last executing test programs: 4.160563014s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.053234285s ago: executing program 1 (id=5): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') ftruncate(r0, 0x3) 421.5599ms ago: executing program 0 (id=1): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, 0x0, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000000)={@link_local={0x3}, @random="0633d825765e", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, 'K$'}}}}}, 0x0) timerfd_create(0x0, 0x80000) close_range(r1, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r7, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) connect$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) 0s ago: executing program 2 (id=3): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) time(&(0x7f0000000340)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0xaf9, 0x5, 0x0, 'queue1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000040)={0x0, 0x3, 0x0, {0x0, 0x1}, 0x52, 0x10009}) r3 = mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) fcntl$setstatus(r3, 0x4, 0x4c00) writev(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x122, @tick=0x7, 0x0, {}, 0xfc, 0x0, 0x8}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 72.993229][ T5760] cgroup: Unknown subsys name 'net' [ 73.122317][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.613662][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.028835][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.037553][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.045225][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.054352][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.062743][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.067832][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.077945][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.085694][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.092947][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.101094][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.108508][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.109385][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.123293][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.124237][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.137825][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.145839][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.146893][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.160503][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.161049][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.174748][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.175458][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.186531][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.190315][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.196356][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.622107][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.689509][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.739146][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 76.768557][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 76.814306][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.822358][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.830382][ T5773] bridge_slave_0: entered allmulticast mode [ 76.837458][ T5773] bridge_slave_0: entered promiscuous mode [ 76.880790][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.888118][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.895236][ T5773] bridge_slave_1: entered allmulticast mode [ 76.902099][ T5773] bridge_slave_1: entered promiscuous mode [ 76.972418][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.010982][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.018258][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.025366][ T5772] bridge_slave_0: entered allmulticast mode [ 77.034483][ T5772] bridge_slave_0: entered promiscuous mode [ 77.042323][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.049871][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.057104][ T5772] bridge_slave_1: entered allmulticast mode [ 77.064842][ T5772] bridge_slave_1: entered promiscuous mode [ 77.072876][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.100726][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.107987][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.115168][ T5774] bridge_slave_0: entered allmulticast mode [ 77.122178][ T5774] bridge_slave_0: entered promiscuous mode [ 77.147334][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.154761][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.162062][ T5771] bridge_slave_0: entered allmulticast mode [ 77.168811][ T5771] bridge_slave_0: entered promiscuous mode [ 77.175701][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.183045][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.190672][ T5774] bridge_slave_1: entered allmulticast mode [ 77.197382][ T5774] bridge_slave_1: entered promiscuous mode [ 77.214098][ T5773] team0: Port device team_slave_0 added [ 77.220980][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.228252][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.235453][ T5771] bridge_slave_1: entered allmulticast mode [ 77.242821][ T5771] bridge_slave_1: entered promiscuous mode [ 77.261631][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.272665][ T5773] team0: Port device team_slave_1 added [ 77.306947][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.335626][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.348423][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.373394][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.384139][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.397751][ T5772] team0: Port device team_slave_0 added [ 77.404585][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.411876][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.438235][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.471658][ T5772] team0: Port device team_slave_1 added [ 77.488764][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.495729][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.521855][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.550803][ T5771] team0: Port device team_slave_0 added [ 77.574813][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.581951][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.607960][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.630196][ T5771] team0: Port device team_slave_1 added [ 77.638348][ T5774] team0: Port device team_slave_0 added [ 77.655409][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.664239][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.690390][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.729120][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.736275][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.762294][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.775219][ T5774] team0: Port device team_slave_1 added [ 77.800373][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.807541][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.834252][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.883492][ T5772] hsr_slave_0: entered promiscuous mode [ 77.889863][ T5772] hsr_slave_1: entered promiscuous mode [ 77.921433][ T5773] hsr_slave_0: entered promiscuous mode [ 77.927643][ T5773] hsr_slave_1: entered promiscuous mode [ 77.933656][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.942222][ T5773] Cannot create hsr debugfs directory [ 77.963811][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.970999][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.999716][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.013726][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.023128][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.051526][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.065774][ T5771] hsr_slave_0: entered promiscuous mode [ 78.072325][ T5771] hsr_slave_1: entered promiscuous mode [ 78.078836][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.086468][ T5771] Cannot create hsr debugfs directory [ 78.270748][ T5774] hsr_slave_0: entered promiscuous mode [ 78.277065][ T5774] hsr_slave_1: entered promiscuous mode [ 78.283171][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.287129][ T5084] Bluetooth: hci3: command tx timeout [ 78.290849][ T51] Bluetooth: hci2: command tx timeout [ 78.296553][ T5084] Bluetooth: hci0: command tx timeout [ 78.302047][ T5782] Bluetooth: hci1: command tx timeout [ 78.313140][ T5774] Cannot create hsr debugfs directory [ 78.512000][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.535893][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.546864][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.569205][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.629385][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.647203][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.668697][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.691868][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.729489][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.744493][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.755344][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.788205][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.854729][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.879401][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.890049][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.910898][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.971463][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.010730][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.038117][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.045370][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.073294][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.080478][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.111188][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.155988][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.169978][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.177150][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.195639][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.226851][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.233949][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.250177][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.283190][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.290331][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.330829][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.349000][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.356226][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.461325][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.509732][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.516940][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.547603][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.554738][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.752571][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.883040][ T5772] veth0_vlan: entered promiscuous mode [ 79.909617][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.938447][ T5772] veth1_vlan: entered promiscuous mode [ 79.968491][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.049287][ T5772] veth0_macvtap: entered promiscuous mode [ 80.067235][ T5772] veth1_macvtap: entered promiscuous mode [ 80.097417][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.140064][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.154158][ T5773] veth0_vlan: entered promiscuous mode [ 80.163325][ T5771] veth0_vlan: entered promiscuous mode [ 80.172812][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.184552][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.195586][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.204476][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.213885][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.243063][ T5771] veth1_vlan: entered promiscuous mode [ 80.252196][ T5773] veth1_vlan: entered promiscuous mode [ 80.367530][ T51] Bluetooth: hci2: command tx timeout [ 80.372984][ T51] Bluetooth: hci1: command tx timeout [ 80.376963][ T5084] Bluetooth: hci3: command tx timeout [ 80.381838][ T5774] veth0_vlan: entered promiscuous mode [ 80.384181][ T5782] Bluetooth: hci0: command tx timeout [ 80.414166][ T5771] veth0_macvtap: entered promiscuous mode [ 80.424667][ T5771] veth1_macvtap: entered promiscuous mode [ 80.426674][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.452543][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.469149][ T5773] veth0_macvtap: entered promiscuous mode [ 80.482776][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.494254][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.506515][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.535678][ T5774] veth1_vlan: entered promiscuous mode [ 80.548766][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.560355][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.571757][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.581298][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.590830][ T5773] veth1_macvtap: entered promiscuous mode [ 80.597086][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.619772][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.629664][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.641756][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.650944][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.713981][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.734513][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.746415][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.761410][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.775282][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.813137][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.823942][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.838071][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.853848][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.867688][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.246465][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.315074][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.401805][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.494866][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.825333][ T5774] veth0_macvtap: entered promiscuous mode [ 82.259611][ T5774] veth1_macvtap: entered promiscuous mode [ 82.395544][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.447307][ T5782] Bluetooth: hci0: command tx timeout [ 82.452760][ T5084] Bluetooth: hci3: command tx timeout [ 82.454456][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.458480][ T5084] Bluetooth: hci1: command tx timeout [ 82.458558][ T5084] Bluetooth: hci2: command tx timeout [ 83.923247][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.951423][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.967059][ T5845] syz.1.5[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.967310][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.988372][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.002272][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.008035][ T5845] loop1: detected capacity change from 0 to 1024 [ 84.022178][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.033910][ T5845] ======================================================= [ 84.033910][ T5845] WARNING: The mand mount option has been deprecated and [ 84.033910][ T5845] and is ignored by this kernel. Remove the mand [ 84.033910][ T5845] option from the mount to silence this warning. [ 84.033910][ T5845] ======================================================= [ 84.049554][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.088330][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.102558][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.110132][ T5845] EXT4-fs: Ignoring removed bh option [ 84.180666][ T5845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.222817][ T5845] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.227590][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.287420][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.297521][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.308002][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.317900][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.329049][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.340858][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.352872][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.361798][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.377454][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.392215][ T5845] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 3) [ 84.406954][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.441305][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.465451][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.471330][ T5845] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 84.521268][ T5845] EXT4-fs (loop1): This should not happen!! Data will be lost [ 84.521268][ T5845] [ 84.532636][ T5786] Bluetooth: hci0: command tx timeout [ 84.532675][ T5084] Bluetooth: hci1: command tx timeout [ 84.538300][ T5786] Bluetooth: hci3: command tx timeout [ 84.543446][ T5782] Bluetooth: hci2: command tx timeout [ 84.576419][ T5849] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.593834][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.614154][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.614838][ T5849] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.647403][ T5851] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 84.647926][ T5849] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.675694][ T5849] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.693700][ T5849] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.713296][ T5849] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.728767][ T5849] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.757249][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.789095][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.798453][ T5843] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.821554][ T5843] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.5: lblock 3 mapped to illegal pblock 3 (length 1) [ 84.861945][ T5852] ------------[ cut here ]------------ [ 84.867508][ T5852] kernel BUG at net/phonet/socket.c:213! [ 84.877577][ T5852] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 84.883702][ T5852] CPU: 0 PID: 5852 Comm: syz.0.1 Not tainted syzkaller #0 [ 84.890828][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 84.900895][ T5852] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 84.906664][ T5852] Code: 41 5f 5d c3 e8 9c d2 ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 55 68 1e f8 e9 02 ff ff ff e8 ab f0 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 84.914822][ T5853] ------------[ cut here ]------------ [ 84.926268][ T5852] RSP: 0018:ffffc90004a8fc20 EFLAGS: 00010283 [ 84.926290][ T5852] RAX: ffffffff89c0f4c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 84.926302][ T5852] RDX: ffffc9000ddfe000 RSI: 0000000000000a22 RDI: 0000000000000a23 [ 84.926313][ T5852] RBP: ffffc90004a8fcd0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 84.926326][ T5852] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000 [ 84.926338][ T5852] R13: ffff88807794a400 R14: ffff888025448c80 R15: 1ffff92000951f88 [ 84.926352][ T5852] FS: 00007f826ddd56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 84.926368][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.926381][ T5852] CR2: 0000001b2da0dff8 CR3: 000000005e72e000 CR4: 00000000003506f0 [ 84.926399][ T5852] Call Trace: [ 84.926405][ T5852] [ 84.926414][ T5852] ? pn_socket_ioctl+0x350/0x350 [ 84.926447][ T5852] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 84.926470][ T5852] ? security_socket_sendmsg+0x80/0xa0 [ 84.926498][ T5852] __sys_sendto+0x4a9/0x6b0 [ 84.926526][ T5852] ? __ia32_sys_getpeername+0x90/0x90 [ 84.926552][ T5852] ? __lock_acquire+0x7d80/0x7d80 [ 84.931995][ T5853] kernel BUG at net/phonet/socket.c:213! [ 84.938048][ T5852] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 84.938076][ T5852] ? lock_chain_count+0x20/0x20 [ 84.938094][ T5852] ? lock_chain_count+0x20/0x20 [ 84.938112][ T5852] __x64_sys_sendto+0xde/0xf0 [ 84.938139][ T5852] do_syscall_64+0x55/0xb0 [ 84.938164][ T5852] ? clear_bhb_loop+0x40/0x90 [ 84.938181][ T5852] ? clear_bhb_loop+0x40/0x90 [ 84.938199][ T5852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.938223][ T5852] RIP: 0033:0x7f826fb5e68e [ 84.938240][ T5852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.938254][ T5852] RSP: 002b:00007f826ddd3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 84.938274][ T5852] RAX: ffffffffffffffda RBX: 00007f826ddd56c0 RCX: 00007f826fb5e68e [ 84.938288][ T5852] RDX: 0000000000000020 RSI: 00007f826ddd4000 RDI: 0000000000000007 [ 84.938302][ T5852] RBP: 0000000000000000 R08: 00007f826ddd3f04 R09: 000000000000000c [ 84.938313][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 84.938326][ T5852] R13: 00007f826ddd3f58 R14: 00007f826ddd4000 R15: 0000000000000000 [ 84.938346][ T5852] [ 84.938362][ T5852] Modules linked in: [ 84.995706][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.057906][ T5852] ---[ end trace 0000000000000000 ]--- [ 85.104446][ T5853] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 85.119908][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.127686][ T5853] CPU: 0 PID: 5853 Comm: syz.0.1 Tainted: G D syzkaller #0 [ 85.127706][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 85.127716][ T5853] RIP: 0010:pn_socket_connect+0xb98/0xba0 [ 85.127748][ T5853] Code: 48 8b 7c 24 10 e9 6b fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 1a fd ff ff 4c 89 e7 e8 92 5c 1e f8 e9 0d fd ff ff e8 08 e5 c5 f7 <0f> 0b 66 0f 1f 44 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 [ 85.236939][ T5853] RSP: 0018:ffffc90004aafc40 EFLAGS: 00010287 [ 85.243008][ T5853] RAX: ffffffff89c10068 RBX: 0000000000000000 RCX: 0000000000080000 [ 85.251031][ T5853] RDX: ffffc9000ea01000 RSI: 000000000000003b RDI: 000000000000003c [ 85.258999][ T5853] RBP: ffffc90004aafdb0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 85.266966][ T5853] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff88807794a418 [ 85.274933][ T5853] R13: 1ffff92000955f98 R14: dffffc0000000000 R15: 1ffff1100ef29483 [ 85.282898][ T5853] FS: 00007f826ddb46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 85.291823][ T5853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.298400][ T5853] CR2: 00007f8b43227dac CR3: 000000005e72e000 CR4: 00000000003506f0 [ 85.306370][ T5853] Call Trace: [ 85.309655][ T5853] [ 85.312589][ T5853] ? __might_sleep+0xe0/0xe0 [ 85.317183][ T5853] ? pn_socket_sendmsg+0x240/0x240 [ 85.322302][ T5853] ? aa_af_perm+0x330/0x330 [ 85.326804][ T5853] ? tomoyo_socket_connect_permission+0x19a/0x270 [ 85.333220][ T5853] ? __might_fault+0xaa/0x120 [ 85.338065][ T5853] ? bpf_lsm_socket_connect+0x9/0x10 [ 85.343350][ T5853] ? security_socket_connect+0x80/0xa0 [ 85.348811][ T5853] __sys_connect+0x3da/0x470 [ 85.353404][ T5853] ? __sys_connect_file+0x170/0x170 [ 85.358622][ T5853] __x64_sys_connect+0x7a/0x90 [ 85.363477][ T5853] do_syscall_64+0x55/0xb0 [ 85.367898][ T5853] ? clear_bhb_loop+0x40/0x90 [ 85.372567][ T5853] ? clear_bhb_loop+0x40/0x90 [ 85.377237][ T5853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.383132][ T5853] RIP: 0033:0x7f826fb9de59 [ 85.387545][ T5853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.407151][ T5853] RSP: 002b:00007f826ddb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 85.415566][ T5853] RAX: ffffffffffffffda RBX: 00007f826fe26180 RCX: 00007f826fb9de59 [ 85.423557][ T5853] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007 [ 85.431529][ T5853] RBP: 00007f826fc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 85.439529][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.447495][ T5853] R13: 00007f826fe26218 R14: 00007f826fe26180 R15: 00007ffc30ed4a48 [ 85.455468][ T5853] [ 85.458479][ T5853] Modules linked in: [ 85.468606][ T5853] ---[ end trace 0000000000000000 ]--- [ 85.474348][ T5853] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 85.480179][ T5853] Code: 41 5f 5d c3 e8 9c d2 ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 55 68 1e f8 e9 02 ff ff ff e8 ab f0 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 85.505477][ T5853] RSP: 0018:ffffc90004a8fc20 EFLAGS: 00010283 [ 85.512638][ T5853] RAX: ffffffff89c0f4c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 85.521626][ T5853] RDX: ffffc9000ddfe000 RSI: 0000000000000a22 RDI: 0000000000000a23 [ 85.533906][ T5853] RBP: ffffc90004a8fcd0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 85.573450][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.638012][ T5853] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000 [ 85.638239][ T5852] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 85.724644][ T5852] Code: 41 5f 5d c3 e8 9c d2 ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 55 68 1e f8 e9 02 ff ff ff e8 ab f0 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 86.120793][ T5853] R13: ffff88807794a400 R14: ffff888025448c80 R15: 1ffff92000951f88 [ 86.196185][ T5852] RSP: 0018:ffffc90004a8fc20 EFLAGS: 00010283 [ 86.202412][ T5852] RAX: ffffffff89c0f4c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 86.211551][ T5852] RDX: ffffc9000ddfe000 RSI: 0000000000000a22 RDI: 0000000000000a23 [ 86.219821][ T5852] RBP: ffffc90004a8fcd0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 86.228092][ T5852] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000 [ 86.236342][ T5852] R13: ffff88807794a400 R14: ffff888025448c80 R15: 1ffff92000951f88 [ 86.244500][ T5852] FS: 00007f826ddd56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 86.252184][ T5853] FS: 00007f826ddb46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 86.253673][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.269983][ T5852] CR2: 0000200000006000 CR3: 000000005e72e000 CR4: 00000000003506f0 [ 86.278122][ T5852] Kernel panic - not syncing: Fatal exception [ 86.284338][ T5852] Kernel Offset: disabled [ 86.288654][ T5852] Rebooting in 86400 seconds..