last executing test programs:

0s ago: executing program 1 (id=2):
r0 = syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8, @ANYBLOB="0f7e998cc1ac58617ce1fbb6376c77c41a1a96b4da7f665ab0ba10e31828f922d42984ff743aac0de669573cb8490d9622b55de7abb7777c2c5473a9b854b8f54eb00eaf004cb9065dc006f418a81d78f32c142c339a6153e387b37cc066c279ec19836cafe0082c2c47d464ed86915b009ccddd71b99513c218ea2cdf784e4dd085c94749052a82fa29778594c24d47b723ecfba4c79e7a22f04cade3acdf", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="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"/497, @ANYRESHEX=0x0, @ANYRES32], 0xfd, 0x1ee, &(0x7f00000003c0)="$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")
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r3, &(0x7f0000000940)='R', 0x1, 0x4fed3)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}, {0xa, 0x4e23, 0x200, @private2, 0x80c7}, r4, 0x7}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4, 0x9}}, 0x10)
mount$bind(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x82020, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
ioctl$FIOCLEX(r0, 0x5451)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12042' (ED25519) to the list of known hosts.
syzkaller login: [   56.547689][ T5811] cgroup: Unknown subsys name 'net'
[   56.669649][ T5811] cgroup: Unknown subsys name 'cpuset'
[   56.676437][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.842824][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.672379][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.676243][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.680174][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.684649][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.687313][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.691247][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.697057][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.702413][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.738284][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.745901][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.794077][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.797870][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.801422][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.806523][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.812886][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.019544][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   65.095502][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.201199][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.204420][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.206877][ T5857] bridge_slave_0: entered allmulticast mode
[   65.209883][ T5857] bridge_slave_0: entered promiscuous mode
[   65.232865][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.235626][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.238350][ T5857] bridge_slave_1: entered allmulticast mode
[   65.241206][ T5857] bridge_slave_1: entered promiscuous mode
[   65.245189][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.247887][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.250703][ T5855] bridge_slave_0: entered allmulticast mode
[   65.255513][ T5855] bridge_slave_0: entered promiscuous mode
[   65.259830][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.262439][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.265738][ T5855] bridge_slave_1: entered allmulticast mode
[   65.269003][ T5855] bridge_slave_1: entered promiscuous mode
[   65.303927][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   65.331500][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.356268][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.362435][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.389168][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.423104][ T5857] team0: Port device team_slave_0 added
[   65.435714][ T5857] team0: Port device team_slave_1 added
[   65.438868][ T5855] team0: Port device team_slave_0 added
[   65.451726][ T5855] team0: Port device team_slave_1 added
[   65.497209][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.500019][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.510792][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.516608][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.519365][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.529862][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.535428][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.538448][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.541459][ T5866] bridge_slave_0: entered allmulticast mode
[   65.546154][ T5866] bridge_slave_0: entered promiscuous mode
[   65.550712][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.556583][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.559616][ T5866] bridge_slave_1: entered allmulticast mode
[   65.563999][ T5866] bridge_slave_1: entered promiscuous mode
[   65.575902][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.578661][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.587267][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.629711][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.632317][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.642148][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.665993][ T5857] hsr_slave_0: entered promiscuous mode
[   65.669174][ T5857] hsr_slave_1: entered promiscuous mode
[   65.686276][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.699779][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.772528][ T5866] team0: Port device team_slave_0 added
[   65.777463][ T5866] team0: Port device team_slave_1 added
[   65.832171][ T5855] hsr_slave_0: entered promiscuous mode
[   65.836436][ T5855] hsr_slave_1: entered promiscuous mode
[   65.839304][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.841649][ T5855] Cannot create hsr debugfs directory
[   65.848646][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.850996][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.860831][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.896864][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.899624][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.911442][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.039755][ T5866] hsr_slave_0: entered promiscuous mode
[   66.042962][ T5866] hsr_slave_1: entered promiscuous mode
[   66.047679][ T5866] debugfs: 'hsr0' already exists in 'hsr'
[   66.050018][ T5866] Cannot create hsr debugfs directory
[   66.240979][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.270119][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.279682][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.309168][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.384086][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.395438][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.405995][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.427981][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.492489][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.499858][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.516241][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.523953][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.543081][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.589291][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   66.610652][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.613901][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.630593][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.633482][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.717937][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.759259][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   66.766281][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.796526][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.799441][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.802954][ T5861] Bluetooth: hci0: command tx timeout
[   66.806592][ T5861] Bluetooth: hci1: command tx timeout
[   66.829702][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.832585][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.848094][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   66.881905][ T5861] Bluetooth: hci2: command tx timeout
[   66.885237][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.888110][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.892751][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.895112][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.945144][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.959076][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.047014][ T5857] veth0_vlan: entered promiscuous mode
[   67.068178][ T5857] veth1_vlan: entered promiscuous mode
[   67.121670][ T5857] veth0_macvtap: entered promiscuous mode
[   67.130706][ T5857] veth1_macvtap: entered promiscuous mode
[   67.146170][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.158425][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.181291][ T5888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.188165][ T5888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.192013][ T5888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.201728][ T5888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.259383][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.266025][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.310472][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.323033][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.358238][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.361438][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.395544][ T5866] veth0_vlan: entered promiscuous mode
[   67.402151][ T5866] veth1_vlan: entered promiscuous mode
[   67.414231][ T5855] veth0_vlan: entered promiscuous mode
[   67.432205][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.434185][ T5855] veth1_vlan: entered promiscuous mode
[   67.494811][ T5866] veth0_macvtap: entered promiscuous mode
[   67.507627][ T5866] veth1_macvtap: entered promiscuous mode
[   67.525911][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.530410][ T5855] veth0_macvtap: entered promiscuous mode
[   67.537880][ T5923] loop1: detected capacity change from 0 to 8
[   67.539650][ T5855] veth1_macvtap: entered promiscuous mode
[   67.549544][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.566738][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.570388][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.576623][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.579426][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.587653][ T5923] SQUASHFS error: Failed to read block 0x6e6: -5
[   67.590268][ T5923] SQUASHFS error: Unable to read metadata cache entry [6e4]
[   67.591381][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.593104][ T5923] SQUASHFS error: Unable to read directory block [631:26]
[   67.603741][ T5923] SQUASHFS error: Unable to read metadata cache entry [6e4]
[   67.610024][ T5923] SQUASHFS error: Unable to read directory block [631:26]
[   67.613105][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.624136][ T5923] VFS_BUG_ON_INODE(!IS_ANON_FILE(inode)) encountered for inode ffff88810a200b38
[   67.624291][ T5923] ------------[ cut here ]------------
[   67.630404][ T5923] kernel BUG at fs/namei.c:3474!
[   67.632404][ T5923] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   67.635479][ T5923] CPU: 1 UID: 0 PID: 5923 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) 
[   67.639561][ T5923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.643554][ T5923] RIP: 0010:may_open+0x4b1/0x4c0
[   67.645568][ T5923] Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 d9 c3 eb ff e9 11 fd ff ff e8 5f 51 88 ff 4c 89 f7 48 c7 c6 c0 54 99 8b e8 d0 c5 f0 fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[   67.653107][ T5923] RSP: 0018:ffffc9000393f940 EFLAGS: 00010246
[   67.655538][ T5923] RAX: 000000000000004d RBX: dffffc0000000000 RCX: 3b20d6711795f300
[   67.658681][ T5923] RDX: ffffc900083ca000 RSI: 000000000000077d RDI: 000000000000077e
[   67.661755][ T5923] RBP: 0000000000008042 R08: ffff888136624253 R09: 1ffff11026cc484a
[   67.664936][ T5923] R10: dffffc0000000000 R11: ffffed1026cc484b R12: 0000000000000000
[   67.668058][ T5923] R13: ffffffff8e296860 R14: ffff88810a200b38 R15: 0000000000000006
[   67.671192][ T5923] FS:  00007f84cb9826c0(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[   67.674652][ T5923] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   67.677244][ T5923] CR2: 00007f84cab733a0 CR3: 00000001078b0000 CR4: 00000000000006f0
[   67.680370][ T5923] Call Trace:
[   67.681701][ T5923]  <TASK>
[   67.682889][ T5923]  path_openat+0x2d91/0x3830
[   67.684699][ T5923]  ? arch_stack_walk+0xfc/0x150
[   67.686555][ T5923]  ? __pfx_path_openat+0x10/0x10
[   67.688578][ T5923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.691008][ T5923]  do_filp_open+0x1fa/0x410
[   67.692781][ T5923]  ? __lock_acquire+0xab9/0xd20
[   67.694700][ T5923]  ? __pfx_do_filp_open+0x10/0x10
[   67.696750][ T5923]  ? _raw_spin_unlock+0x28/0x50
[   67.698642][ T5923]  ? alloc_fd+0x64c/0x6c0
[   67.700360][ T5923]  do_sys_openat2+0x121/0x1c0
[   67.702241][ T5923]  ? __se_sys_futex+0x36f/0x400
[   67.704192][ T5923]  ? __pfx_do_sys_openat2+0x10/0x10
[   67.706218][ T5923]  ? __pfx___se_sys_futex+0x10/0x10
[   67.708294][ T5923]  ? __pfx___se_sys_mount+0x10/0x10
[   67.710397][ T5923]  ? rcu_is_watching+0x15/0xb0
[   67.712266][ T5923]  __x64_sys_openat+0x138/0x170
[   67.714128][ T5923]  do_syscall_64+0xfa/0x3b0
[   67.715922][ T5923]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.717997][ T5923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.720344][ T5923]  ? exc_page_fault+0x9f/0xf0
[   67.722237][ T5923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.724537][ T5923] RIP: 0033:0x7f84cab8eba9
[   67.726292][ T5923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.733626][ T5923] RSP: 002b:00007f84cb982038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   67.736977][ T5923] RAX: ffffffffffffffda RBX: 00007f84cadd5fa0 RCX: 00007f84cab8eba9
[   67.739658][ T5923] RDX: 0000000000000042 RSI: 0000200000000240 RDI: ffffffffffffff9c
[   67.742388][ T5923] RBP: 00007f84cac11e19 R08: 0000000000000000 R09: 0000000000000000
[   67.744971][ T5923] R10: 0000000000000085 R11: 0000000000000246 R12: 0000000000000000
[   67.748007][ T5923] R13: 00007f84cadd6038 R14: 00007f84cadd5fa0 R15: 00007ffff0a55eb8
[   67.751167][ T5923]  </TASK>
[   67.752428][ T5923] Modules linked in:
[   67.755040][ T5923] ---[ end trace 0000000000000000 ]---
[   67.762723][ T5887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.764101][ T5923] RIP: 0010:may_open+0x4b1/0x4c0
[   67.768071][ T5923] Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 d9 c3 eb ff e9 11 fd ff ff e8 5f 51 88 ff 4c 89 f7 48 c7 c6 c0 54 99 8b e8 d0 c5 f0 fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[   67.774830][ T5887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.774952][ T5887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.775062][ T5887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.778882][ T5923] RSP: 0018:ffffc9000393f940 EFLAGS: 00010246
[   67.791029][ T5923] RAX: 000000000000004d RBX: dffffc0000000000 RCX: 3b20d6711795f300
[   67.794571][ T5923] RDX: ffffc900083ca000 RSI: 000000000000077d RDI: 000000000000077e
[   67.797854][ T5923] RBP: 0000000000008042 R08: ffff888136624253 R09: 1ffff11026cc484a
[   67.805139][ T5923] R10: dffffc0000000000 R11: ffffed1026cc484b R12: 0000000000000000
[   67.809945][ T5923] R13: ffffffff8e296860 R14: ffff88810a200b38 R15: 0000000000000006
[   67.812632][ T5923] FS:  00007f84cb9826c0(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[   67.814616][ T5866] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
[   67.816530][ T5923] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   67.820828][ T5923] CR2: 00005564ef408078 CR3: 00000001078b0000 CR4: 00000000000006f0
[   67.823867][ T5923] Kernel panic - not syncing: Fatal exception
[   67.826432][ T5923] Kernel Offset: disabled
[   67.827889][ T5923] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:43:45  Registers:
info registers vcpu 0

CPU#0
RAX=000000002b767961 RBX=000000002fbae705 RCX=000000001e6d4885 RDX=0000000058e80bc2
RSI=000000009336b706 RDI=0000000014ee4a7b RBP=ffffc90006fa7410 RSP=ffffc90006fa71c0
R8 =00000000236bb60e R9 =000000005ea86060 R10=00000000f9b68e2e R11=00000000b25f22f2
R12=00000000dfb4b5ac R13=00000000cc4937a3 R14=0000000058e80bc2 R15=00000000a4fc652a
RIP=ffffffff84caa2ce RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32fea0 CR3=0000000110b04000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000ff000000ff00 0000ff000000ff00
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000ff00000000 ff000000ff000000 XMM05=0000000000000000 00007fa917a12e53
XMM06=0000000000000000 00007fa917a12e4d XMM07=0000000000000000 00007fa917a12e61
XMM08=0000000000000000 00007fa917a12ee7 XMM09=0000000000000000 00007fa917a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000004ff0 RDI=0000000000004ff1 RBP=00000000000003f8 RSP=ffffc9000393f050
R8 =ffff888108a98237 R9 =1ffff11021153046 R10=dffffc0000000000 R11=ffffffff854fd130
R12=dffffc0000000000 R13=ffffffff99b008cf R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854fd1ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f84cb9826c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f84cab733a0 CR3=00000001078b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=0101010101010101 0000000000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ffff XMM05=0000000000000000 00007f84cb9816e0
XMM06=00007f84cb9816e0 00007f84cb981560 XMM07=00007f84cb9815a0 00007f84cb981580
XMM08=3d4916e9ffff0000 3bf04ff8f0f0f0f0 XMM09=0000000000000000 00007f84cac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
