last executing test programs: 779.259491ms ago: executing program 3 (id=4): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 674.178076ms ago: executing program 0 (id=1): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) getsockopt$auto(0x3, 0x0, 0xe, 0x0, 0x0) 497.642552ms ago: executing program 2 (id=3): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x4a, 0x0, 0x1, 0x14, 0x580, 0x1) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x1f40) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x2) 364.16282ms ago: executing program 0 (id=5): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setxattrat$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, &(0x7f00000001c0)='ns/mnt\x00', 0x0, 0xb9) 333.470135ms ago: executing program 1 (id=2): bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) r1 = socket(0xa, 0x801, 0x84) listen$auto(r1, 0x3) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 172.147264ms ago: executing program 0 (id=6): sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)={0xb58, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xb34, 0x2b, 0x0, 0x1, [@nested={0xb2f, 0x24, 0x0, 0x1, [@nested={0x4, 0x80}, @generic="ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b981", @generic="86d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec99", @nested={0xa46, 0x8e, 0x0, 0x1, [@generic="b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed5", @generic="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"]}]}]}]}, 0xb58}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) close_range$auto(0x2, 0x8000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/dfscache\x00', 0x40080, 0x0) socket(0x2b, 0x1, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 117.566523ms ago: executing program 3 (id=7): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/afs/addr_prefs\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000340)="0992c0023a86869d579dcf16f50e9b", 0xf) 51.875605ms ago: executing program 0 (id=8): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0xffffffffffffffff, 0x104000000000010e, 0x1, 0x0, 0x16) listen$auto(0x3, 0x81) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/reboot/type\x00', 0x8802, 0x0) write$auto(r0, 0x0, 0x400fdea) 0s ago: executing program 1 (id=9): sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x24000081) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB, @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 65.266508][ T5817] cgroup: Unknown subsys name 'net' [ 65.415395][ T5817] cgroup: Unknown subsys name 'cpuset' [ 65.423228][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.784042][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.632049][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.640066][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.640981][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.654973][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.656552][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.669885][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.677925][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.685959][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.690124][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.693499][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.714915][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.727334][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.735211][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.742828][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.750763][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.750963][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.757989][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.766109][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.779955][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.788745][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.792555][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.797246][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.803476][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.810916][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.119607][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 69.146700][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.180963][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.266751][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.351656][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.359338][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.366977][ T5834] bridge_slave_0: entered allmulticast mode [ 69.374278][ T5834] bridge_slave_0: entered promiscuous mode [ 69.381770][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.391267][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.398523][ T5826] bridge_slave_0: entered allmulticast mode [ 69.405581][ T5826] bridge_slave_0: entered promiscuous mode [ 69.412940][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.420029][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.427233][ T5826] bridge_slave_1: entered allmulticast mode [ 69.434293][ T5826] bridge_slave_1: entered promiscuous mode [ 69.453651][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.460718][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.468168][ T5834] bridge_slave_1: entered allmulticast mode [ 69.474683][ T5834] bridge_slave_1: entered promiscuous mode [ 69.489250][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.496337][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.503674][ T5827] bridge_slave_0: entered allmulticast mode [ 69.510640][ T5827] bridge_slave_0: entered promiscuous mode [ 69.551784][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.559048][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.566434][ T5827] bridge_slave_1: entered allmulticast mode [ 69.573591][ T5827] bridge_slave_1: entered promiscuous mode [ 69.582114][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.593865][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.604633][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.636185][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.653067][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.660111][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.668596][ T5829] bridge_slave_0: entered allmulticast mode [ 69.676379][ T5829] bridge_slave_0: entered promiscuous mode [ 69.704166][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.711296][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.718696][ T5829] bridge_slave_1: entered allmulticast mode [ 69.726151][ T5829] bridge_slave_1: entered promiscuous mode [ 69.742317][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.754469][ T5834] team0: Port device team_slave_0 added [ 69.762312][ T5826] team0: Port device team_slave_0 added [ 69.776907][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.787459][ T5834] team0: Port device team_slave_1 added [ 69.795356][ T5826] team0: Port device team_slave_1 added [ 69.803053][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.844227][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.870478][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.877486][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.903793][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.925080][ T5827] team0: Port device team_slave_0 added [ 69.931308][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.940983][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.967194][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.979149][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.986173][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.012139][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.037704][ T5827] team0: Port device team_slave_1 added [ 70.044481][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.051441][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.077568][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.107345][ T5829] team0: Port device team_slave_0 added [ 70.141680][ T5829] team0: Port device team_slave_1 added [ 70.160749][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.168044][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.194561][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.207025][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.214069][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.240055][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.255534][ T5834] hsr_slave_0: entered promiscuous mode [ 70.261668][ T5834] hsr_slave_1: entered promiscuous mode [ 70.277788][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.284776][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.310831][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.343185][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.350138][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.376563][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.390322][ T5826] hsr_slave_0: entered promiscuous mode [ 70.396776][ T5826] hsr_slave_1: entered promiscuous mode [ 70.403052][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.410723][ T5826] Cannot create hsr debugfs directory [ 70.447692][ T5827] hsr_slave_0: entered promiscuous mode [ 70.455878][ T5827] hsr_slave_1: entered promiscuous mode [ 70.461833][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.469860][ T5827] Cannot create hsr debugfs directory [ 70.519545][ T5829] hsr_slave_0: entered promiscuous mode [ 70.526251][ T5829] hsr_slave_1: entered promiscuous mode [ 70.532187][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.540140][ T5829] Cannot create hsr debugfs directory [ 70.753044][ T5839] Bluetooth: hci3: command tx timeout [ 70.775247][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.798731][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.811001][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.829859][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.832857][ T5839] Bluetooth: hci1: command tx timeout [ 70.842075][ T54] Bluetooth: hci0: command tx timeout [ 70.879451][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.889844][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.899927][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.912003][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.918978][ T54] Bluetooth: hci2: command tx timeout [ 70.956933][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.966528][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.975934][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.985524][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.065191][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.077396][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.088298][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.099136][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.206970][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.220160][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.267181][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.292051][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.301449][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.314734][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.321979][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.345558][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.352681][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.375599][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.390367][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.397489][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.406892][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.413993][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.442118][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.449240][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.462175][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.499891][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.507014][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.538845][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.556817][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.566922][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.618730][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.625876][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.638010][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.645153][ T4854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.668712][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.740398][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.772920][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.846069][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.949802][ T5834] veth0_vlan: entered promiscuous mode [ 71.981682][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.008099][ T5834] veth1_vlan: entered promiscuous mode [ 72.020946][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.082210][ T5826] veth0_vlan: entered promiscuous mode [ 72.108708][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.129652][ T5826] veth1_vlan: entered promiscuous mode [ 72.141187][ T5834] veth0_macvtap: entered promiscuous mode [ 72.158313][ T5829] veth0_vlan: entered promiscuous mode [ 72.178176][ T5834] veth1_macvtap: entered promiscuous mode [ 72.188339][ T5829] veth1_vlan: entered promiscuous mode [ 72.226570][ T5827] veth0_vlan: entered promiscuous mode [ 72.237208][ T5826] veth0_macvtap: entered promiscuous mode [ 72.248169][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.268518][ T5827] veth1_vlan: entered promiscuous mode [ 72.279492][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.288699][ T5826] veth1_macvtap: entered promiscuous mode [ 72.309830][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.318812][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.328275][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.337492][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.351757][ T5829] veth0_macvtap: entered promiscuous mode [ 72.394650][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.405691][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.417115][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.428680][ T5827] veth0_macvtap: entered promiscuous mode [ 72.439124][ T5829] veth1_macvtap: entered promiscuous mode [ 72.458038][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.469084][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.480365][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.489152][ T5827] veth1_macvtap: entered promiscuous mode [ 72.501849][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.517026][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.527157][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.540334][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.551344][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.567114][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.576060][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.585066][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.595039][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.607102][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.620664][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.630676][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.641445][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.654163][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.689982][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.705686][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.715726][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.726391][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.736447][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.747556][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.759312][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.788564][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.797474][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.806632][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.815536][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.833118][ T54] Bluetooth: hci3: command tx timeout [ 72.842962][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.854028][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.863143][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.864285][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.882146][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.892765][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.902691][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.913614][ T54] Bluetooth: hci0: command tx timeout [ 72.913661][ T54] Bluetooth: hci1: command tx timeout [ 72.919541][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.934975][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.979351][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.990444][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999551][ T54] Bluetooth: hci2: command tx timeout [ 73.007921][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.017657][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.038583][ T4854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.047791][ T4854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.116636][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.137903][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.142902][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.192158][ T4854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.201916][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.219011][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.228212][ T4854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.353594][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.361451][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.415348][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.442020][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.489283][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.572468][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.038861][ T5911] ================================================================== [ 74.046964][ T5911] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x123b/0x14e0 [ 74.055678][ T5911] Read of size 1 at addr ffff88807c2dba70 by task syz.3.7/5911 [ 74.063235][ T5911] [ 74.065581][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: syz.3.7 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 74.076013][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 74.086096][ T5911] Call Trace: [ 74.089390][ T5911] [ 74.092338][ T5911] dump_stack_lvl+0x116/0x1f0 [ 74.097054][ T5911] print_report+0xc3/0x620 [ 74.101501][ T5911] ? __virt_addr_valid+0x5e/0x590 [ 74.106551][ T5911] ? __phys_addr+0xc6/0x150 [ 74.111083][ T5911] kasan_report+0xd9/0x110 [ 74.115530][ T5911] ? afs_proc_addr_prefs_write+0x123b/0x14e0 [ 74.121549][ T5911] ? afs_proc_addr_prefs_write+0x123b/0x14e0 [ 74.127570][ T5911] afs_proc_addr_prefs_write+0x123b/0x14e0 [ 74.133413][ T5911] ? find_held_lock+0x2d/0x110 [ 74.138216][ T5911] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 74.144408][ T5911] ? __might_fault+0x13b/0x190 [ 74.149218][ T5911] ? __pfx_lock_release+0x10/0x10 [ 74.154279][ T5911] ? trace_lock_acquire+0x14e/0x1f0 [ 74.159510][ T5911] ? lock_acquire+0x2f/0xb0 [ 74.164042][ T5911] ? proc_simple_write+0x114/0x1b0 [ 74.169188][ T5911] proc_simple_write+0x114/0x1b0 [ 74.174162][ T5911] ? __pfx_proc_simple_write+0x10/0x10 [ 74.179653][ T5911] proc_reg_write+0x23d/0x330 [ 74.184356][ T5911] ? __pfx_proc_reg_write+0x10/0x10 [ 74.189580][ T5911] vfs_write+0x24c/0x1150 [ 74.193934][ T5911] ? __fget_files+0x1fc/0x3a0 [ 74.198637][ T5911] ? __pfx___mutex_lock+0x10/0x10 [ 74.203692][ T5911] ? __pfx_vfs_write+0x10/0x10 [ 74.208494][ T5911] ? __fget_files+0x206/0x3a0 [ 74.213200][ T5911] ksys_write+0x12b/0x250 [ 74.217554][ T5911] ? __pfx_ksys_write+0x10/0x10 [ 74.222431][ T5911] do_syscall_64+0xcd/0x250 [ 74.226970][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.232892][ T5911] RIP: 0033:0x7f01ca385d19 [ 74.237325][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.256964][ T5911] RSP: 002b:00007f01cb1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.265399][ T5911] RAX: ffffffffffffffda RBX: 00007f01ca575fa0 RCX: 00007f01ca385d19 [ 74.273395][ T5911] RDX: 000000000000000f RSI: 0000000020000340 RDI: 0000000000000003 [ 74.281386][ T5911] RBP: 00007f01ca401a20 R08: 0000000000000000 R09: 0000000000000000 [ 74.289374][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.297361][ T5911] R13: 0000000000000000 R14: 00007f01ca575fa0 R15: 00007ffcfeedd8c8 [ 74.305356][ T5911] [ 74.308383][ T5911] [ 74.310712][ T5911] Allocated by task 5911: [ 74.315305][ T5911] kasan_save_stack+0x33/0x60 [ 74.320011][ T5911] kasan_save_track+0x14/0x30 [ 74.324713][ T5911] __kasan_kmalloc+0xaa/0xb0 [ 74.329322][ T5911] __kmalloc_node_track_caller_noprof+0x21d/0x520 [ 74.335766][ T5911] memdup_user_nul+0x2b/0x110 SYZFAIL: failed to send rpc fd=3 want=16440 sent=0 n=-1 (errno 32: Broken pipe) [ 74.340474][ T5911] proc_simple_write+0xc7/0x1b0 [ 74.345357][ T5911] proc_reg_write+0x23d/0x330 [ 74.350055][ T5911] vfs_write+0x24c/0x1150 [ 74.354405][ T5911] ksys_write+0x12b/0x250 [ 74.358765][ T5911] do_syscall_64+0xcd/0x250 [ 74.363292][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.369206][ T5911] [ 74.371534][ T5911] The buggy address belongs to the object at ffff88807c2dba60 [ 74.371534][ T5911] which belongs to the cache kmalloc-16 of size 16 [ 74.385427][ T5911] The buggy address is located 0 bytes to the right of [ 74.385427][ T5911] allocated 16-byte region [ffff88807c2dba60, ffff88807c2dba70) [ 74.399852][ T5911] [ 74.402179][ T5911] The buggy address belongs to the physical page: [ 74.408602][ T5911] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c2db [ 74.417379][ T5911] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.424502][ T5911] page_type: f5(slab) [ 74.428507][ T5911] raw: 00fff00000000000 ffff88801ac41640 dead000000000122 0000000000000000 [ 74.437106][ T5911] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 74.445696][ T5911] page dumped because: kasan: bad access detected [ 74.452120][ T5911] page_owner tracks the page as allocated [ 74.457838][ T5911] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5817, tgid 5817 (syz-executor), ts 73841243093, free_ts 73725001247 [ 74.478444][ T5911] register_dummy_stack+0x8a/0xd0 [ 74.483498][ T5911] init_page_owner+0x48/0xe40 [ 74.488209][ T5911] page_ext_init+0x6b8/0xab0 [ 74.492827][ T5911] mm_core_init+0x12d/0x220 [ 74.497361][ T5911] page last free pid 90 tgid 90 stack trace: [ 74.503346][ T5911] free_unref_page+0x661/0x1080 [ 74.508215][ T5911] qlist_free_all+0x4e/0x120 [ 74.512824][ T5911] kasan_quarantine_reduce+0x195/0x1e0 [ 74.518307][ T5911] __kasan_slab_alloc+0x69/0x90 [ 74.523181][ T5911] kmem_cache_alloc_node_noprof+0x1ca/0x3b0 [ 74.529099][ T5911] __alloc_skb+0x2b3/0x380 [ 74.533537][ T5911] alloc_skb_with_frags+0xe4/0x850 [ 74.538674][ T5911] sock_alloc_send_pskb+0x7f1/0x980 [ 74.543893][ T5911] mld_newpack.isra.0+0x1d4/0x820 [ 74.548946][ T5911] add_grhead+0x299/0x340 [ 74.553306][ T5911] add_grec+0x111e/0x1670 [ 74.557658][ T5911] mld_send_initial_cr.part.0+0xe2/0x260 [ 74.563318][ T5911] mld_dad_work+0x51/0x2d0 [ 74.567759][ T5911] process_one_work+0x958/0x1b30 [ 74.572728][ T5911] worker_thread+0x6c8/0xf00 [ 74.577333][ T5911] kthread+0x2c1/0x3a0 [ 74.581425][ T5911] [ 74.583753][ T5911] Memory state around the buggy address: [ 74.589384][ T5911] ffff88807c2db900: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 74.597459][ T5911] ffff88807c2db980: fa fb fc fc 00 00 fc fc 00 06 fc fc 00 00 fc fc [ 74.605533][ T5911] >ffff88807c2dba00: 00 00 fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 74.613600][ T5911] ^ [ 74.621311][ T5911] ffff88807c2dba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.629360][ T5911] ffff88807c2dbb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.637402][ T5911] ================================================================== [ 74.668264][ T5911] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.675499][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: syz.3.7 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 74.685918][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 74.695969][ T5911] Call Trace: [ 74.699244][ T5911] [ 74.702173][ T5911] dump_stack_lvl+0x3d/0x1f0 [ 74.706772][ T5911] panic+0x71d/0x800 [ 74.710673][ T5911] ? __pfx_panic+0x10/0x10 [ 74.715094][ T5911] ? irqentry_exit+0x3b/0x90 [ 74.719686][ T5911] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.724886][ T5911] ? preempt_schedule_thunk+0x1a/0x30 [ 74.730261][ T5911] ? preempt_schedule_common+0x44/0xc0 [ 74.735726][ T5911] check_panic_on_warn+0xab/0xb0 [ 74.740671][ T5911] end_report+0x117/0x180 [ 74.745004][ T5911] kasan_report+0xe9/0x110 [ 74.749426][ T5911] ? afs_proc_addr_prefs_write+0x123b/0x14e0 [ 74.755421][ T5911] ? afs_proc_addr_prefs_write+0x123b/0x14e0 [ 74.761416][ T5911] afs_proc_addr_prefs_write+0x123b/0x14e0 [ 74.767235][ T5911] ? find_held_lock+0x2d/0x110 [ 74.772020][ T5911] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 74.778191][ T5911] ? __might_fault+0x13b/0x190 [ 74.782965][ T5911] ? __pfx_lock_release+0x10/0x10 [ 74.787998][ T5911] ? trace_lock_acquire+0x14e/0x1f0 [ 74.793202][ T5911] ? lock_acquire+0x2f/0xb0 [ 74.797713][ T5911] ? proc_simple_write+0x114/0x1b0 [ 74.802831][ T5911] proc_simple_write+0x114/0x1b0 [ 74.807770][ T5911] ? __pfx_proc_simple_write+0x10/0x10 [ 74.813231][ T5911] proc_reg_write+0x23d/0x330 [ 74.817913][ T5911] ? __pfx_proc_reg_write+0x10/0x10 [ 74.823112][ T5911] vfs_write+0x24c/0x1150 [ 74.827443][ T5911] ? __fget_files+0x1fc/0x3a0 [ 74.832122][ T5911] ? __pfx___mutex_lock+0x10/0x10 [ 74.837148][ T5911] ? __pfx_vfs_write+0x10/0x10 [ 74.841914][ T5911] ? __fget_files+0x206/0x3a0 [ 74.846591][ T5911] ksys_write+0x12b/0x250 [ 74.850920][ T5911] ? __pfx_ksys_write+0x10/0x10 [ 74.855775][ T5911] do_syscall_64+0xcd/0x250 [ 74.860283][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.866181][ T5911] RIP: 0033:0x7f01ca385d19 [ 74.870592][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.890202][ T5911] RSP: 002b:00007f01cb1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.898617][ T5911] RAX: ffffffffffffffda RBX: 00007f01ca575fa0 RCX: 00007f01ca385d19 [ 74.906583][ T5911] RDX: 000000000000000f RSI: 0000000020000340 RDI: 0000000000000003 [ 74.914550][ T5911] RBP: 00007f01ca401a20 R08: 0000000000000000 R09: 0000000000000000 [ 74.922519][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.930488][ T5911] R13: 0000000000000000 R14: 00007f01ca575fa0 R15: 00007ffcfeedd8c8 [ 74.938461][ T5911] [ 74.941713][ T5911] Kernel Offset: disabled [ 74.946026][ T5911] Rebooting in 86400 seconds..