last executing test programs: 3.716078804s ago: executing program 0 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) kexec_load(0x20000000, 0x0, 0x0, 0x2a0000) syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x1cf, &(0x7f0000000340)="$eJzKKC4sZmJgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//8JWYxg==") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x224401) 2.477403613s ago: executing program 0 (id=5): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r1, 0x0, 0x0) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000022c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) 1.25392244s ago: executing program 0 (id=6): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000300)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000340)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000380)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f00000003c0)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000500)='\x00', 0x1, 0x1e800c) r1 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 808.980556ms ago: executing program 0 (id=7): mbind(&(0x7f00000b8000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000240)=0x6, 0x100000000000000, 0x7) 667.368171ms ago: executing program 0 (id=8): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000580), 0x318, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newchain={0x2c, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32], 0x50) semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800420001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) 482.66409ms ago: executing program 1 (id=1): syz_mount_image$hfs(&(0x7f00000011c0), &(0x7f0000001300)='./file1\x00', 0x84, &(0x7f0000001340)=ANY=[], 0x8b, 0x2d5, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 382.664121ms ago: executing program 2 (id=3): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @initial, {0x6, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}}}]}, 0x50}}, 0x0) 36.540656ms ago: executing program 2 (id=9): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000084c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002c80)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x4e22, 0x5, 0x4e22, 0x7fff, 0xa, 0x20, 0x20, 0x58}, {0xfffffffffffffffb, 0x20003, 0x10, 0x4, 0x7, 0x7, 0xffffffff80000001, 0x7}, {0xffffffffffffffff, 0x572, 0x1, 0x6}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d6, 0x32}, 0xab11e6417b62bccf, @in=@private=0xa010102, 0x34ff, 0x4, 0x2, 0xb, 0x5, 0x5, 0x4de0}}, 0xe8) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) syz_mount_image$f2fs(&(0x7f0000000b40), &(0x7f0000000b80)='./bus\x00', 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0}, {@memory_low}, {@noquota}, {@inline_data}, {@data_flush}, {@discard_unit_segment}, {@prjjquota={'prjjquota', 0x3d, 'noquota'}}, {@noextent_cache}, {}, {@quota}, {@resgid}, {@disable_ext_identify}, {@jqfmt_vfsv1}, {@usrjquota={'usrjquota', 0x3d, '-)$-.%\'*,'}}]}, 0xfc, 0x5523, &(0x7f0000008600)="$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") 33.884487ms ago: executing program 1 (id=10): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 0s ago: executing program 3 (id=4): mq_open(0x0, 0x42, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$kcm(0x10, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) accept4$inet6(r0, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. [ 92.898027][ T5772] cgroup: Unknown subsys name 'net' [ 93.048805][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.221591][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.348660][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.366628][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.375685][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.396267][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.405386][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.413368][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.470184][ T56] cfg80211: failed to load regulatory.db [ 97.522810][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 97.560096][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.591488][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.594377][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.610841][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.624186][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.654369][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.667481][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.671469][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.694027][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.704168][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.713535][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.726802][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.736706][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.753326][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.782642][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.861025][ T5793] (null): rxe_set_mtu: Set mtu to 1024 [ 97.899339][ T5791] (null): rxe_set_mtu: Set mtu to 1024 [ 97.928268][ T5793] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.938627][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.956956][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.968062][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.976510][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.995346][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.008374][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.033633][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.267629][ T5802] (null): rxe_set_mtu: Set mtu to 1024 [ 98.273854][ T5802] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 98.374723][ T5786] infiniband rxe0: set active [ 98.392082][ T56] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.413421][ T5786] infiniband rxe0: added rxe_eth0 [ 98.519316][ T5786] RDS/IB: rxe0: added [ 98.525657][ T5786] smc: adding ib device rxe0 with port count 1 [ 98.534235][ T5786] smc: ib device rxe0 port 1 has pnetid [ 98.562211][ T5802] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.598038][ T56] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.749585][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 98.981800][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.040939][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 99.089849][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.106202][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.128593][ T5791] bridge_slave_0: entered allmulticast mode [ 99.157784][ T5791] bridge_slave_0: entered promiscuous mode [ 99.181691][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.207384][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.228381][ T5791] bridge_slave_1: entered allmulticast mode [ 99.249000][ T5791] bridge_slave_1: entered promiscuous mode [ 99.447047][ T52] Bluetooth: hci0: command tx timeout [ 99.473369][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.504375][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.570964][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.679570][ T5791] team0: Port device team_slave_0 added [ 99.761756][ T5791] team0: Port device team_slave_1 added [ 99.905410][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.914767][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.924067][ T5793] bridge_slave_0: entered allmulticast mode [ 99.937822][ T52] Bluetooth: hci2: command tx timeout [ 99.954704][ T5793] bridge_slave_0: entered promiscuous mode [ 99.972263][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.980050][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.011128][ T52] Bluetooth: hci1: command tx timeout [ 100.017379][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.038479][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.047680][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.055568][ T5793] bridge_slave_1: entered allmulticast mode [ 100.064039][ T5793] bridge_slave_1: entered promiscuous mode [ 100.079752][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.089114][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.121050][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.134043][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.166130][ T52] Bluetooth: hci3: command tx timeout [ 100.231750][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.252657][ T5791] hsr_slave_0: entered promiscuous mode [ 100.265021][ T5791] hsr_slave_1: entered promiscuous mode [ 100.287760][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.431064][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 100.459113][ T5793] team0: Port device team_slave_0 added [ 100.470640][ T5793] team0: Port device team_slave_1 added [ 100.634084][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.644732][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.673169][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.695690][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.703695][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.735818][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.869873][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.880204][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.888915][ T5802] bridge_slave_0: entered allmulticast mode [ 100.898868][ T5802] bridge_slave_0: entered promiscuous mode [ 100.910671][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.918771][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.928592][ T5802] bridge_slave_1: entered allmulticast mode [ 100.938051][ T5802] bridge_slave_1: entered promiscuous mode [ 101.071181][ T5793] hsr_slave_0: entered promiscuous mode [ 101.079361][ T5793] hsr_slave_1: entered promiscuous mode [ 101.087945][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.097338][ T5793] Cannot create hsr debugfs directory [ 101.123027][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.144969][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.195531][ T5802] team0: Port device team_slave_0 added [ 101.240783][ T5802] team0: Port device team_slave_1 added [ 101.313619][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.323757][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.359980][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.386289][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.394465][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.430958][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.485544][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.526370][ T52] Bluetooth: hci0: command tx timeout [ 101.539491][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.554973][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.570313][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.682881][ T5802] hsr_slave_0: entered promiscuous mode [ 101.690806][ T5802] hsr_slave_1: entered promiscuous mode [ 101.699663][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.712138][ T5802] Cannot create hsr debugfs directory [ 101.839655][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 102.007073][ T52] Bluetooth: hci2: command tx timeout [ 102.096954][ T52] Bluetooth: hci1: command tx timeout [ 102.191326][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.203057][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.212341][ T5786] bridge_slave_0: entered allmulticast mode [ 102.223513][ T5786] bridge_slave_0: entered promiscuous mode [ 102.232084][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.256342][ T52] Bluetooth: hci3: command tx timeout [ 102.263988][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.273794][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.284089][ T5786] bridge_slave_1: entered allmulticast mode [ 102.299659][ T5786] bridge_slave_1: entered promiscuous mode [ 102.337024][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.351673][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.370405][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.409149][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.454020][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.540224][ T5786] team0: Port device team_slave_0 added [ 102.581984][ T5786] team0: Port device team_slave_1 added [ 102.621182][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.670842][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.687842][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.702508][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.710150][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.741752][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.756859][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.765664][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.797732][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.827832][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.920112][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.937629][ T5786] hsr_slave_0: entered promiscuous mode [ 102.946691][ T5786] hsr_slave_1: entered promiscuous mode [ 102.955249][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.963887][ T5786] Cannot create hsr debugfs directory [ 103.185014][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.244257][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.253778][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.282377][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.291299][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.431022][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.440786][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.458319][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.471857][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.494563][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.551109][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.591949][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.609513][ T52] Bluetooth: hci0: command tx timeout [ 103.642358][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.652187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.715206][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.748846][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.756984][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.842437][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.850621][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.939664][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.947574][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.092318][ T52] Bluetooth: hci2: command tx timeout [ 104.141252][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.167026][ T52] Bluetooth: hci1: command tx timeout [ 104.324109][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.346145][ T52] Bluetooth: hci3: command tx timeout [ 104.394527][ T5791] veth0_vlan: entered promiscuous mode [ 104.482598][ T5791] veth1_vlan: entered promiscuous mode [ 104.522221][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.562801][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.574608][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.638190][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.647387][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.783899][ T5791] veth0_macvtap: entered promiscuous mode [ 104.798704][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.831956][ T5791] veth1_macvtap: entered promiscuous mode [ 104.851975][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.919744][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.953527][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.988783][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.001484][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.016622][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.032458][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.171767][ T5802] veth0_vlan: entered promiscuous mode [ 105.186851][ T5793] veth0_vlan: entered promiscuous mode [ 105.274808][ T5793] veth1_vlan: entered promiscuous mode [ 105.301089][ T5802] veth1_vlan: entered promiscuous mode [ 105.416323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.454334][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.524560][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.559304][ T5793] veth0_macvtap: entered promiscuous mode [ 105.573331][ T5802] veth0_macvtap: entered promiscuous mode [ 105.597508][ T5793] veth1_macvtap: entered promiscuous mode [ 105.608524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.620223][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.629657][ T5802] veth1_macvtap: entered promiscuous mode [ 105.687159][ T52] Bluetooth: hci0: command tx timeout [ 105.735357][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.751821][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.776731][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.794870][ T5791] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.852233][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.871785][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.897795][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.922221][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.939231][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.952458][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.965346][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.989573][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.014048][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.026473][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.038209][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.050404][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.073894][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.091399][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.105215][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.171285][ T52] Bluetooth: hci2: command tx timeout [ 106.177278][ T5877] syz.0.2[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 106.195095][ T5877] loop0: detected capacity change from 0 to 8 [ 106.386565][ T52] Bluetooth: hci1: command tx timeout [ 106.416735][ T52] Bluetooth: hci3: command tx timeout [ 106.512654][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.783204][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.154013][ T5802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.164214][ T5802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.176621][ T5802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.185504][ T5802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.304513][ T5786] veth0_vlan: entered promiscuous mode [ 107.374088][ T5786] veth1_vlan: entered promiscuous mode [ 107.922248][ T5786] veth0_macvtap: entered promiscuous mode [ 108.177717][ T5786] veth1_macvtap: entered promiscuous mode [ 108.217948][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.249832][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.369952][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.392658][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.396987][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.434090][ T5885] loop0: detected capacity change from 0 to 3904 [ 108.442012][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.466923][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.478662][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.490239][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.502819][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.514853][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.551801][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.555697][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.583210][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.598652][ T5885] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 108.611745][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.612616][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.635516][ T5885] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 108.649816][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.661592][ T5885] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 108.669318][ T5885] loop0: [ 108.672579][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.706002][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.734162][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.811370][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.830461][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.840171][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.849280][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.874706][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.892215][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.174534][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.222938][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.243197][ T5892] loop1: detected capacity change from 0 to 64 [ 109.372806][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.403178][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.471327][ T5892] hfs: hfs: Invalid key length: 94 [ 109.580964][ T3485] ------------[ cut here ]------------ [ 109.588070][ T3485] kernel BUG at fs/hfs/inode.c:446! [ 109.626209][ T3485] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 109.632398][ T3485] CPU: 0 PID: 3485 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 109.640509][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.651905][ T3485] Workqueue: writeback wb_workfn (flush-7:1) [ 109.658008][ T3485] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 109.663723][ T3485] Code: c7 c1 00 d3 36 98 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 d3 36 98 e8 6f e3 83 ff e9 5e fe ff ff e8 15 de 2a ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 109.684093][ T3485] RSP: 0018:ffffc9000c9cf340 EFLAGS: 00010293 [ 109.690215][ T3485] RAX: ffffffff825cf5cb RBX: ffff888021d00dd8 RCX: ffff88802fb15a00 [ 109.698274][ T3485] RDX: 0000000000000000 RSI: ffffffff8e339d40 RDI: 0000000000000000 [ 109.706571][ T3485] RBP: ffffc9000c9cf4d0 R08: ffff88802fb15a00 R09: 0000000000000003 [ 109.714581][ T3485] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 109.722778][ T3485] R13: 1ffff92001939e6c R14: ffff888021d00d88 R15: 0000000000000000 [ 109.731110][ T3485] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 109.740354][ T3485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.747405][ T3485] CR2: 00007ffd2dce3940 CR3: 0000000064069000 CR4: 00000000003506f0 [ 109.755525][ T3485] Call Trace: [ 109.758841][ T3485] [ 109.761803][ T3485] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 109.767244][ T3485] ? __rwlock_init+0x150/0x150 [ 109.772262][ T3485] __writeback_single_inode+0x720/0xee0 [ 109.778121][ T3485] writeback_sb_inodes+0x813/0x1020 [ 109.783399][ T3485] ? queue_io+0x530/0x530 [ 109.787755][ T3485] ? move_expired_inodes+0x726/0x770 [ 109.793211][ T3485] ? rcu_is_watching+0x15/0xb0 [ 109.798152][ T3485] ? queue_io+0x3ba/0x530 [ 109.802687][ T3485] wb_writeback+0x45e/0xbe0 [ 109.807832][ T3485] ? queue_io+0x321/0x530 [ 109.812198][ T3485] ? percpu_ref_tryget+0x250/0x250 [ 109.817613][ T3485] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.823946][ T3485] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.829077][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.834317][ T3485] wb_workfn+0x400/0xe60 [ 109.838811][ T3485] ? inode_wait_for_writeback+0x230/0x230 [ 109.845222][ T3485] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.851426][ T3485] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.856845][ T3485] ? read_lock_is_recursive+0x20/0x20 [ 109.863434][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.868725][ T3485] ? process_scheduled_works+0x975/0x1600 [ 109.876235][ T3485] ? process_scheduled_works+0x975/0x1600 [ 109.882706][ T3485] process_scheduled_works+0xa60/0x1600 [ 109.888518][ T3485] ? worker_attach_to_pool+0x370/0x370 [ 109.894922][ T3485] ? assign_work+0x3cc/0x5d0 [ 109.900993][ T3485] worker_thread+0xa5e/0xfe0 [ 109.905684][ T3485] kthread+0x2fa/0x390 [ 109.910088][ T3485] ? pr_cont_work+0x550/0x550 [ 109.915644][ T3485] ? kthread_blkcg+0xd0/0xd0 [ 109.920299][ T3485] ret_from_fork+0x48/0x80 [ 109.924857][ T3485] ? kthread_blkcg+0xd0/0xd0 [ 109.931951][ T3485] ret_from_fork_asm+0x11/0x20 [ 109.936956][ T3485] [ 109.940043][ T3485] Modules linked in: [ 109.993490][ T3485] ---[ end trace 0000000000000000 ]--- [ 110.002028][ T3485] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 110.078708][ T3485] Code: c7 c1 00 d3 36 98 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 d3 36 98 e8 6f e3 83 ff e9 5e fe ff ff e8 15 de 2a ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 110.108208][ T3485] RSP: 0018:ffffc9000c9cf340 EFLAGS: 00010293 [ 110.114543][ T3485] RAX: ffffffff825cf5cb RBX: ffff888021d00dd8 RCX: ffff88802fb15a00 [ 110.128744][ T3485] RDX: 0000000000000000 RSI: ffffffff8e339d40 RDI: 0000000000000000 [ 110.137227][ T3485] RBP: ffffc9000c9cf4d0 R08: ffff88802fb15a00 R09: 0000000000000003 [ 110.149575][ T3485] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 110.158225][ T3485] R13: 1ffff92001939e6c R14: ffff888021d00d88 R15: 0000000000000000 [ 110.170639][ T3485] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 110.188230][ T3485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.195364][ T3485] CR2: 00007fd1b5bf62f8 CR3: 000000007e9b3000 CR4: 00000000003506e0 [ 110.204941][ T3485] Kernel panic - not syncing: Fatal exception [ 110.211490][ T3485] Kernel Offset: disabled [ 110.216355][ T3485] Rebooting in 86400 seconds..