Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. 2026/05/16 04:07:19 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 90.703399][ T4623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.838171][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.850984][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.871323][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.886310][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.894735][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.903327][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.413530][ T4680] chnl_net:caif_netlink_parms(): no params data found [ 93.465954][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.473519][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.482198][ T4680] device bridge_slave_0 entered promiscuous mode [ 93.490888][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.498538][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.506441][ T4680] device bridge_slave_1 entered promiscuous mode [ 93.525718][ T4680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.537971][ T4680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.560247][ T4680] team0: Port device team_slave_0 added [ 93.568003][ T4680] team0: Port device team_slave_1 added [ 93.587349][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.595209][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.622343][ T4680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.635902][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.643088][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.670420][ T4680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.697053][ T4680] device hsr_slave_0 entered promiscuous mode [ 93.704260][ T4680] device hsr_slave_1 entered promiscuous mode [ 94.415410][ T4680] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.448949][ T4680] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.459222][ T4680] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.469396][ T4680] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.593464][ T4680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.608367][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.619062][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.631595][ T4680] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.644608][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.655569][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.666631][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.674397][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.722066][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.732011][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.741425][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.750084][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.757238][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.770833][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.780011][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.792127][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.802390][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.829220][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.839330][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.849260][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.889332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.899025][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.913516][ T4680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.926992][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.936800][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.948918][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.122839][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.130414][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.148584][ T4680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.184801][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.196146][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.217892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.228644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.239979][ T4680] device veth0_vlan entered promiscuous mode [ 95.261212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.272742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.285685][ T4680] device veth1_vlan entered promiscuous mode [ 95.319571][ T4680] device veth0_macvtap entered promiscuous mode [ 95.327297][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.337868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.346581][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.356607][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.368152][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.395024][ T4680] device veth1_macvtap entered promiscuous mode [ 95.435435][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.444373][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.454870][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.464399][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.478390][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.489063][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.500333][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.522822][ T4680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.531664][ T4680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.540825][ T4680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.549642][ T4680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/16 04:07:29 executed programs: 0 [ 97.416565][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.435789][ T4833] chnl_net:caif_netlink_parms(): no params data found [ 97.496178][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.503941][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.513379][ T4833] device bridge_slave_0 entered promiscuous mode [ 97.523398][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.530873][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.539561][ T4833] device bridge_slave_1 entered promiscuous mode [ 97.563406][ T4833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.575126][ T4833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.610105][ T4833] team0: Port device team_slave_0 added [ 97.621666][ T4833] team0: Port device team_slave_1 added [ 97.642440][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.649699][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.680059][ T4833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.697359][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.705012][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.736218][ T4833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.771058][ T4833] device hsr_slave_0 entered promiscuous mode [ 97.779897][ T4833] device hsr_slave_1 entered promiscuous mode [ 97.787765][ T4833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.797582][ T4833] Cannot create hsr debugfs directory [ 99.270603][ T4301] Bluetooth: hci0: command 0x0409 tx timeout [ 99.736121][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.927945][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.989366][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.851773][ T4833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.863433][ T4833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.887017][ T4833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.896743][ T4833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.954936][ T4833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.978922][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.987369][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.997880][ T4833] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.008555][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.017565][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.026411][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.034734][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.043932][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.058731][ T144] device hsr_slave_0 left promiscuous mode [ 101.065716][ T144] device hsr_slave_1 left promiscuous mode [ 101.072334][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.080227][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.090119][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.099291][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.109903][ T144] device bridge_slave_1 left promiscuous mode [ 101.118391][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.128747][ T144] device bridge_slave_0 left promiscuous mode [ 101.137428][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.154273][ T144] device veth1_macvtap left promiscuous mode [ 101.166153][ T144] device veth0_macvtap left promiscuous mode [ 101.173073][ T144] device veth1_vlan left promiscuous mode [ 101.180167][ T144] device veth0_vlan left promiscuous mode [ 101.315365][ T144] team0 (unregistering): Port device team_slave_1 removed [ 101.331717][ T144] team0 (unregistering): Port device team_slave_0 removed [ 101.347877][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.357722][ T4308] Bluetooth: hci0: command 0x041b tx timeout [ 101.374393][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.424302][ T144] bond0 (unregistering): Released all slaves [ 101.466047][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.476155][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.487079][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.494426][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.505481][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.518405][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.530271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.541935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.551273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.567758][ T4833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.580908][ T4833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.597249][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.607903][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.619123][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.629176][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.638375][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.649487][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.659886][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.765136][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.773285][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.784998][ T4833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.799357][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.810022][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.829851][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.839850][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.851238][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.859594][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.869624][ T4833] device veth0_vlan entered promiscuous mode [ 101.893330][ T4833] device veth1_vlan entered promiscuous mode [ 101.914314][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.931255][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.941476][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.951884][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.963403][ T4833] device veth0_macvtap entered promiscuous mode [ 101.976223][ T4833] device veth1_macvtap entered promiscuous mode [ 101.983675][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.994864][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.013328][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.024467][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.033464][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.043309][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.054163][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.063382][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.077759][ T4833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.088025][ T4833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.097475][ T4833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.107404][ T4833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.179364][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.193264][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.213921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/05/16 04:07:34 executed programs: 2 [ 102.227248][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.237218][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.246235][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.287389][ T5087] netlink: 80 bytes leftover after parsing attributes in process `syz.0.17'. [ 102.335521][ T5087] syz.0.17 (5087) used greatest stack depth: 20152 bytes left [ 102.344949][ T5089] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18'. [ 102.358266][ T5089] ================================================================== [ 102.367351][ T5089] BUG: KASAN: slab-out-of-bounds in __xfrm_decode_session+0x17ae/0x1fa0 [ 102.376886][ T5089] Read of size 1 at addr ffff8880744ff22a by task syz.0.18/5089 [ 102.385539][ T5089] [ 102.387988][ T5089] CPU: 0 PID: 5089 Comm: syz.0.18 Not tainted syzkaller #0 [ 102.395769][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.408525][ T5089] Call Trace: [ 102.412881][ T5089] [ 102.416437][ T5089] dump_stack_lvl+0x188/0x250 [ 102.422574][ T5089] ? show_regs_print_info+0x20/0x20 [ 102.427870][ T5089] ? _printk+0xda/0x130 [ 102.432039][ T5089] ? load_image+0x400/0x400 [ 102.436565][ T5089] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 102.442839][ T5089] print_address_description+0x60/0x2d0 [ 102.448940][ T5089] ? __xfrm_decode_session+0x17ae/0x1fa0 [ 102.454752][ T5089] kasan_report+0xdf/0x130 [ 102.459263][ T5089] ? __xfrm_decode_session+0x17ae/0x1fa0 [ 102.465254][ T5089] __xfrm_decode_session+0x17ae/0x1fa0 [ 102.471195][ T5089] ? rcu_lock_release+0x9/0x20 [ 102.476525][ T5089] icmpv6_route_lookup+0x3ea/0x5a0 [ 102.482584][ T5089] ? icmpv6_xrlim_allow+0x4b0/0x4b0 [ 102.488251][ T5089] ? dst_release+0x51/0x180 [ 102.493573][ T5089] ? icmpv6_xrlim_allow+0x3b9/0x4b0 [ 102.498801][ T5089] icmp6_send+0xff2/0x1990 [ 102.503584][ T5089] ? arch_stack_walk+0xf2/0x140 [ 102.508637][ T5089] ? icmpv6_push_pending_frames+0x450/0x450 [ 102.514695][ T5089] ? __local_bh_enable_ip+0xd7/0x1c0 [ 102.520080][ T5089] ? __local_bh_enable_ip+0x136/0x1c0 [ 102.525740][ T5089] ? ip6_neigh_lookup+0x393/0x470 [ 102.530873][ T5089] ? ip6_tnl_xmit_ctl+0x17d/0x600 [ 102.536002][ T5089] ip6_link_failure+0x35/0x490 [ 102.541038][ T5089] ? ip6_negative_advice+0x2f0/0x2f0 [ 102.546669][ T5089] ip6_tnl_xmit+0x671/0x23e0 [ 102.551270][ T5089] ? kasan_quarantine_put+0x39/0x220 [ 102.556656][ T5089] ? ip6_tnl_xmit_ctl+0x600/0x600 [ 102.561871][ T5089] ? iptunnel_handle_offloads+0x2bc/0x550 [ 102.567802][ T5089] ip6_tnl_start_xmit+0xd27/0x12d0 [ 102.573201][ T5089] ? ip6_tnl_dev_uninit+0x150/0x150 [ 102.578677][ T5089] ? netif_skb_features+0x833/0xbc0 [ 102.584231][ T5089] ? validate_xmit_skb+0x7b3/0xe40 [ 102.589351][ T5089] dev_hard_start_xmit+0x2a5/0x7e0 [ 102.594659][ T5089] sch_direct_xmit+0x25a/0x4b0 [ 102.599612][ T5089] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 102.606178][ T5089] ? sfb_dequeue+0x280/0x3a0 [ 102.611137][ T5089] __qdisc_run+0xa7e/0x1490 [ 102.615847][ T5089] __dev_queue_xmit+0xe3d/0x2f80 [ 102.621203][ T5089] ? dev_queue_xmit+0x20/0x20 [ 102.626164][ T5089] ? rcu_read_lock_bh_held+0x76/0xf0 [ 102.631453][ T5089] ? rcu_read_lock_held+0x40/0x40 [ 102.636811][ T5089] ? neigh_connected_output+0x38d/0x3e0 [ 102.642567][ T5089] ip6_finish_output2+0x108c/0x1510 [ 102.648276][ T5089] ? nf_hook+0x360/0x360 [ 102.652643][ T5089] ip6_fragment+0x133d/0x1ee0 [ 102.658004][ T5089] ? nf_hook+0x360/0x360 [ 102.662373][ T5089] ? ip6_frag_next+0xbb0/0xbb0 [ 102.667823][ T5089] ip6_xmit+0x109b/0x16d0 [ 102.672366][ T5089] ? ip6_autoflowlabel+0xd0/0xd0 [ 102.677609][ T5089] ? read_lock_is_recursive+0x10/0x10 [ 102.683364][ T5089] sctp_v6_xmit+0x985/0x11b0 [ 102.688497][ T5089] ? lockdep_hardirqs_on+0x94/0x140 [ 102.693879][ T5089] ? rcu_lock_release+0x20/0x20 [ 102.699117][ T5089] ? __skb_checksum+0x6fc/0x7a0 [ 102.704345][ T5089] ? rcu_is_watching+0x11/0xa0 [ 102.709106][ T5089] ? kmem_cache_free+0x14c/0x210 [ 102.714368][ T5089] sctp_packet_transmit+0x239c/0x2910 [ 102.720303][ T5089] sctp_packet_singleton+0x231/0x330 [ 102.725731][ T5089] ? sctp_outq_select_transport+0x570/0x570 [ 102.732251][ T5089] ? sctp_outq_select_transport+0x45d/0x570 [ 102.738331][ T5089] ? sctp_transport_burst_limited+0x193/0x280 [ 102.745200][ T5089] sctp_outq_flush+0x4ac/0x3100 [ 102.750067][ T5089] ? rcu_is_watching+0x11/0xa0 [ 102.755877][ T5089] ? sctp_outq_tail+0x8a0/0x8a0 [ 102.761007][ T5089] ? sctp_outq_tail+0x600/0x8a0 [ 102.766069][ T5089] ? sctp_outq_uncork+0x49/0xa0 [ 102.771367][ T5089] sctp_do_sm+0x4ee2/0x55f0 [ 102.776056][ T5089] ? verify_lock_unused+0x140/0x140 [ 102.781373][ T5089] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 102.787543][ T5089] ? sctp_stream_init_ext+0x53/0x160 [ 102.793125][ T5089] ? ____sys_sendmsg+0x5b7/0x8f0 [ 102.798459][ T5089] ? ___sys_sendmsg+0x236/0x2e0 [ 102.803441][ T5089] ? __sk_mem_raise_allocated+0x6d7/0x1140 [ 102.809687][ T5089] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 102.816221][ T5089] sctp_sendmsg_to_asoc+0x14a7/0x1d90 [ 102.821696][ T5089] ? sctp_assoc_add_peer+0xe2c/0x15a0 [ 102.827439][ T5089] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 102.833606][ T5089] ? __sctp_connect+0xd80/0xd80 [ 102.838895][ T5089] ? __local_bh_enable_ip+0x136/0x1c0 [ 102.844628][ T5089] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 102.850712][ T5089] ? security_sctp_bind_connect+0x85/0xb0 [ 102.858075][ T5089] sctp_sendmsg+0x196a/0x2900 [ 102.863148][ T5089] ? aa_sk_perm+0x7dc/0x910 [ 102.867743][ T5089] ? sctp_getsockopt+0x8a0/0x8a0 [ 102.872875][ T5089] ? aa_af_perm+0x340/0x340 [ 102.878273][ T5089] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 102.884791][ T5089] ? sock_rps_record_flow+0x17/0x3b0 [ 102.891034][ T5089] ? inet_sendmsg+0xe5/0x2f0 [ 102.896068][ T5089] ? inet_send_prepare+0x260/0x260 [ 102.901740][ T5089] ____sys_sendmsg+0x5b7/0x8f0 [ 102.906596][ T5089] ? __sys_sendmsg_sock+0x30/0x30 [ 102.911802][ T5089] ? import_iovec+0x6f/0xa0 [ 102.916826][ T5089] ___sys_sendmsg+0x236/0x2e0 [ 102.921961][ T5089] ? __sys_sendmsg+0x2a0/0x2a0 [ 102.926925][ T5089] __sys_sendmmsg+0x2ba/0x500 [ 102.932219][ T5089] ? __ia32_sys_sendmsg+0x80/0x80 [ 102.937686][ T5089] ? __context_tracking_exit+0x4c/0x80 [ 102.943506][ T5089] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 102.949850][ T5089] ? lock_chain_count+0x20/0x20 [ 102.954885][ T5089] ? vtime_user_exit+0x2c8/0x3e0 [ 102.960263][ T5089] __x64_sys_sendmmsg+0x9c/0xb0 [ 102.965372][ T5089] do_syscall_64+0x4c/0xa0 [ 102.969943][ T5089] ? clear_bhb_loop+0x30/0x80 [ 102.974992][ T5089] ? clear_bhb_loop+0x30/0x80 [ 102.980098][ T5089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.986102][ T5089] RIP: 0033:0x7f8b1f9ad819 [ 102.990602][ T5089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.011816][ T5089] RSP: 002b:00007f8b1f00f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.021721][ T5089] RAX: ffffffffffffffda RBX: 00007f8b1fc26fa0 RCX: 00007f8b1f9ad819 [ 103.029896][ T5089] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000004 [ 103.038640][ T5089] RBP: 00007f8b1fa43c91 R08: 0000000000000000 R09: 0000000000000000 [ 103.046651][ T5089] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 103.055849][ T5089] R13: 00007f8b1fc27038 R14: 00007f8b1fc26fa0 R15: 00007ffee5ed3658 [ 103.065001][ T5089] [ 103.068622][ T5089] [ 103.071106][ T5089] Allocated by task 5069: [ 103.076679][ T5089] __kasan_kmalloc+0xb5/0xf0 [ 103.081907][ T5089] tomoyo_realpath_from_path+0x118/0x610 [ 103.087969][ T5089] tomoyo_check_open_permission+0x1eb/0x410 [ 103.094914][ T5089] security_bprm_check+0x5e/0x90 [ 103.099945][ T5089] bprm_execve+0xa53/0x1840 [ 103.104918][ T5089] do_execveat_common+0x51e/0x6d0 [ 103.110491][ T5089] __x64_sys_execve+0x8e/0xa0 [ 103.115796][ T5089] do_syscall_64+0x4c/0xa0 [ 103.120289][ T5089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.126171][ T5089] [ 103.128747][ T5089] Freed by task 5069: [ 103.133260][ T5089] kasan_set_track+0x4b/0x70 [ 103.138206][ T5089] kasan_set_free_info+0x1f/0x40 [ 103.143941][ T5089] ____kasan_slab_free+0xd5/0x110 [ 103.151958][ T5089] slab_free_freelist_hook+0xea/0x170 [ 103.157815][ T5089] kfree+0xef/0x2a0 [ 103.162653][ T5089] tomoyo_realpath_from_path+0x5d8/0x610 [ 103.168952][ T5089] tomoyo_check_open_permission+0x1eb/0x410 [ 103.175536][ T5089] security_bprm_check+0x5e/0x90 [ 103.180644][ T5089] bprm_execve+0xa53/0x1840 [ 103.186457][ T5089] do_execveat_common+0x51e/0x6d0 [ 103.192308][ T5089] __x64_sys_execve+0x8e/0xa0 [ 103.198421][ T5089] do_syscall_64+0x4c/0xa0 [ 103.203817][ T5089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.210403][ T5089] [ 103.213141][ T5089] The buggy address belongs to the object at ffff8880744fe000 [ 103.213141][ T5089] which belongs to the cache kmalloc-4k of size 4096 [ 103.228272][ T5089] The buggy address is located 554 bytes to the right of [ 103.228272][ T5089] 4096-byte region [ffff8880744fe000, ffff8880744ff000) [ 103.243215][ T5089] The buggy address belongs to the page: [ 103.249135][ T5089] page:ffffea0001d13e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x744f8 [ 103.259379][ T5089] head:ffffea0001d13e00 order:3 compound_mapcount:0 compound_pincount:0 [ 103.268582][ T5089] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 103.277778][ T5089] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42140 [ 103.287127][ T5089] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 103.296559][ T5089] page dumped because: kasan: bad access detected [ 103.304228][ T5089] page_owner tracks the page as allocated [ 103.311119][ T5089] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3916, ts 28602075309, free_ts 28575569524 [ 103.332028][ T5089] get_page_from_freelist+0x1bbd/0x1ca0 [ 103.337847][ T5089] __alloc_pages+0x1ee/0x480 [ 103.342779][ T5089] new_slab+0xc0/0x4b0 [ 103.347379][ T5089] ___slab_alloc+0x80a/0xdd0 [ 103.352248][ T5089] __kmalloc+0x1cd/0x330 [ 103.356654][ T5089] tomoyo_realpath_from_path+0x118/0x610 [ 103.362580][ T5089] tomoyo_check_open_permission+0x1eb/0x410 [ 103.369890][ T5089] security_file_open+0x5e/0xa0 [ 103.374818][ T5089] do_dentry_open+0x322/0xf80 [ 103.380485][ T5089] path_openat+0x26f5/0x2fa0 [ 103.385276][ T5089] do_filp_open+0x1e2/0x410 [ 103.390439][ T5089] do_sys_openat2+0x150/0x4b0 [ 103.396334][ T5089] __x64_sys_openat+0x135/0x160 [ 103.402509][ T5089] do_syscall_64+0x4c/0xa0 [ 103.409129][ T5089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.416972][ T5089] page last free stack trace: [ 103.421932][ T5089] free_unref_page_prepare+0x637/0x6c0 [ 103.430889][ T5089] free_unref_page+0x8f/0x2a0 [ 103.438693][ T5089] __unfreeze_partials+0x1a5/0x200 [ 103.446827][ T5089] put_cpu_partial+0x12d/0x190 [ 103.453948][ T5089] qlist_free_all+0x35/0x90 [ 103.459826][ T5089] kasan_quarantine_reduce+0x150/0x160 [ 103.467435][ T5089] __kasan_slab_alloc+0x2f/0xd0 [ 103.475260][ T5089] slab_post_alloc_hook+0x4c/0x380 [ 103.483691][ T5089] kmem_cache_alloc+0x100/0x290 [ 103.489683][ T5089] getname_flags+0xb5/0x500 [ 103.496477][ T5089] user_path_at_empty+0x2a/0x190 [ 103.501860][ T5089] vfs_statx+0x107/0x500 [ 103.507528][ T5089] __x64_sys_newfstatat+0x15f/0x200 [ 103.513648][ T5089] do_syscall_64+0x4c/0xa0 [ 103.518933][ T5089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.525253][ T5089] [ 103.528292][ T5089] Memory state around the buggy address: [ 103.534521][ T5089] ffff8880744ff100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.543387][ T5089] ffff8880744ff180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.553385][ T5089] >ffff8880744ff200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.561961][ T5089] ^ [ 103.567786][ T5089] ffff8880744ff280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.577170][ T5089] ffff8880744ff300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.585829][ T5089] ================================================================== [ 103.594337][ T5089] Disabling lock debugging due to kernel taint [ 103.600670][ T5089] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.608406][ T5089] CPU: 0 PID: 5089 Comm: syz.0.18 Tainted: G B syzkaller #0 [ 103.618042][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.628652][ T5089] Call Trace: [ 103.632244][ T5089] [ 103.635178][ T5089] dump_stack_lvl+0x188/0x250 [ 103.639955][ T5089] ? show_regs_print_info+0x20/0x20 [ 103.645347][ T5089] ? load_image+0x400/0x400 [ 103.650508][ T5089] panic+0x2e5/0x810 [ 103.654589][ T5089] ? asm_common_interrupt+0x22/0x40 [ 103.659868][ T5089] ? bpf_jit_dump+0xd0/0xd0 [ 103.664885][ T5089] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 103.670962][ T5089] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 103.676928][ T5089] ? _raw_spin_unlock+0x40/0x40 [ 103.682702][ T5089] ? __xfrm_decode_session+0x17ae/0x1fa0 [ 103.689376][ T5089] check_panic_on_warn+0x80/0xa0 [ 103.694982][ T5089] ? __xfrm_decode_session+0x17ae/0x1fa0 [ 103.700813][ T5089] end_report+0x6d/0xf0 [ 103.705183][ T5089] kasan_report+0x102/0x130 [ 103.709872][ T5089] ? __xfrm_decode_session+0x17ae/0x1fa0 [ 103.715776][ T5089] __xfrm_decode_session+0x17ae/0x1fa0 [ 103.721223][ T5089] ? rcu_lock_release+0x9/0x20 [ 103.726081][ T5089] icmpv6_route_lookup+0x3ea/0x5a0 [ 103.732066][ T5089] ? icmpv6_xrlim_allow+0x4b0/0x4b0 [ 103.737985][ T5089] ? dst_release+0x51/0x180 [ 103.742998][ T5089] ? icmpv6_xrlim_allow+0x3b9/0x4b0 [ 103.748648][ T5089] icmp6_send+0xff2/0x1990 [ 103.753249][ T5089] ? arch_stack_walk+0xf2/0x140 [ 103.758583][ T5089] ? icmpv6_push_pending_frames+0x450/0x450 [ 103.764962][ T5089] ? __local_bh_enable_ip+0xd7/0x1c0 [ 103.770496][ T5089] ? __local_bh_enable_ip+0x136/0x1c0 [ 103.777016][ T5089] ? ip6_neigh_lookup+0x393/0x470 [ 103.782393][ T5089] ? ip6_tnl_xmit_ctl+0x17d/0x600 [ 103.788069][ T5089] ip6_link_failure+0x35/0x490 [ 103.793695][ T5089] ? ip6_negative_advice+0x2f0/0x2f0 [ 103.799511][ T5089] ip6_tnl_xmit+0x671/0x23e0 [ 103.804186][ T5089] ? kasan_quarantine_put+0x39/0x220 [ 103.809819][ T5089] ? ip6_tnl_xmit_ctl+0x600/0x600 [ 103.815712][ T5089] ? iptunnel_handle_offloads+0x2bc/0x550 [ 103.822475][ T5089] ip6_tnl_start_xmit+0xd27/0x12d0 [ 103.828409][ T5089] ? ip6_tnl_dev_uninit+0x150/0x150 [ 103.835048][ T5089] ? netif_skb_features+0x833/0xbc0 [ 103.841564][ T5089] ? validate_xmit_skb+0x7b3/0xe40 [ 103.847240][ T5089] dev_hard_start_xmit+0x2a5/0x7e0 [ 103.853150][ T5089] sch_direct_xmit+0x25a/0x4b0 [ 103.858471][ T5089] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 103.865369][ T5089] ? sfb_dequeue+0x280/0x3a0 [ 103.874303][ T5089] __qdisc_run+0xa7e/0x1490 [ 103.879331][ T5089] __dev_queue_xmit+0xe3d/0x2f80 [ 103.885292][ T5089] ? dev_queue_xmit+0x20/0x20 [ 103.891465][ T5089] ? rcu_read_lock_bh_held+0x76/0xf0 [ 103.897267][ T5089] ? rcu_read_lock_held+0x40/0x40 [ 103.902384][ T5089] ? neigh_connected_output+0x38d/0x3e0 [ 103.909943][ T5089] ip6_finish_output2+0x108c/0x1510 [ 103.916692][ T5089] ? nf_hook+0x360/0x360 [ 103.923144][ T5089] ip6_fragment+0x133d/0x1ee0 [ 103.928777][ T5089] ? nf_hook+0x360/0x360 [ 103.933626][ T5089] ? ip6_frag_next+0xbb0/0xbb0 [ 103.939010][ T5089] ip6_xmit+0x109b/0x16d0 [ 103.943705][ T5089] ? ip6_autoflowlabel+0xd0/0xd0 [ 103.949327][ T5089] ? read_lock_is_recursive+0x10/0x10 [ 103.955441][ T5089] sctp_v6_xmit+0x985/0x11b0 [ 103.960901][ T5089] ? lockdep_hardirqs_on+0x94/0x140 [ 103.966552][ T5089] ? rcu_lock_release+0x20/0x20 [ 103.971486][ T5089] ? __skb_checksum+0x6fc/0x7a0 [ 103.976812][ T5089] ? rcu_is_watching+0x11/0xa0 [ 103.982165][ T5089] ? kmem_cache_free+0x14c/0x210 [ 103.988489][ T5089] sctp_packet_transmit+0x239c/0x2910 [ 103.994859][ T5089] sctp_packet_singleton+0x231/0x330 [ 104.001315][ T5089] ? sctp_outq_select_transport+0x570/0x570 [ 104.008146][ T5089] ? sctp_outq_select_transport+0x45d/0x570 [ 104.016522][ T5089] ? sctp_transport_burst_limited+0x193/0x280 [ 104.023980][ T5089] sctp_outq_flush+0x4ac/0x3100 [ 104.030205][ T5089] ? rcu_is_watching+0x11/0xa0 [ 104.035848][ T5089] ? sctp_outq_tail+0x8a0/0x8a0 [ 104.041196][ T5089] ? sctp_outq_tail+0x600/0x8a0 [ 104.046523][ T5089] ? sctp_outq_uncork+0x49/0xa0 [ 104.051900][ T5089] sctp_do_sm+0x4ee2/0x55f0 [ 104.057552][ T5089] ? verify_lock_unused+0x140/0x140 [ 104.063745][ T5089] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 104.071214][ T5089] ? sctp_stream_init_ext+0x53/0x160 [ 104.077622][ T5089] ? ____sys_sendmsg+0x5b7/0x8f0 [ 104.083107][ T5089] ? ___sys_sendmsg+0x236/0x2e0 [ 104.088674][ T5089] ? __sk_mem_raise_allocated+0x6d7/0x1140 [ 104.094624][ T5089] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 104.100186][ T5089] sctp_sendmsg_to_asoc+0x14a7/0x1d90 [ 104.107706][ T5089] ? sctp_assoc_add_peer+0xe2c/0x15a0 [ 104.113880][ T5089] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 104.120808][ T5089] ? __sctp_connect+0xd80/0xd80 [ 104.127076][ T5089] ? __local_bh_enable_ip+0x136/0x1c0 [ 104.134920][ T5089] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 104.142105][ T5089] ? security_sctp_bind_connect+0x85/0xb0 [ 104.150007][ T5089] sctp_sendmsg+0x196a/0x2900 [ 104.156719][ T5089] ? aa_sk_perm+0x7dc/0x910 [ 104.161803][ T5089] ? sctp_getsockopt+0x8a0/0x8a0 [ 104.167356][ T5089] ? aa_af_perm+0x340/0x340 [ 104.173932][ T5089] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 104.183692][ T5089] ? sock_rps_record_flow+0x17/0x3b0 [ 104.189791][ T5089] ? inet_sendmsg+0xe5/0x2f0 [ 104.195614][ T5089] ? inet_send_prepare+0x260/0x260 [ 104.202191][ T5089] ____sys_sendmsg+0x5b7/0x8f0 [ 104.207693][ T5089] ? __sys_sendmsg_sock+0x30/0x30 [ 104.213483][ T5089] ? import_iovec+0x6f/0xa0 [ 104.218841][ T5089] ___sys_sendmsg+0x236/0x2e0 [ 104.224723][ T5089] ? __sys_sendmsg+0x2a0/0x2a0 [ 104.230975][ T5089] __sys_sendmmsg+0x2ba/0x500 [ 104.236536][ T5089] ? __ia32_sys_sendmsg+0x80/0x80 [ 104.242274][ T5089] ? __context_tracking_exit+0x4c/0x80 [ 104.248179][ T5089] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 104.254821][ T5089] ? lock_chain_count+0x20/0x20 [ 104.262590][ T5089] ? vtime_user_exit+0x2c8/0x3e0 [ 104.268081][ T5089] __x64_sys_sendmmsg+0x9c/0xb0 [ 104.274133][ T5089] do_syscall_64+0x4c/0xa0 [ 104.281665][ T5089] ? clear_bhb_loop+0x30/0x80 [ 104.286889][ T5089] ? clear_bhb_loop+0x30/0x80 [ 104.291984][ T5089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.298499][ T5089] RIP: 0033:0x7f8b1f9ad819 [ 104.303913][ T5089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.327513][ T5089] RSP: 002b:00007f8b1f00f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.337994][ T5089] RAX: ffffffffffffffda RBX: 00007f8b1fc26fa0 RCX: 00007f8b1f9ad819 [ 104.346269][ T5089] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000004 [ 104.354851][ T5089] RBP: 00007f8b1fa43c91 R08: 0000000000000000 R09: 0000000000000000 [ 104.364194][ T5089] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 104.372829][ T5089] R13: 00007f8b1fc27038 R14: 00007f8b1fc26fa0 R15: 00007ffee5ed3658 [ 104.381765][ T5089] [ 104.386040][ T5089] Kernel Offset: disabled [ 104.390683][ T5089] Rebooting in 86400 seconds..