write+0x145/0x250 [ 77.520805][ T5323] ? __pfx_ksys_write+0x10/0x10 [ 77.522835][ T5323] ? do_syscall_64+0xbe/0xfa0 [ 77.524847][ T5323] do_syscall_64+0xfa/0xfa0 [ 77.526881][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.529306][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.532104][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 77.534190][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.536600][ T5323] RIP: 0033:0x7ff9fcf8e17f [ 77.538519][ T5323] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 77.546721][ T5323] RSP: 002b:00007ff9fde32000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 77.550428][ T5323] RAX: ffffffffffffffda RBX: 00007ff9fd1e6180 RCX: 00007ff9fcf8e17f [ 77.553690][ T5323] RDX: 000000000000004e RSI: 0000200000000500 RDI: 00000000000000c8 [ 77.556718][ T5323] RBP: 00007ff9fd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.560434][ T5323] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000000 [ 77.563596][ T5323] R13: 00007ff9fd1e6218 R14: 00007ff9fd1e6180 R15: 00007ffc0b52e9e8 [ 77.566713][ T5323] [ 77.568013][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.570972][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.574395][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.578830][ T5323] Call Trace: [ 77.580312][ T5323] [ 77.581557][ T5323] dump_stack_lvl+0x99/0x250 [ 77.583341][ T5323] ? __asan_memcpy+0x40/0x70 [ 77.585228][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.587343][ T5323] ? __pfx__printk+0x10/0x10 [ 77.589287][ T5323] vpanic+0x237/0x6d0 [ 77.590916][ T5323] ? __pfx_vpanic+0x10/0x10 [ 77.592558][ T5323] panic+0xb9/0xc0 [ 77.594018][ T5323] ? __pfx_panic+0x10/0x10 [ 77.595720][ T5323] __warn+0x31b/0x4b0 [ 77.597278][ T5323] ? nf_ct_bridge_post+0x3ff/0x1060 [ 77.599274][ T5323] ? nf_ct_bridge_post+0x3ff/0x1060 [ 77.601377][ T5323] report_bug+0x2be/0x4f0 [ 77.603077][ T5323] ? nf_ct_bridge_post+0x3ff/0x1060 [ 77.604842][ T5323] ? nf_ct_bridge_post+0x3ff/0x1060 [ 77.607055][ T5323] ? nf_ct_bridge_post+0x401/0x1060 [ 77.609491][ T5323] handle_bug+0x84/0x160 [ 77.611123][ T5323] exc_invalid_op+0x1a/0x50 [ 77.613116][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 77.615542][ T5323] RIP: 0010:nf_ct_bridge_post+0x3ff/0x1060 [ 77.618494][ T5323] Code: 89 ff 48 89 da 48 8d 8c 24 40 01 00 00 49 c7 c0 40 0c 2a 8a e8 12 d6 e1 ff 41 bf 02 00 00 00 e9 9c 07 00 00 e8 d2 1a 96 f7 90 <0f> 0b 90 45 31 ff e9 8b 07 00 00 e8 c1 1a 96 f7 eb 05 e8 ba 1a 96 [ 77.627015][ T5323] RSP: 0018:ffffc9000d4ceae0 EFLAGS: 00010287 [ 77.629737][ T5323] RAX: ffffffff8a29f88e RBX: ffff8880426a0c80 RCX: 0000000000100000 [ 77.632792][ T5323] RDX: ffffc9000f0dc000 RSI: 0000000000000910 RDI: 0000000000000911 [ 77.636000][ T5323] RBP: ffffc9000d4cecc0 R08: ffff888000d82480 R09: 0000000000000002 [ 77.639271][ T5323] R10: 000000000000dd86 R11: 0000000000000002 R12: 1ffff110084d4196 [ 77.642331][ T5323] R13: dffffc0000000000 R14: ffffc9000d4ced80 R15: 0000000000000081 [ 77.645472][ T5323] ? nf_ct_bridge_post+0x3fe/0x1060 [ 77.647425][ T5323] ? __pfx_nf_ct_bridge_post+0x10/0x10 [ 77.649588][ T5323] ? __pfx_ebt_do_table+0x10/0x10 [ 77.651595][ T5323] ? NF_HOOK+0x9e/0x3c0 [ 77.653391][ T5323] ? NF_HOOK+0x9e/0x3c0 [ 77.655234][ T5323] ? __pfx_nf_ct_bridge_post+0x10/0x10 [ 77.657365][ T5323] nf_hook_slow+0xc5/0x220 [ 77.659067][ T5323] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 77.661317][ T5323] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 77.663481][ T5323] NF_HOOK+0x215/0x3c0 [ 77.665013][ T5323] ? NF_HOOK+0x9e/0x3c0 [ 77.666691][ T5323] ? __pfx_NF_HOOK+0x10/0x10 [ 77.668853][ T5323] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 77.671519][ T5323] br_forward_finish+0xd3/0x130 [ 77.673726][ T5323] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 77.676341][ T5323] ? __pfx_br_forward_finish+0x10/0x10 [ 77.678362][ T5323] ? __pfx_br_forward_finish+0x10/0x10 [ 77.680619][ T5323] NF_HOOK+0x320/0x3c0 [ 77.682347][ T5323] ? br_vlan_lookup+0x8a/0x7b0 [ 77.684573][ T5323] ? NF_HOOK+0x9e/0x3c0 [ 77.686404][ T5323] ? __pfx_NF_HOOK+0x10/0x10 [ 77.688475][ T5323] ? __pfx_br_forward_finish+0x10/0x10 [ 77.690794][ T5323] ? br_switchdev_frame_uses_tx_fwd_offload+0x14/0x70 [ 77.693703][ T5323] __br_forward+0x41e/0x600 [ 77.695612][ T5323] ? __pfx_br_forward_finish+0x10/0x10 [ 77.697803][ T5323] ? __pfx___br_forward+0x10/0x10 [ 77.700000][ T5323] ? skb_clone+0x246/0x3a0 [ 77.701801][ T5323] maybe_deliver+0xb5/0x160 [ 77.703694][ T5323] br_flood+0x31a/0x6a0 [ 77.705532][ T5323] br_handle_frame_finish+0x15a3/0x1c90 [ 77.707990][ T5323] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 77.710578][ T5323] ? net_generic+0x1e/0x240 [ 77.712697][ T5323] ? net_generic+0x1e/0x240 [ 77.714673][ T5323] ? net_generic+0x1e/0x240 [ 77.716656][ T5323] ? br_mrp_parse+0x2b1/0xdc0 [ 77.718795][ T5323] ? br_nf_pre_routing+0xc30/0x1470 [ 77.721101][ T5323] br_handle_frame+0xb75/0x14f0 [ 77.723248][ T5323] ? __pfx_br_handle_frame+0x10/0x10 [ 77.725569][ T5323] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 77.728195][ T5323] ? __pfx_br_handle_frame+0x10/0x10 [ 77.730462][ T5323] ? __pfx_packet_rcv+0x10/0x10 [ 77.732616][ T5323] __netif_receive_skb_core+0x10b9/0x4380 [ 77.735084][ T5323] ? __pfx___skb_flow_dissect+0x10/0x10 [ 77.737494][ T5323] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 77.740037][ T5323] ? arch_stack_walk+0xfc/0x150 [ 77.742184][ T5323] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 77.744824][ T5323] ? stack_trace_save+0x9c/0xe0 [ 77.746737][ T5323] ? __pfx_stack_trace_save+0x10/0x10 [ 77.749041][ T5323] ? stack_depot_save_flags+0x40/0x860 [ 77.751343][ T5323] ? __lock_acquire+0xab9/0xd20 [ 77.753438][ T5323] ? netif_receive_skb+0x115/0x790 [ 77.755383][ T5323] ? netif_receive_skb+0x115/0x790 [ 77.757615][ T5323] __netif_receive_skb+0x72/0x380 [ 77.760045][ T5323] ? netif_receive_skb+0x115/0x790 [ 77.762536][ T5323] netif_receive_skb+0x1cb/0x790 [ 77.765127][ T5323] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 77.768255][ T5323] ? __pfx_netif_receive_skb+0x10/0x10 [ 77.770885][ T5323] ? tun_rx_batched+0x160/0x730 [ 77.772729][ T5323] tun_rx_batched+0x1b9/0x730 [ 77.774326][ T5323] ? __lock_acquire+0xab9/0xd20 [ 77.776330][ T5323] ? __pfx_tun_rx_batched+0x10/0x10 [ 77.778735][ T5323] ? tun_get_user+0x272f/0x3e90 [ 77.780940][ T5323] tun_get_user+0x2b65/0x3e90 [ 77.782931][ T5323] ? tun_get_user+0x6f6/0x3e90 [ 77.785039][ T5323] ? tun_get_user+0x272f/0x3e90 [ 77.786983][ T5323] ? aa_file_perm+0x44d/0x1550 [ 77.789024][ T5323] ? __pfx_tun_get_user+0x10/0x10 [ 77.791022][ T5323] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 77.793366][ T5323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.796115][ T5323] ? ref_tracker_alloc+0x318/0x460 [ 77.798036][ T5323] ? __lock_acquire+0xab9/0xd20 [ 77.799999][ T5323] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 77.802159][ T5323] ? tun_get+0x1c/0x2f0 [ 77.803885][ T5323] ? tun_get+0x1c/0x2f0 [ 77.805470][ T5323] ? tun_get+0x1c/0x2f0 [ 77.807011][ T5323] tun_chr_write_iter+0x113/0x200 [ 77.813710][ T5323] vfs_write+0x5c9/0xb30 [ 77.815406][ T5323] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 77.817723][ T5323] ? __pfx_vfs_write+0x10/0x10 [ 77.819817][ T5323] ? __fget_files+0x2a/0x420 [ 77.821735][ T5323] ksys_write+0x145/0x250 [ 77.823694][ T5323] ? __pfx_ksys_write+0x10/0x10 [ 77.825795][ T5323] ? do_syscall_64+0xbe/0xfa0 [ 77.827870][ T5323] do_syscall_64+0xfa/0xfa0 [ 77.829661][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.831762][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.834276][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 77.836261][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.838695][ T5323] RIP: 0033:0x7ff9fcf8e17f [ 77.840513][ T5323] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 77.848606][ T5323] RSP: 002b:00007ff9fde32000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 77.852193][ T5323] RAX: ffffffffffffffda RBX: 00007ff9fd1e6180 RCX: 00007ff9fcf8e17f [ 77.855316][ T5323] RDX: 000000000000004e RSI: 0000200000000500 RDI: 00000000000000c8 [ 77.858446][ T5323] RBP: 00007ff9fd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.861640][ T5323] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000000 [ 77.864949][ T5323] R13: 00007ff9fd1e6218 R14: 00007ff9fd1e6180 R15: 00007ffc0b52e9e8 [ 77.868605][ T5323] [ 77.870179][ T5323] Kernel Offset: disabled [ 77.871923][ T5323] Rebooting in 86400 seconds..