program: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0x4, 0x3ff, 0x3, 0x10000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (fail_nth: 7) [ 75.359464][ T5301] Bluetooth: hci0: command tx timeout [ 75.416567][ T5321] netlink: 'syz.0.0': attribute type 1 has an invalid length. [ 75.420075][ T5321] FAULT_INJECTION: forcing a failure. [ 75.420075][ T5321] name failslab, interval 1, probability 0, space 0, times 1 [ 75.425524][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.425539][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.425546][ T5321] Call Trace: [ 75.425551][ T5321] [ 75.425556][ T5321] dump_stack_lvl+0x189/0x250 [ 75.425667][ T5321] ? __pfx____ratelimit+0x10/0x10 [ 75.425708][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.425721][ T5321] ? __pfx__printk+0x10/0x10 [ 75.425734][ T5321] ? __pfx___might_resched+0x10/0x10 [ 75.425746][ T5321] ? fs_reclaim_acquire+0x7d/0x100 [ 75.425763][ T5321] should_fail_ex+0x414/0x560 [ 75.425806][ T5321] should_failslab+0xa8/0x100 [ 75.425823][ T5321] __kmalloc_cache_noprof+0x6f/0x6f0 [ 75.425836][ T5321] ? qfq_change_class+0xb65/0x10a0 [ 75.425853][ T5321] qfq_change_class+0xb65/0x10a0 [ 75.425873][ T5321] ? __pfx_qfq_change_class+0x10/0x10 [ 75.425889][ T5321] ? lockdep_rtnl_is_held+0x26/0x40 [ 75.425900][ T5321] ? qdisc_lookup+0x179/0x6d0 [ 75.425913][ T5321] tc_ctl_tclass+0xaa0/0x1500 [ 75.425937][ T5321] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 75.425947][ T5321] ? rcu_is_watching+0x15/0xb0 [ 75.425960][ T5321] ? trace_contention_end+0x39/0x120 [ 75.425974][ T5321] ? __mutex_lock+0x335/0x1350 [ 75.425989][ T5321] ? __dev_queue_xmit+0x27b/0x3b50 [ 75.426001][ T5321] ? __dev_queue_xmit+0x1d79/0x3b50 [ 75.426010][ T5321] ? kasan_save_track+0x3e/0x80 [ 75.426023][ T5321] ? __kasan_slab_alloc+0x6c/0x80 [ 75.426061][ T5321] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 75.426071][ T5321] rtnetlink_rcv_msg+0x77c/0xb70 [ 75.426086][ T5321] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 75.426098][ T5321] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.426109][ T5321] ? ref_tracker_free+0x63a/0x7d0 [ 75.426124][ T5321] ? __asan_memcpy+0x40/0x70 [ 75.426134][ T5321] ? __pfx_ref_tracker_free+0x10/0x10 [ 75.426143][ T5321] ? __skb_clone+0x63/0x7a0 [ 75.426158][ T5321] netlink_rcv_skb+0x208/0x470 [ 75.426172][ T5321] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.426187][ T5321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.426209][ T5321] ? netlink_deliver_tap+0x2e/0x1b0 [ 75.426230][ T5321] netlink_unicast+0x82f/0x9e0 [ 75.426249][ T5321] ? __pfx_netlink_unicast+0x10/0x10 [ 75.426264][ T5321] ? netlink_sendmsg+0x642/0xb30 [ 75.426277][ T5321] ? skb_put+0x11b/0x210 [ 75.426293][ T5321] netlink_sendmsg+0x805/0xb30 [ 75.426314][ T5321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.426331][ T5321] ? aa_sock_msg_perm+0xf1/0x1d0 [ 75.426347][ T5321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 75.426362][ T5321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.426377][ T5321] __sock_sendmsg+0x21c/0x270 [ 75.426393][ T5321] ____sys_sendmsg+0x505/0x830 [ 75.426412][ T5321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.426438][ T5321] ? import_iovec+0x74/0xa0 [ 75.426453][ T5321] ___sys_sendmsg+0x21f/0x2a0 [ 75.426470][ T5321] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.426511][ T5321] ? __fget_files+0x2a/0x420 [ 75.426525][ T5321] ? __fget_files+0x3a0/0x420 [ 75.426547][ T5321] __x64_sys_sendmsg+0x19b/0x260 [ 75.426564][ T5321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 75.426586][ T5321] ? __pfx_ksys_write+0x10/0x10 [ 75.426604][ T5321] ? do_syscall_64+0xbe/0xfa0 [ 75.426619][ T5321] do_syscall_64+0xfa/0xfa0 [ 75.426631][ T5321] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.426644][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.426655][ T5321] ? clear_bhb_loop+0x60/0xb0 [ 75.426669][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.426680][ T5321] RIP: 0033:0x7f16f118efc9 [ 75.426691][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.426700][ T5321] RSP: 002b:00007f16f210e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.426712][ T5321] RAX: ffffffffffffffda RBX: 00007f16f13e5fa0 RCX: 00007f16f118efc9 [ 75.426720][ T5321] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 000000000000000a [ 75.426727][ T5321] RBP: 00007f16f210e090 R08: 0000000000000000 R09: 0000000000000000 [ 75.426734][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.426740][ T5321] R13: 00007f16f13e6038 R14: 00007f16f13e5fa0 R15: 00007ffdf4a3b448 [ 75.426760][ T5321] [ 75.614872][ T5320] ================================================================== [ 75.618463][ T5320] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0xf9/0x240 [ 75.621957][ T5320] Read of size 8 at addr ffff88803dc4a550 by task syz.0.0/5320 [ 75.625363][ T5320] [ 75.626431][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.626446][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.626452][ T5320] Call Trace: [ 75.626460][ T5320] [ 75.626465][ T5320] dump_stack_lvl+0x189/0x250 [ 75.626494][ T5320] ? __virt_addr_valid+0x1c8/0x5c0 [ 75.626512][ T5320] ? rcu_is_watching+0x15/0xb0 [ 75.626523][ T5320] ? __kasan_check_byte+0x12/0x40 [ 75.626537][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.626549][ T5320] ? rcu_is_watching+0x15/0xb0 [ 75.626560][ T5320] ? lock_release+0x4b/0x3e0 [ 75.626571][ T5320] ? __virt_addr_valid+0x1c8/0x5c0 [ 75.626583][ T5320] ? __virt_addr_valid+0x4a5/0x5c0 [ 75.626596][ T5320] print_report+0xca/0x240 [ 75.626609][ T5320] ? qfq_reset_qdisc+0xf9/0x240 [ 75.626620][ T5320] kasan_report+0x118/0x150 [ 75.626633][ T5320] ? qfq_reset_qdisc+0xf9/0x240 [ 75.626644][ T5320] qfq_reset_qdisc+0xf9/0x240 [ 75.626657][ T5320] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 75.626667][ T5320] qdisc_reset+0x10f/0x580 [ 75.626682][ T5320] __qdisc_destroy+0x120/0x420 [ 75.626696][ T5320] dev_shutdown+0x34c/0x440 [ 75.626707][ T5320] unregister_netdevice_many_notify+0x118c/0x2390 [ 75.626717][ T5320] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 75.626724][ T5320] ? __queue_work+0xc56/0xfb0 [ 75.626733][ T5320] ? queue_delayed_work_on+0x11a/0x280 [ 75.626740][ T5320] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.626749][ T5320] unregister_netdevice_queue+0x33c/0x380 [ 75.626756][ T5320] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 75.626763][ T5320] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 75.626769][ T5320] ? linkwatch_urgent_event+0x62/0x3a0 [ 75.626776][ T5320] __tun_detach+0x6d9/0x15d0 [ 75.626788][ T5320] ? __pfx_tun_chr_close+0x10/0x10 [ 75.626797][ T5320] tun_chr_close+0x10a/0x1c0 [ 75.626806][ T5320] __fput+0x44c/0xa70 [ 75.626820][ T5320] task_work_run+0x1d4/0x260 [ 75.626835][ T5320] ? __pfx_task_work_run+0x10/0x10 [ 75.626850][ T5320] ? exit_to_user_mode_loop+0x40/0x130 [ 75.626861][ T5320] exit_to_user_mode_loop+0xe9/0x130 [ 75.626870][ T5320] do_syscall_64+0x2bd/0xfa0 [ 75.626882][ T5320] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.626893][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.626904][ T5320] ? clear_bhb_loop+0x60/0xb0 [ 75.626914][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.626924][ T5320] RIP: 0033:0x7f16f118efc9 [ 75.626936][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.626945][ T5320] RSP: 002b:00007ffdf4a3b5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 75.626957][ T5320] RAX: 0000000000000000 RBX: 00007f16f13e7da0 RCX: 00007f16f118efc9 [ 75.626970][ T5320] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 75.626976][ T5320] RBP: 00007f16f13e7da0 R08: 0000000000000000 R09: 00000012f4a3b89f [ 75.626983][ T5320] R10: 0000000000dffd40 R11: 0000000000000246 R12: 0000000000012921 [ 75.626989][ T5320] R13: 00007ffdf4a3b6a0 R14: ffffffffffffffff R15: 00007ffdf4a3b6c0 [ 75.627001][ T5320] [ 75.627005][ T5320] [ 75.756095][ T5320] Allocated by task 5321: [ 75.757931][ T5320] kasan_save_track+0x3e/0x80 [ 75.759912][ T5320] __kasan_kmalloc+0x93/0xb0 [ 75.761876][ T5320] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 75.764070][ T5320] qfq_change_class+0x67c/0x10a0 [ 75.766207][ T5320] tc_ctl_tclass+0xaa0/0x1500 [ 75.768180][ T5320] rtnetlink_rcv_msg+0x77c/0xb70 [ 75.770342][ T5320] netlink_rcv_skb+0x208/0x470 [ 75.772427][ T5320] netlink_unicast+0x82f/0x9e0 [ 75.774453][ T5320] netlink_sendmsg+0x805/0xb30 [ 75.776423][ T5320] __sock_sendmsg+0x21c/0x270 [ 75.778635][ T5320] ____sys_sendmsg+0x505/0x830 [ 75.780881][ T5320] ___sys_sendmsg+0x21f/0x2a0 [ 75.782849][ T5320] __x64_sys_sendmsg+0x19b/0x260 [ 75.784928][ T5320] do_syscall_64+0xfa/0xfa0 [ 75.786905][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.789477][ T5320] [ 75.790495][ T5320] Freed by task 5321: [ 75.792320][ T5320] kasan_save_track+0x3e/0x80 [ 75.794425][ T5320] __kasan_save_free_info+0x46/0x50 [ 75.796686][ T5320] __kasan_slab_free+0x5c/0x80 [ 75.798783][ T5320] kfree+0x19a/0x6d0 [ 75.800560][ T5320] qfq_change_class+0xc60/0x10a0 [ 75.802666][ T5320] tc_ctl_tclass+0xaa0/0x1500 [ 75.804655][ T5320] rtnetlink_rcv_msg+0x77c/0xb70 [ 75.806716][ T5320] netlink_rcv_skb+0x208/0x470 [ 75.808706][ T5320] netlink_unicast+0x82f/0x9e0 [ 75.810751][ T5320] netlink_sendmsg+0x805/0xb30 [ 75.812787][ T5320] __sock_sendmsg+0x21c/0x270 [ 75.814720][ T5320] ____sys_sendmsg+0x505/0x830 [ 75.816609][ T5320] ___sys_sendmsg+0x21f/0x2a0 [ 75.818467][ T5320] __x64_sys_sendmsg+0x19b/0x260 [ 75.820387][ T5320] do_syscall_64+0xfa/0xfa0 [ 75.822233][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.824548][ T5320] [ 75.825521][ T5320] The buggy address belongs to the object at ffff88803dc4a500 [ 75.825521][ T5320] which belongs to the cache kmalloc-128 of size 128 [ 75.831230][ T5320] The buggy address is located 80 bytes inside of [ 75.831230][ T5320] freed 128-byte region [ffff88803dc4a500, ffff88803dc4a580) [ 75.836853][ T5320] [ 75.837964][ T5320] The buggy address belongs to the physical page: [ 75.840731][ T5320] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3dc4a [ 75.844394][ T5320] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 75.847539][ T5320] page_type: f5(slab) [ 75.849150][ T5320] raw: 04fff00000000000 ffff88801a041a00 ffffea0000fd3000 dead000000000003 [ 75.852748][ T5320] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 75.856316][ T5320] page dumped because: kasan: bad access detected [ 75.858962][ T5320] page_owner tracks the page as allocated [ 75.861485][ T5320] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 22674141306, free_ts 22674128398 [ 75.869355][ T5320] post_alloc_hook+0x240/0x2a0 [ 75.871537][ T5320] get_page_from_freelist+0x2365/0x2440 [ 75.873810][ T5320] __alloc_frozen_pages_noprof+0x181/0x370 [ 75.876220][ T5320] alloc_pages_mpol+0x232/0x4a0 [ 75.878364][ T5320] allocate_slab+0x96/0x3a0 [ 75.880246][ T5320] ___slab_alloc+0xe94/0x18a0 [ 75.882312][ T5320] __slab_alloc+0x65/0x100 [ 75.884191][ T5320] __kmalloc_node_noprof+0x5cc/0x800 [ 75.886391][ T5320] __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 75.888880][ T5320] vzalloc_noprof+0xb2/0xf0 [ 75.890823][ T5320] tpg_alloc+0xa3/0x870 [ 75.892553][ T5320] vivid_probe+0x1b11/0x7180 [ 75.894567][ T5320] platform_probe+0xf9/0x190 [ 75.896628][ T5320] really_probe+0x26d/0x9e0 [ 75.898676][ T5320] __driver_probe_device+0x18c/0x2f0 [ 75.901043][ T5320] driver_probe_device+0x4f/0x430 [ 75.903269][ T5320] page last free pid 1 tgid 1 stack trace: [ 75.905772][ T5320] __free_frozen_pages+0xbc4/0xd30 [ 75.907930][ T5320] kasan_populate_vmalloc+0x256/0x270 [ 75.910323][ T5320] alloc_vmap_area+0xd7a/0x14c0 [ 75.912422][ T5320] __get_vm_area_node+0x1f8/0x300 [ 75.914525][ T5320] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 75.916943][ T5320] vzalloc_noprof+0xb2/0xf0 [ 75.918872][ T5320] tpg_alloc+0xa3/0x870 [ 75.920629][ T5320] vivid_probe+0x1b11/0x7180 [ 75.922602][ T5320] platform_probe+0xf9/0x190 [ 75.924632][ T5320] really_probe+0x26d/0x9e0 [ 75.926693][ T5320] __driver_probe_device+0x18c/0x2f0 [ 75.929019][ T5320] driver_probe_device+0x4f/0x430 [ 75.931123][ T5320] __driver_attach+0x452/0x700 [ 75.933093][ T5320] bus_for_each_dev+0x233/0x2b0 [ 75.935198][ T5320] bus_add_driver+0x345/0x640 [ 75.937175][ T5320] driver_register+0x23a/0x320 [ 75.939212][ T5320] [ 75.940252][ T5320] Memory state around the buggy address: [ 75.942618][ T5320] ffff88803dc4a400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 [ 75.946006][ T5320] ffff88803dc4a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.949255][ T5320] >ffff88803dc4a500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.952449][ T5320] ^ [ 75.955353][ T5320] ffff88803dc4a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.958702][ T5320] ffff88803dc4a600: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 75.962085][ T5320] ================================================================== [ 75.984189][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.987336][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.991238][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.995736][ T5320] Call Trace: [ 75.997173][ T5320] [ 75.998451][ T5320] dump_stack_lvl+0x99/0x250 [ 76.000420][ T5320] ? __asan_memcpy+0x40/0x70 [ 76.002439][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.004701][ T5320] ? __pfx__printk+0x10/0x10 [ 76.006754][ T5320] vpanic+0x237/0x6d0 [ 76.008516][ T5320] ? __pfx_vpanic+0x10/0x10 [ 76.010523][ T5320] ? preempt_schedule_common+0x83/0xd0 [ 76.012813][ T5320] ? preempt_schedule+0xae/0xc0 [ 76.014781][ T5320] panic+0xb9/0xc0 [ 76.016285][ T5320] ? __pfx_panic+0x10/0x10 [ 76.018074][ T5320] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.020572][ T5320] ? qfq_reset_qdisc+0xf9/0x240 [ 76.022493][ T5320] check_panic_on_warn+0x89/0xb0 [ 76.024481][ T5320] ? qfq_reset_qdisc+0xf9/0x240 [ 76.026440][ T5320] end_report+0x78/0x160 [ 76.028310][ T5320] kasan_report+0x129/0x150 [ 76.030349][ T5320] ? qfq_reset_qdisc+0xf9/0x240 [ 76.032512][ T5320] qfq_reset_qdisc+0xf9/0x240 [ 76.034633][ T5320] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 76.036933][ T5320] qdisc_reset+0x10f/0x580 [ 76.038894][ T5320] __qdisc_destroy+0x120/0x420 [ 76.041018][ T5320] dev_shutdown+0x34c/0x440 [ 76.043069][ T5320] unregister_netdevice_many_notify+0x118c/0x2390 [ 76.045883][ T5320] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 76.048865][ T5320] ? __queue_work+0xc56/0xfb0 [ 76.051062][ T5320] ? queue_delayed_work_on+0x11a/0x280 [ 76.053534][ T5320] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.055854][ T5320] unregister_netdevice_queue+0x33c/0x380 [ 76.058414][ T5320] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 76.061025][ T5320] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 76.063659][ T5320] ? linkwatch_urgent_event+0x62/0x3a0 [ 76.066050][ T5320] __tun_detach+0x6d9/0x15d0 [ 76.068077][ T5320] ? __pfx_tun_chr_close+0x10/0x10 [ 76.070358][ T5320] tun_chr_close+0x10a/0x1c0 [ 76.072421][ T5320] __fput+0x44c/0xa70 [ 76.074247][ T5320] task_work_run+0x1d4/0x260 [ 76.076233][ T5320] ? __pfx_task_work_run+0x10/0x10 [ 76.078507][ T5320] ? exit_to_user_mode_loop+0x40/0x130 [ 76.080953][ T5320] exit_to_user_mode_loop+0xe9/0x130 [ 76.083235][ T5320] do_syscall_64+0x2bd/0xfa0 [ 76.085313][ T5320] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.087612][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.090354][ T5320] ? clear_bhb_loop+0x60/0xb0 [ 76.092566][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.095084][ T5320] RIP: 0033:0x7f16f118efc9 [ 76.096920][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.105725][ T5320] RSP: 002b:00007ffdf4a3b5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 76.109094][ T5320] RAX: 0000000000000000 RBX: 00007f16f13e7da0 RCX: 00007f16f118efc9 [ 76.112548][ T5320] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 76.115972][ T5320] RBP: 00007f16f13e7da0 R08: 0000000000000000 R09: 00000012f4a3b89f [ 76.119457][ T5320] R10: 0000000000dffd40 R11: 0000000000000246 R12: 0000000000012921 [ 76.122909][ T5320] R13: 00007ffdf4a3b6a0 R14: ffffffffffffffff R15: 00007ffdf4a3b6c0 [ 76.126428][ T5320] [ 76.128088][ T5320] Kernel Offset: disabled [ 76.129949][ T5320] Rebooting in 86400 seconds..