program:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x2000000)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
write$cgroup_int(r0, &(0x7f0000000380), 0x1040c)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
[ 66.895196][ T5302] Bluetooth: hci0: command tx timeout
[ 66.907979][ T5316] loop0: detected capacity change from 0 to 512
[ 66.926020][ T5316] EXT4-fs: Ignoring removed bh option
[ 66.935884][ T5316] EXT4-fs error (device loop0): __ext4_iget:4984: inode #15: block 1803188595: comm syz.0.0: invalid block
[ 66.943486][ T5316] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.0: couldn't read orphan inode 15 (err -117)
[ 66.963182][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 67.634361][ T5316] ==================================================================
[ 67.637253][ T5316] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x341/0x3d0
[ 67.639973][ T5316] Write of size 4064 at addr ffffc9000d419020 by task syz.0.0/5316
[ 67.642753][ T5316]
[ 67.643681][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[ 67.647440][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 67.651590][ T5316] Call Trace:
[ 67.652986][ T5316]
[ 67.654100][ T5316] dump_stack_lvl+0x241/0x360
[ 67.656042][ T5316] ? __pfx_dump_stack_lvl+0x10/0x10
[ 67.658064][ T5316] ? __pfx__printk+0x10/0x10
[ 67.660094][ T5316] ? _printk+0xd5/0x120
[ 67.662052][ T5316] print_report+0x169/0x550
[ 67.663635][ T5316] ? lock_release+0xbf/0xa30
[ 67.665391][ T5316] ? __virt_addr_valid+0xbd/0x530
[ 67.667236][ T5316] ? vrealloc_noprof+0x341/0x3d0
[ 67.669083][ T5316] kasan_report+0x143/0x180
[ 67.670743][ T5316] ? vrealloc_noprof+0x341/0x3d0
[ 67.672725][ T5316] kasan_check_range+0x282/0x290
[ 67.674467][ T5316] __asan_memset+0x23/0x50
[ 67.675975][ T5316] vrealloc_noprof+0x341/0x3d0
[ 67.677686][ T5316] push_insn_history+0x16c/0x6a0
[ 67.679540][ T5316] do_check+0x692f/0xfcd0
[ 67.681208][ T5316] ? __pfx_do_check+0x10/0x10
[ 67.682976][ T5316] ? mark_reg_not_init+0xd4/0x4b0
[ 67.684828][ T5316] ? __asan_memcpy+0x40/0x70
[ 67.686536][ T5316] ? mark_reg_not_init+0xd4/0x4b0
[ 67.688411][ T5316] do_check_common+0x1564/0x2010
[ 67.690244][ T5316] bpf_check+0x804e/0x1fc90
[ 67.691982][ T5316] ? stack_depot_save_flags+0x7b4/0x940
[ 67.694068][ T5316] ? kasan_save_track+0x51/0x80
[ 67.695906][ T5316] ? kasan_save_track+0x3f/0x80
[ 67.697712][ T5316] ? __kmalloc_cache_noprof+0x243/0x390
[ 67.699797][ T5316] ? get_page_from_freelist+0x365c/0x37a0
[ 67.701925][ T5316] ? __alloc_pages_noprof+0x292/0x710
[ 67.703905][ T5316] ? alloc_pages_mpol_noprof+0x3e1/0x780
[ 67.706043][ T5316] ? alloc_slab_page+0x6a/0x110
[ 67.707757][ T5316] ? __slab_alloc+0x58/0xa0
[ 67.709481][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.711223][ T5316] ? do_raw_spin_lock+0x14f/0x370
[ 67.713176][ T5316] ? __pfx_lock_release+0x10/0x10
[ 67.715078][ T5316] ? lock_release+0xbf/0xa30
[ 67.716798][ T5316] ? __pfx_lock_acquire+0x10/0x10
[ 67.718668][ T5316] ? lock_release+0xbf/0xa30
[ 67.720446][ T5316] ? __kmalloc_cache_noprof+0x243/0x390
[ 67.722520][ T5316] ? deref_stack_reg+0x17c/0x210
[ 67.724315][ T5316] ? __pfx_lock_release+0x10/0x10
[ 67.726212][ T5316] ? stack_trace_save+0x118/0x1d0
[ 67.728045][ T5316] ? unwind_next_frame+0x18e6/0x22d0
[ 67.730059][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.731802][ T5316] ? lock_release+0xbf/0xa30
[ 67.733506][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.735135][ T5316] ? lock_release+0xbf/0xa30
[ 67.736901][ T5316] ? __pfx_lock_acquire+0x10/0x10
[ 67.738700][ T5316] ? lock_release+0xbf/0xa30
[ 67.740433][ T5316] ? deref_stack_reg+0x17c/0x210
[ 67.742326][ T5316] ? __pfx_lock_release+0x10/0x10
[ 67.744428][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.746242][ T5316] ? lock_release+0xbf/0xa30
[ 67.747957][ T5316] ? do_raw_spin_lock+0x14f/0x370
[ 67.749796][ T5316] ? __pfx_lock_release+0x10/0x10
[ 67.751723][ T5316] ? __pfx_bpf_check+0x10/0x10
[ 67.753466][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.755307][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.757229][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.758969][ T5316] ? lock_acquire+0xe3/0x550
[ 67.760746][ T5316] ? cgroup_rstat_updated+0x13b/0xc30
[ 67.762730][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.764467][ T5316] ? lock_release+0xbf/0xa30
[ 67.766541][ T5316] ? __pfx_cgroup_rstat_updated+0x10/0x10
[ 67.769139][ T5316] ? __pfx_lock_acquire+0x10/0x10
[ 67.771346][ T5316] ? lock_release+0xbf/0xa30
[ 67.773163][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.774871][ T5316] ? lock_release+0xbf/0xa30
[ 67.776565][ T5316] ? __pfx_lock_acquire+0x10/0x10
[ 67.778269][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.780036][ T5316] ? lock_acquire+0xe3/0x550
[ 67.781705][ T5316] ? __pfx_lock_release+0x10/0x10
[ 67.783437][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.785207][ T5316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 67.787390][ T5316] ? lock_release+0xbf/0xa30
[ 67.789159][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.791015][ T5316] ? ktime_get_with_offset+0x8c/0x290
[ 67.793202][ T5316] ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 67.795545][ T5316] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 67.798037][ T5316] ? _raw_spin_unlock+0x28/0x50
[ 67.799962][ T5316] ? bpf_obj_name_cpy+0x18a/0x1d0
[ 67.801727][ T5316] bpf_prog_load+0x1667/0x20f0
[ 67.803393][ T5316] ? __pfx_bpf_prog_load+0x10/0x10
[ 67.805252][ T5316] ? __pfx___might_resched+0x10/0x10
[ 67.807165][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.808964][ T5316] ? __might_fault+0xc6/0x120
[ 67.810552][ T5316] __sys_bpf+0x4ee/0x810
[ 67.812091][ T5316] ? __pfx___sys_bpf+0x10/0x10
[ 67.813828][ T5316] ? __rseq_handle_notify_resume+0x34d/0x14e0
[ 67.815983][ T5316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 67.818292][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.820026][ T5316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 67.822322][ T5316] ? rcu_is_watching+0x15/0xb0
[ 67.824070][ T5316] __x64_sys_bpf+0x7c/0x90
[ 67.825684][ T5316] do_syscall_64+0xf3/0x230
[ 67.827299][ T5316] ? clear_bhb_loop+0x35/0x90
[ 67.829073][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.831245][ T5316] RIP: 0033:0x7f2ac5985d29
[ 67.832841][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 67.839789][ T5316] RSP: 002b:00007f2ac1df5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 67.842921][ T5316] RAX: ffffffffffffffda RBX: 00007f2ac5b75fa0 RCX: 00007f2ac5985d29
[ 67.845670][ T5316] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005
[ 67.848402][ T5316] RBP: 00007f2ac5a01b08 R08: 0000000000000000 R09: 0000000000000000
[ 67.851176][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 67.854000][ T5316] R13: 0000000000000000 R14: 00007f2ac5b75fa0 R15: 00007ffe5b4f95d8
[ 67.856809][ T5316]
[ 67.858020][ T5316]
[ 67.858907][ T5316] The buggy address belongs to the virtual mapping at
[ 67.858907][ T5316] [ffffc9000d3f9000, ffffc9000d41b000) created by:
[ 67.858907][ T5316] kvrealloc_noprof+0xc7/0x120
[ 67.864955][ T5316]
[ 67.865850][ T5316] The buggy address belongs to the physical page:
[ 67.868226][ T5316] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x97 pfn:0x34612
[ 67.871655][ T5316] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 67.874527][ T5316] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 67.877863][ T5316] raw: 0000000000000097 0000000000000000 00000001ffffffff 0000000000000000
[ 67.880914][ T5316] page dumped because: kasan: bad access detected
[ 67.883193][ T5316] page_owner tracks the page as allocated
[ 67.885488][ T5316] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 5316, tgid 5315 (syz.0.0), ts 67634247799, free_ts 67101819937
[ 67.891454][ T5316] post_alloc_hook+0x1f3/0x230
[ 67.893291][ T5316] get_page_from_freelist+0x365c/0x37a0
[ 67.895480][ T5316] __alloc_pages_slowpath+0x414/0x1020
[ 67.897607][ T5316] __alloc_pages_noprof+0x49b/0x710
[ 67.899541][ T5316] alloc_pages_mpol_noprof+0x3e1/0x780
[ 67.901457][ T5316] __vmalloc_node_range_noprof+0x9c9/0x1380
[ 67.903615][ T5316] __kvmalloc_node_noprof+0x142/0x190
[ 67.905581][ T5316] kvrealloc_noprof+0xc7/0x120
[ 67.907374][ T5316] push_insn_history+0x16c/0x6a0
[ 67.909208][ T5316] do_check+0x692f/0xfcd0
[ 67.910735][ T5316] do_check_common+0x1564/0x2010
[ 67.912625][ T5316] bpf_check+0x804e/0x1fc90
[ 67.914228][ T5316] bpf_prog_load+0x1667/0x20f0
[ 67.916151][ T5316] __sys_bpf+0x4ee/0x810
[ 67.917712][ T5316] __x64_sys_bpf+0x7c/0x90
[ 67.919336][ T5316] do_syscall_64+0xf3/0x230
[ 67.920878][ T5316] page last free pid 81 tgid 81 stack trace:
[ 67.923346][ T5316] free_unref_folios+0xe39/0x18b0
[ 67.925564][ T5316] shrink_folio_list+0x3193/0x5ca0
[ 67.927649][ T5316] evict_folios+0x3c92/0x58c0
[ 67.929403][ T5316] try_to_shrink_lruvec+0x9a6/0xc70
[ 67.931338][ T5316] shrink_one+0x3b9/0x850
[ 67.933195][ T5316] shrink_node+0x37c5/0x3e50
[ 67.934983][ T5316] kswapd+0x1ca9/0x36f0
[ 67.936550][ T5316] kthread+0x2f0/0x390
[ 67.938039][ T5316] ret_from_fork+0x4b/0x80
[ 67.939701][ T5316] ret_from_fork_asm+0x1a/0x30
[ 67.941566][ T5316]
[ 67.942404][ T5316] Memory state around the buggy address:
[ 67.944285][ T5316] ffffc9000d418f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 67.947005][ T5316] ffffc9000d418f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 67.949912][ T5316] >ffffc9000d419000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 67.952763][ T5316] ^
[ 67.954515][ T5316] ffffc9000d419080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 67.957381][ T5316] ffffc9000d419100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 67.960056][ T5316] ==================================================================
[ 68.044573][ T5316] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 68.047126][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[ 68.050477][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.054349][ T5316] Call Trace:
[ 68.055573][ T5316]
[ 68.056605][ T5316] dump_stack_lvl+0x241/0x360
[ 68.058227][ T5316] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.060056][ T5316] ? __pfx__printk+0x10/0x10
[ 68.061725][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.063516][ T5316] ? preempt_schedule+0xe1/0xf0
[ 68.065247][ T5316] ? vscnprintf+0x5d/0x90
[ 68.066800][ T5316] panic+0x349/0x880
[ 68.068276][ T5316] ? check_panic_on_warn+0x21/0xb0
[ 68.070172][ T5316] ? __pfx_panic+0x10/0x10
[ 68.071856][ T5316] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 68.074131][ T5316] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 68.076379][ T5316] ? print_report+0x502/0x550
[ 68.077943][ T5316] check_panic_on_warn+0x86/0xb0
[ 68.079690][ T5316] ? vrealloc_noprof+0x341/0x3d0
[ 68.081401][ T5316] end_report+0x77/0x160
[ 68.082943][ T5316] kasan_report+0x154/0x180
[ 68.084603][ T5316] ? vrealloc_noprof+0x341/0x3d0
[ 68.086305][ T5316] kasan_check_range+0x282/0x290
[ 68.088057][ T5316] __asan_memset+0x23/0x50
[ 68.089758][ T5316] vrealloc_noprof+0x341/0x3d0
[ 68.091523][ T5316] push_insn_history+0x16c/0x6a0
[ 68.093563][ T5316] do_check+0x692f/0xfcd0
[ 68.095167][ T5316] ? __pfx_do_check+0x10/0x10
[ 68.096886][ T5316] ? mark_reg_not_init+0xd4/0x4b0
[ 68.098772][ T5316] ? __asan_memcpy+0x40/0x70
[ 68.100498][ T5316] ? mark_reg_not_init+0xd4/0x4b0
[ 68.102287][ T5316] do_check_common+0x1564/0x2010
[ 68.103996][ T5316] bpf_check+0x804e/0x1fc90
[ 68.106113][ T5316] ? stack_depot_save_flags+0x7b4/0x940
[ 68.108530][ T5316] ? kasan_save_track+0x51/0x80
[ 68.110544][ T5316] ? kasan_save_track+0x3f/0x80
[ 68.112433][ T5316] ? __kmalloc_cache_noprof+0x243/0x390
[ 68.114461][ T5316] ? get_page_from_freelist+0x365c/0x37a0
[ 68.116541][ T5316] ? __alloc_pages_noprof+0x292/0x710
[ 68.118569][ T5316] ? alloc_pages_mpol_noprof+0x3e1/0x780
[ 68.120654][ T5316] ? alloc_slab_page+0x6a/0x110
[ 68.122589][ T5316] ? __slab_alloc+0x58/0xa0
[ 68.124267][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.126089][ T5316] ? do_raw_spin_lock+0x14f/0x370
[ 68.127901][ T5316] ? __pfx_lock_release+0x10/0x10
[ 68.129923][ T5316] ? lock_release+0xbf/0xa30
[ 68.131628][ T5316] ? __pfx_lock_acquire+0x10/0x10
[ 68.133692][ T5316] ? lock_release+0xbf/0xa30
[ 68.135411][ T5316] ? __kmalloc_cache_noprof+0x243/0x390
[ 68.137414][ T5316] ? deref_stack_reg+0x17c/0x210
[ 68.139285][ T5316] ? __pfx_lock_release+0x10/0x10
[ 68.141079][ T5316] ? stack_trace_save+0x118/0x1d0
[ 68.142662][ T5316] ? unwind_next_frame+0x18e6/0x22d0
[ 68.144188][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.145741][ T5316] ? lock_release+0xbf/0xa30
[ 68.147256][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.148907][ T5316] ? lock_release+0xbf/0xa30
[ 68.150460][ T5316] ? __pfx_lock_acquire+0x10/0x10
[ 68.152288][ T5316] ? lock_release+0xbf/0xa30
[ 68.153982][ T5316] ? deref_stack_reg+0x17c/0x210
[ 68.155782][ T5316] ? __pfx_lock_release+0x10/0x10
[ 68.157647][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.159359][ T5316] ? lock_release+0xbf/0xa30
[ 68.161039][ T5316] ? do_raw_spin_lock+0x14f/0x370
[ 68.162917][ T5316] ? __pfx_lock_release+0x10/0x10
[ 68.164760][ T5316] ? __pfx_bpf_check+0x10/0x10
[ 68.166571][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.168331][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.170187][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.172180][ T5316] ? lock_acquire+0xe3/0x550
[ 68.173935][ T5316] ? cgroup_rstat_updated+0x13b/0xc30
[ 68.175952][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.177712][ T5316] ? lock_release+0xbf/0xa30
[ 68.179393][ T5316] ? __pfx_cgroup_rstat_updated+0x10/0x10
[ 68.181600][ T5316] ? __pfx_lock_acquire+0x10/0x10
[ 68.183486][ T5316] ? lock_release+0xbf/0xa30
[ 68.185224][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.186957][ T5316] ? lock_release+0xbf/0xa30
[ 68.188623][ T5316] ? __pfx_lock_acquire+0x10/0x10
[ 68.190370][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.192123][ T5316] ? lock_acquire+0xe3/0x550
[ 68.193899][ T5316] ? __pfx_lock_release+0x10/0x10
[ 68.195867][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.197568][ T5316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 68.199934][ T5316] ? lock_release+0xbf/0xa30
[ 68.201662][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.203606][ T5316] ? ktime_get_with_offset+0x8c/0x290
[ 68.206000][ T5316] ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 68.208755][ T5316] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 68.211723][ T5316] ? _raw_spin_unlock+0x28/0x50
[ 68.213990][ T5316] ? bpf_obj_name_cpy+0x18a/0x1d0
[ 68.216245][ T5316] bpf_prog_load+0x1667/0x20f0
[ 68.218503][ T5316] ? __pfx_bpf_prog_load+0x10/0x10
[ 68.220898][ T5316] ? __pfx___might_resched+0x10/0x10
[ 68.223294][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.225207][ T5316] ? __might_fault+0xc6/0x120
[ 68.226976][ T5316] __sys_bpf+0x4ee/0x810
[ 68.228608][ T5316] ? __pfx___sys_bpf+0x10/0x10
[ 68.230385][ T5316] ? __rseq_handle_notify_resume+0x34d/0x14e0
[ 68.232542][ T5316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 68.234696][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.236320][ T5316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 68.238450][ T5316] ? rcu_is_watching+0x15/0xb0
[ 68.240187][ T5316] __x64_sys_bpf+0x7c/0x90
[ 68.241843][ T5316] do_syscall_64+0xf3/0x230
[ 68.243532][ T5316] ? clear_bhb_loop+0x35/0x90
[ 68.245273][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.248000][ T5316] RIP: 0033:0x7f2ac5985d29
[ 68.249818][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.256990][ T5316] RSP: 002b:00007f2ac1df5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 68.260225][ T5316] RAX: ffffffffffffffda RBX: 00007f2ac5b75fa0 RCX: 00007f2ac5985d29
[ 68.263226][ T5316] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005
[ 68.266301][ T5316] RBP: 00007f2ac5a01b08 R08: 0000000000000000 R09: 0000000000000000
[ 68.269240][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.272066][ T5316] R13: 0000000000000000 R14: 00007f2ac5b75fa0 R15: 00007ffe5b4f95d8
[ 68.274992][ T5316]
[ 68.276314][ T5316] Kernel Offset: disabled
[ 68.277930][ T5316] Rebooting in 86400 seconds..