Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. 2026/05/23 15:49:12 parsed 1 programs [ 24.881576][ T30] audit: type=1400 audit(1779551352.132:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.902959][ T30] audit: type=1400 audit(1779551352.132:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.854284][ T30] audit: type=1400 audit(1779551353.102:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.858050][ T299] cgroup: Unknown subsys name 'net' [ 25.877469][ T30] audit: type=1400 audit(1779551353.102:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.904733][ T30] audit: type=1400 audit(1779551353.132:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.905275][ T299] cgroup: Unknown subsys name 'devices' [ 26.080071][ T299] cgroup: Unknown subsys name 'hugetlb' [ 26.086324][ T299] cgroup: Unknown subsys name 'rlimit' [ 26.264748][ T30] audit: type=1400 audit(1779551353.512:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.288070][ T30] audit: type=1400 audit(1779551353.512:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.309282][ T30] audit: type=1400 audit(1779551353.512:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.328025][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.330163][ T30] audit: type=1400 audit(1779551353.512:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.359528][ T30] audit: type=1400 audit(1779551353.512:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.398652][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.966469][ T310] request_module fs-gadgetfs succeeded, but still no fs? [ 26.983212][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.009184][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.016815][ T309] device bridge_slave_0 entered promiscuous mode [ 27.024868][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.031982][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.039500][ T309] device bridge_slave_1 entered promiscuous mode [ 27.395555][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.402879][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.410325][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.417384][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.658172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.666910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.689769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.708183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.716611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.732013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.746435][ T309] device veth0_vlan entered promiscuous mode [ 27.753669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.762649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.771604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.779814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.793778][ T309] device veth1_macvtap entered promiscuous mode [ 27.803444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.817151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.839349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/05/23 15:49:15 executed programs: 0 [ 27.968441][ T309] syz-executor (309) used greatest stack depth: 19744 bytes left [ 28.112988][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.120151][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.127746][ T373] device bridge_slave_0 entered promiscuous mode [ 28.135587][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.142747][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.150849][ T373] device bridge_slave_1 entered promiscuous mode [ 28.163491][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.170602][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.178174][ T372] device bridge_slave_0 entered promiscuous mode [ 28.196275][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.203519][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.211159][ T375] device bridge_slave_0 entered promiscuous mode [ 28.218036][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.225091][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.232698][ T372] device bridge_slave_1 entered promiscuous mode [ 28.261288][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.268484][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.275973][ T375] device bridge_slave_1 entered promiscuous mode [ 28.312499][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.319812][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.327397][ T377] device bridge_slave_0 entered promiscuous mode [ 28.337145][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.344497][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.352047][ T377] device bridge_slave_1 entered promiscuous mode [ 28.414298][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.422017][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.429532][ T378] device bridge_slave_0 entered promiscuous mode [ 28.448646][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.455730][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.463622][ T378] device bridge_slave_1 entered promiscuous mode [ 28.582461][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.589931][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.597218][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.604485][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.619143][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.626227][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.633589][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.640669][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.681790][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.688879][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.696170][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.703243][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.723608][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.730864][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.738298][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.745574][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.775982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.784586][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.792189][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.799606][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.806869][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.814504][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.821755][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.829638][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.837248][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.863559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.872083][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.879162][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.903538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.912101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.920718][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.927795][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.935157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.943495][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.950593][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.957984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.966395][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.973468][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.981038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.010655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.018792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.026388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.034141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.041818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.050480][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.058735][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.065938][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.073786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.082145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.090440][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.097477][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.104956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.113501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.121767][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.128814][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.136193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.144642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.152868][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.159938][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.168801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.177169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.185465][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.192516][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.228080][ T372] device veth0_vlan entered promiscuous mode [ 29.235368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.246492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.255773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.264018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.273854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.282390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.290917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.299528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.308293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.316472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.324863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.333548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.341962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.350473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.358902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.367078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.375512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.384440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.393519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.401999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.410220][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.417262][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.440974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.450072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.458982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.467088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.475477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.488265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.496292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.504739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.524745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.534009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.544853][ T378] device veth0_vlan entered promiscuous mode [ 29.561262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.569541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.578451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.586774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.595272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.603440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.611634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.619271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.626710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.634358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.642417][ T372] device veth1_macvtap entered promiscuous mode [ 29.650952][ T375] device veth0_vlan entered promiscuous mode [ 29.657375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.665673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.674532][ T373] device veth0_vlan entered promiscuous mode [ 29.681592][ T378] device veth1_macvtap entered promiscuous mode [ 29.695098][ T375] device veth1_macvtap entered promiscuous mode [ 29.702309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.711510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.719101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.726550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.737931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.753796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.762579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.783426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.792432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.801097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.809705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.818308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.826527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.835046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.843434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.852420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.860791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.888310][ T395] loop4: detected capacity change from 0 to 16 [ 29.899615][ T377] device veth0_vlan entered promiscuous mode [ 29.908753][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.916859][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.924589][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.933854][ T395] erofs: (device loop4): mounted with root inode @ nid 36. [ 29.941971][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 29.941985][ T30] audit: type=1400 audit(1779551357.192:104): avc: denied { mount } for pid=395 comm="syz.4.21" name="/" dev="loop4" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.949467][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.971871][ T395] note: syz.4.21[395] exited with preempt_count 1 [ 29.989269][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.002565][ T373] device veth1_macvtap entered promiscuous mode [ 30.009947][ T396] loop4: detected capacity change from 0 to 16 [ 30.026735][ T396] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.035266][ T396] note: syz.4.22[396] exited with preempt_count 1 [ 30.056359][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.065023][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.073935][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.083705][ T397] loop0: detected capacity change from 0 to 16 [ 30.093497][ T398] loop2: detected capacity change from 0 to 16 [ 30.097473][ T399] loop4: detected capacity change from 0 to 16 [ 30.101127][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.131892][ T400] loop1: detected capacity change from 0 to 16 [ 30.134233][ T377] device veth1_macvtap entered promiscuous mode [ 30.148393][ T398] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.153917][ T399] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.155813][ T397] erofs: (device loop0): mounted with root inode @ nid 36. [ 30.171443][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.180077][ T400] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.187932][ T399] note: syz.4.23[399] exited with preempt_count 1 [ 30.192551][ T398] note: syz.2.19[398] exited with preempt_count 1 [ 30.201862][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.210425][ T400] note: syz.1.18[400] exited with preempt_count 1 [ 30.218846][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.238489][ T397] note: syz.0.17[397] exited with preempt_count 1 [ 30.255859][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.264222][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.272713][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.284930][ T402] loop2: detected capacity change from 0 to 16 [ 30.292252][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.306975][ T404] loop4: detected capacity change from 0 to 16 [ 30.317449][ T403] loop1: detected capacity change from 0 to 16 [ 30.324567][ T405] loop0: detected capacity change from 0 to 16 [ 30.333058][ T402] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.343116][ T402] note: syz.2.25[402] exited with preempt_count 1 [ 30.353675][ T404] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.362341][ T404] note: syz.4.28[404] exited with preempt_count 1 [ 30.375343][ T405] erofs: (device loop0): mounted with root inode @ nid 36. [ 30.386895][ T403] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.392631][ T405] note: syz.0.27[405] exited with preempt_count 1 [ 30.400719][ T403] note: syz.1.26[403] exited with preempt_count 1 [ 30.448404][ T407] erofs: (device loop6): mounted with root inode @ nid 36. [ 30.454025][ T406] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.456003][ T408] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.474472][ T407] note: syz.6.20[407] exited with preempt_count 1 [ 30.483416][ T408] note: syz.2.29[408] exited with preempt_count 1 [ 30.494688][ T406] note: syz.4.30[406] exited with preempt_count 1 [ 30.512606][ T410] erofs: (device loop0): mounted with root inode @ nid 36. [ 30.520895][ T409] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.521154][ T410] note: syz.0.31[410] exited with preempt_count 1 [ 30.538454][ T409] note: syz.1.32[409] exited with preempt_count 1 [ 30.552898][ T411] erofs: (device loop6): mounted with root inode @ nid 36. [ 30.560568][ T411] note: syz.6.33[411] exited with preempt_count 1 [ 30.578472][ T413] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.586142][ T413] note: syz.4.35[413] exited with preempt_count 1 [ 30.594255][ T412] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.603345][ T414] erofs: (device loop0): mounted with root inode @ nid 36. [ 30.615274][ T414] note: syz.0.36[414] exited with preempt_count 1 [ 30.622213][ T412] note: syz.2.34[412] exited with preempt_count 1 [ 30.648526][ T416] erofs: (device loop6): mounted with root inode @ nid 36. [ 30.660403][ T415] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.670498][ T416] note: syz.6.38[416] exited with preempt_count 1 [ 30.678296][ T415] note: syz.1.37[415] exited with preempt_count 1 [ 30.698354][ T419] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.706080][ T419] note: syz.4.39[419] exited with preempt_count 1 [ 30.713339][ T45] device bridge_slave_1 left promiscuous mode [ 30.719621][ T418] erofs: (device loop0): mounted with root inode @ nid 36. [ 30.727314][ T418] note: syz.0.41[418] exited with preempt_count 1 [ 30.728780][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.741619][ T417] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.749074][ T420] erofs: (device loop6): mounted with root inode @ nid 36. [ 30.753636][ T417] note: syz.2.40[417] exited with preempt_count 1 [ 30.758086][ T45] device bridge_slave_0 left promiscuous mode [ 30.769289][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.769632][ T420] note: syz.6.42[420] exited with preempt_count 1 [ 30.783564][ T421] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.796580][ T45] device veth1_macvtap left promiscuous mode [ 30.798138][ T421] note: syz.1.43[421] exited with preempt_count 1 [ 30.803531][ T45] device veth0_vlan left promiscuous mode [ 30.834303][ T422] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.842247][ T422] note: syz.4.44[422] exited with preempt_count 1 [ 30.849971][ T424] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.859766][ T424] note: syz.2.46[424] exited with preempt_count 1 [ 30.868962][ T425] erofs: (device loop6): mounted with root inode @ nid 36. [ 30.868962][ T423] erofs: (device loop0): mounted with root inode @ nid 36. [ 30.870127][ T423] note: syz.0.45[423] exited with preempt_count 1 [ 30.890425][ T426] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.899655][ T425] note: syz.6.47[425] exited with preempt_count 1 [ 30.908073][ T426] BUG: scheduling while atomic: syz.1.48/426/0x00000002 [ 30.915219][ T426] Modules linked in: [ 30.919266][ T426] Preemption disabled at: [ 30.919275][ T426] [] z_erofs_reload_indexes+0x310/0x410 [ 30.930898][ T426] CPU: 1 PID: 426 Comm: syz.1.48 Not tainted syzkaller #0 [ 30.938125][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 30.949100][ T426] Call Trace: [ 30.952405][ T426] [ 30.955363][ T426] __dump_stack+0x21/0x30 [ 30.959815][ T426] dump_stack_lvl+0x110/0x170 [ 30.964531][ T426] ? show_regs_print_info+0x20/0x20 [ 30.969776][ T426] ? z_erofs_reload_indexes+0x310/0x410 [ 30.975362][ T426] dump_stack+0x15/0x20 [ 30.979576][ T426] __schedule_bug+0x180/0x230 [ 30.984383][ T426] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 30.989704][ T426] ? rcu_gp_kthread_wake+0x90/0x90 [ 30.994853][ T426] __schedule+0xc30/0x14c0 [ 30.999399][ T426] ? blkcg_maybe_throttle_current+0x1e0/0xa10 [ 31.005811][ T426] ? release_firmware_map_entry+0x190/0x190 [ 31.012327][ T426] ? __blkcg_punt_bio_submit+0x170/0x170 [ 31.017994][ T426] ? unlock_page_memcg+0x130/0x130 [ 31.023150][ T426] ? ____fput+0x15/0x20 [ 31.027345][ T426] schedule+0x11e/0x1e0 [ 31.031535][ T426] exit_to_user_mode_loop+0x50/0xe0 [ 31.037127][ T426] exit_to_user_mode_prepare+0x87/0xd0 [ 31.042635][ T426] syscall_exit_to_user_mode+0x1a/0x30 [ 31.048133][ T426] do_syscall_64+0x58/0xa0 [ 31.052884][ T426] ? clear_bhb_loop+0x50/0xa0 [ 31.057611][ T426] ? clear_bhb_loop+0x50/0xa0 [ 31.062319][ T426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.068244][ T426] RIP: 0033:0x7f9a8f8bbe59 [ 31.072677][ T426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.092297][ T426] RSP: 002b:00007ffd7caf71c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.100744][ T426] RAX: 0000000000000000 RBX: 00007ffd7caf72b0 RCX: 00007f9a8f8bbe59 [ 31.108732][ T426] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.116717][ T426] RBP: 0000000000007862 R08: 0000000000000001 R09: 0000000000000000 [ 31.124706][ T426] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 31.132694][ T426] R13: 00007f9a8fb34fac R14: 00007f9a8fb34fa8 R15: 00007f9a8fb34fa0 [ 31.140689][ T426] [ 31.149443][ T427] erofs: (device loop4): mounted with root inode @ nid 36. [ 31.157359][ T427] note: syz.4.49[427] exited with preempt_count 1 [ 31.185070][ T428] erofs: (device loop2): mounted with root inode @ nid 36. [ 31.193453][ T430] erofs: (device loop6): mounted with root inode @ nid 36. [ 31.199596][ T429] erofs: (device loop0): mounted with root inode @ nid 36. [ 31.210983][ T428] note: syz.2.50[428] exited with preempt_count 1 [ 31.218424][ T430] note: syz.6.52[430] exited with preempt_count 1 [ 31.234359][ T429] note: syz.0.51[429] exited with preempt_count 1 [ 31.248977][ T432] erofs: (device loop4): mounted with root inode @ nid 36. [ 31.258521][ T431] erofs: (device loop1): mounted with root inode @ nid 36. [ 31.265783][ T432] note: syz.4.54[432] exited with preempt_count 1 [ 31.273292][ T431] note: syz.1.53[431] exited with preempt_count 1 [ 31.281751][ T433] erofs: (device loop2): mounted with root inode @ nid 36. [ 31.282923][ T435] erofs: (device loop0): mounted with root inode @ nid 36. [ 31.296740][ T435] note: syz.0.57[435] exited with preempt_count 1 [ 31.298009][ T434] erofs: (device loop6): mounted with root inode @ nid 36. [ 31.315501][ T433] note: syz.2.55[433] exited with preempt_count 1 [ 31.327940][ T434] note: syz.6.56[434] exited with preempt_count 1 [ 31.358872][ T437] erofs: (device loop1): mounted with root inode @ nid 36. [ 31.372258][ T436] erofs: (device loop4): mounted with root inode @ nid 36. [ 31.385479][ T436] note: syz.4.58[436] exited with preempt_count 1 [ 31.393944][ T437] note: syz.1.59[437] exited with preempt_count 1 [ 31.404387][ T438] erofs: (device loop0): mounted with root inode @ nid 36. [ 31.411298][ T439] erofs: (device loop6): mounted with root inode @ nid 36. [ 31.419419][ T440] erofs: (device loop2): mounted with root inode @ nid 36. [ 31.421708][ T439] note: syz.6.62[439] exited with preempt_count 1 [ 31.440937][ T438] note: syz.0.60[438] exited with preempt_count 1 [ 31.448414][ T440] note: syz.2.61[440] exited with preempt_count 1 [ 31.459594][ T441] erofs: (device loop1): mounted with root inode @ nid 36. [ 31.467247][ T441] note: syz.1.64[441] exited with preempt_count 1 [ 31.471553][ T442] erofs: (device loop4): mounted with root inode @ nid 36. [ 31.483008][ T442] note: syz.4.63[442] exited with preempt_count 1 [ 31.508882][ T444] erofs: (device loop6): mounted with root inode @ nid 36. [ 31.522543][ T444] note: syz.6.65[444] exited with preempt_count 1 [ 31.548246][ T445] erofs: (device loop2): mounted with root inode @ nid 36. [ 31.555890][ T445] note: syz.2.68[445] exited with preempt_count 1 [ 31.564418][ T447] erofs: (device loop0): mounted with root inode @ nid 36. [ 31.571864][ T443] erofs: (device loop1): mounted with root inode @ nid 36. [ 31.572828][ T447] note: syz.0.67[447] exited with preempt_count 1 [ 31.586271][ T443] BUG: scheduling while atomic: syz.1.66/443/0x00000002 [ 31.593667][ T443] Modules linked in: [ 31.597656][ T443] Preemption disabled at: [ 31.597664][ T443] [] z_erofs_reload_indexes+0x310/0x410 [ 31.609371][ T443] CPU: 0 PID: 443 Comm: syz.1.66 Tainted: G W syzkaller #0 [ 31.614778][ T446] erofs: (device loop4): mounted with root inode @ nid 36. [ 31.617894][ T443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 31.617906][ T443] Call Trace: [ 31.617912][ T443] [ 31.617918][ T443] __dump_stack+0x21/0x30 [ 31.617944][ T443] dump_stack_lvl+0x110/0x170 [ 31.617964][ T443] ? show_regs_print_info+0x20/0x20 [ 31.617987][ T443] ? z_erofs_reload_indexes+0x310/0x410 [ 31.638776][ T446] note: syz.4.69[446] exited with preempt_count 1 [ 31.641502][ T443] dump_stack+0x15/0x20 [ 31.641529][ T443] __schedule_bug+0x180/0x230 [ 31.676569][ T443] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 31.681876][ T443] __schedule+0xc30/0x14c0 [ 31.686305][ T443] ? _raw_spin_unlock+0x4d/0x70 [ 31.691170][ T443] ? pick_file+0x252/0x2c0 [ 31.695600][ T443] ? release_firmware_map_entry+0x190/0x190 [ 31.701532][ T443] ? __close_range+0x39e/0x420 [ 31.706315][ T443] ? pick_file+0x2c0/0x2c0 [ 31.710751][ T443] schedule+0x11e/0x1e0 [ 31.714923][ T443] exit_to_user_mode_loop+0x50/0xe0 [ 31.720137][ T443] exit_to_user_mode_prepare+0x87/0xd0 [ 31.725616][ T443] syscall_exit_to_user_mode+0x1a/0x30 [ 31.731102][ T443] do_syscall_64+0x58/0xa0 [ 31.735539][ T443] ? clear_bhb_loop+0x50/0xa0 [ 31.740230][ T443] ? clear_bhb_loop+0x50/0xa0 [ 31.745013][ T443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.750927][ T443] RIP: 0033:0x7f9a8f8bbe59 [ 31.755359][ T443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.775082][ T443] RSP: 002b:00007ffd7caf71c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.783618][ T443] RAX: 0000000000000000 RBX: 00007ffd7caf72b0 RCX: 00007f9a8f8bbe59 [ 31.791609][ T443] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.799590][ T443] RBP: 0000000000007af1 R08: 0000000000000001 R09: 0000000000000000 [ 31.807574][ T443] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 31.815563][ T443] R13: 00007f9a8fb34fac R14: 00007f9a8fb34fa8 R15: 00007f9a8fb34fa0 [ 31.823568][ T443] [ 31.848561][ T448] erofs: (device loop6): mounted with root inode @ nid 36. [ 31.856327][ T448] note: syz.6.70[448] exited with preempt_count 1 [ 31.870355][ T449] erofs: (device loop2): mounted with root inode @ nid 36. [ 31.879998][ T449] note: syz.2.71[449] exited with preempt_count 1 [ 31.899068][ T451] erofs: (device loop4): mounted with root inode @ nid 36. [ 31.906453][ T452] erofs: (device loop1): mounted with root inode @ nid 36. [ 31.912328][ T451] note: syz.4.73[451] exited with preempt_count 1 [ 31.917404][ T450] erofs: (device loop0): mounted with root inode @ nid 36. [ 31.926721][ T452] note: syz.1.74[452] exited with preempt_count 1 [ 31.937849][ T450] note: syz.0.72[450] exited with preempt_count 1 [ 31.946129][ T453] erofs: (device loop6): mounted with root inode @ nid 36. [ 31.953871][ T453] note: syz.6.75[453] exited with preempt_count 1 [ 31.977236][ T454] erofs: (device loop2): mounted with root inode @ nid 36. [ 31.985002][ T454] note: syz.2.76[454] exited with preempt_count 1 [ 31.998451][ T457] erofs: (device loop1): mounted with root inode @ nid 36. [ 31.999682][ T458] erofs: (device loop0): mounted with root inode @ nid 36. [ 32.008286][ T457] BUG: scheduling while atomic: syz.1.78/457/0x00000002 [ 32.016272][ T456] erofs: (device loop6): mounted with root inode @ nid 36. [ 32.020423][ T457] Modules linked in: [ 32.029147][ T456] note: syz.6.80[456] exited with preempt_count 1 [ 32.031620][ T457] Preemption disabled at: [ 32.031626][ T457] [] z_erofs_reload_indexes+0x310/0x410 [ 32.039894][ T458] note: syz.0.79[458] exited with preempt_count 1 [ 32.042437][ T457] CPU: 0 PID: 457 Comm: syz.1.78 Tainted: G W syzkaller #0 [ 32.064508][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 32.074577][ T457] Call Trace: [ 32.077886][ T457] [ 32.080827][ T457] __dump_stack+0x21/0x30 [ 32.085274][ T457] dump_stack_lvl+0x110/0x170 [ 32.089958][ T457] ? show_regs_print_info+0x20/0x20 [ 32.095167][ T457] ? z_erofs_reload_indexes+0x310/0x410 [ 32.100730][ T457] dump_stack+0x15/0x20 [ 32.104893][ T457] __schedule_bug+0x180/0x230 [ 32.109575][ T457] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 32.114867][ T457] ? rcu_gp_kthread_wake+0x90/0x90 [ 32.119992][ T457] __schedule+0xc30/0x14c0 [ 32.124509][ T457] ? blkcg_maybe_throttle_current+0x1e0/0xa10 [ 32.130585][ T457] ? release_firmware_map_entry+0x190/0x190 [ 32.136485][ T457] ? __blkcg_punt_bio_submit+0x170/0x170 [ 32.142131][ T457] ? unlock_page_memcg+0x130/0x130 [ 32.147283][ T457] ? ____fput+0x15/0x20 [ 32.151443][ T457] schedule+0x11e/0x1e0 [ 32.155605][ T457] exit_to_user_mode_loop+0x50/0xe0 [ 32.160810][ T457] exit_to_user_mode_prepare+0x87/0xd0 [ 32.166275][ T457] syscall_exit_to_user_mode+0x1a/0x30 [ 32.172097][ T457] do_syscall_64+0x58/0xa0 [ 32.176555][ T457] ? clear_bhb_loop+0x50/0xa0 [ 32.181237][ T457] ? clear_bhb_loop+0x50/0xa0 [ 32.185914][ T457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.191813][ T457] RIP: 0033:0x7f9a8f8bbe59 [ 32.196229][ T457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.215925][ T457] RSP: 002b:00007ffd7caf71c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.224612][ T457] RAX: 0000000000000000 RBX: 00007ffd7caf72b0 RCX: 00007f9a8f8bbe59 [ 32.232595][ T457] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.240571][ T457] RBP: 0000000000007cd4 R08: 0000000000000001 R09: 0000000000000000 [ 32.248719][ T457] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 32.256691][ T457] R13: 00007f9a8fb34fac R14: 00007f9a8fb34fa8 R15: 00007f9a8fb34fa0 [ 32.264668][ T457] [ 32.298706][ T455] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.307619][ T459] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.315349][ T455] note: syz.4.77[455] exited with preempt_count 1 [ 32.317669][ T459] BUG: scheduling while atomic: syz.2.81/459/0x00000002 [ 32.328885][ T459] Modules linked in: [ 32.332814][ T459] Preemption disabled at: [ 32.332824][ T459] [] z_erofs_reload_indexes+0x310/0x410 [ 32.344507][ T459] CPU: 1 PID: 459 Comm: syz.2.81 Tainted: G W syzkaller #0 [ 32.353040][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 32.363125][ T459] Call Trace: [ 32.366425][ T459] [ 32.369406][ T459] __dump_stack+0x21/0x30 [ 32.373878][ T459] dump_stack_lvl+0x110/0x170 [ 32.378570][ T459] ? show_regs_print_info+0x20/0x20 [ 32.383786][ T459] ? z_erofs_reload_indexes+0x310/0x410 [ 32.389357][ T459] dump_stack+0x15/0x20 [ 32.393550][ T459] __schedule_bug+0x180/0x230 [ 32.398250][ T459] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 32.403561][ T459] ? _raw_spin_lock+0x94/0xf0 [ 32.408360][ T459] ? _raw_spin_trylock_bh+0x150/0x150 [ 32.413749][ T459] ? task_work_add+0x11e/0x1e0 [ 32.418545][ T459] __schedule+0xc30/0x14c0 [ 32.423097][ T459] ? _raw_spin_unlock+0x4d/0x70 [ 32.427974][ T459] ? pick_file+0x252/0x2c0 [ 32.432420][ T459] ? release_firmware_map_entry+0x190/0x190 [ 32.438349][ T459] ? __close_range+0x39e/0x420 [ 32.443154][ T459] ? pick_file+0x2c0/0x2c0 [ 32.447604][ T459] schedule+0x11e/0x1e0 [ 32.451778][ T459] exit_to_user_mode_loop+0x50/0xe0 [ 32.457100][ T459] exit_to_user_mode_prepare+0x87/0xd0 [ 32.462689][ T459] syscall_exit_to_user_mode+0x1a/0x30 [ 32.468166][ T459] do_syscall_64+0x58/0xa0 [ 32.472603][ T459] ? clear_bhb_loop+0x50/0xa0 [ 32.477301][ T459] ? clear_bhb_loop+0x50/0xa0 [ 32.481994][ T459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.487905][ T459] RIP: 0033:0x7ff4bec96e59 [ 32.492514][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.512745][ T459] RSP: 002b:00007fffea9dac28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.521177][ T459] RAX: 0000000000000000 RBX: 00007fffea9dad10 RCX: 00007ff4bec96e59 [ 32.529167][ T459] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 32.537162][ T459] RBP: 0000000000007e07 R08: 0000000000000001 R09: 0000000000000000 [ 32.545147][ T459] R10: 0000001b33320000 R11: 0000000000000246 R12: 0000000000000000 [ 32.553140][ T459] R13: 00007ff4bef0ffac R14: 00007ff4bef0ffa8 R15: 00007ff4bef0ffa0 [ 32.561134][ T459] [ 32.571447][ T460] erofs: (device loop6): mounted with root inode @ nid 36. [ 32.579023][ T460] note: syz.6.82[460] exited with preempt_count 1 [ 32.605046][ T461] erofs: (device loop1): mounted with root inode @ nid 36. [ 32.605046][ T462] erofs: (device loop0): mounted with root inode @ nid 36. [ 32.606020][ T461] note: syz.1.84[461] exited with preempt_count 1 [ 32.613961][ T462] note: syz.0.83[462] exited with preempt_count 1 [ 32.638501][ T463] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.646099][ T464] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.646174][ T465] erofs: (device loop6): mounted with root inode @ nid 36. [ 32.655454][ T463] note: syz.4.85[463] exited with preempt_count 1 [ 32.667778][ T464] note: syz.2.86[464] exited with preempt_count 1 [ 32.679623][ T465] note: syz.6.87[465] exited with preempt_count 1 [ 32.708188][ T466] erofs: (device loop0): mounted with root inode @ nid 36. [ 32.708188][ T467] erofs: (device loop1): mounted with root inode @ nid 36. [ 32.709308][ T466] note: syz.0.89[466] exited with preempt_count 1 [ 32.716720][ T467] note: syz.1.88[467] exited with preempt_count 1 [ 32.762430][ T470] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.772145][ T470] note: syz.4.91[470] exited with preempt_count 1 [ 32.778995][ T468] erofs: (device loop6): mounted with root inode @ nid 36. [ 32.781148][ T469] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.790698][ T468] note: syz.6.92[468] exited with preempt_count 1 [ 32.803314][ T469] note: syz.2.90[469] exited with preempt_count 1 [ 32.831217][ T471] erofs: (device loop1): mounted with root inode @ nid 36. [ 32.840557][ T471] note: syz.1.94[471] exited with preempt_count 1 [ 32.849609][ T472] erofs: (device loop0): mounted with root inode @ nid 36. [ 32.857337][ T472] note: syz.0.93[472] exited with preempt_count 1 [ 32.859712][ T473] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.871460][ T474] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.872857][ T475] erofs: (device loop6): mounted with root inode @ nid 36. [ 32.886527][ T473] note: syz.2.97[473] exited with preempt_count 1 [ 32.895389][ T475] note: syz.6.96[475] exited with preempt_count 1 [ 32.902644][ T474] note: syz.4.95[474] exited with preempt_count 1 2026/05/23 15:49:20 executed programs: 93 [ 32.938183][ T476] erofs: (device loop1): mounted with root inode @ nid 36. [ 32.950786][ T476] note: syz.1.98[476] exited with preempt_count 1 [ 32.958633][ T477] erofs: (device loop0): mounted with root inode @ nid 36. [ 32.966064][ T478] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.966989][ T477] note: syz.0.99[477] exited with preempt_count 1 [ 32.980460][ T478] note: syz.4.102[478] exited with preempt_count 1 [ 32.988141][ T479] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.988144][ T480] erofs: (device loop6): mounted with root inode @ nid 36. [ 32.989134][ T480] note: syz.6.101[480] exited with preempt_count 1 [ 32.996446][ T479] note: syz.2.100[479] exited with preempt_count 1 [ 33.058809][ T481] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.066462][ T481] note: syz.1.103[481] exited with preempt_count 1 [ 33.080647][ T484] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.089811][ T484] note: syz.2.107[484] exited with preempt_count 1 [ 33.102817][ T482] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.111381][ T482] note: syz.4.105[482] exited with preempt_count 1 [ 33.118049][ T483] erofs: (device loop0): mounted with root inode @ nid 36. [ 33.125849][ T483] note: syz.0.106[483] exited with preempt_count 1 [ 33.133023][ T485] erofs: (device loop6): mounted with root inode @ nid 36. [ 33.144335][ T485] note: syz.6.104[485] exited with preempt_count 1 [ 33.172636][ T486] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.180682][ T487] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.181897][ T486] note: syz.1.108[486] exited with preempt_count 1 [ 33.189220][ T487] note: syz.2.109[487] exited with preempt_count 1 [ 33.218690][ T490] erofs: (device loop0): mounted with root inode @ nid 36. [ 33.226076][ T488] erofs: (device loop6): mounted with root inode @ nid 36. [ 33.238751][ T488] note: syz.6.112[488] exited with preempt_count 1 [ 33.246718][ T490] note: syz.0.111[490] exited with preempt_count 1 [ 33.268683][ T489] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.276092][ T492] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.283791][ T489] note: syz.4.110[489] exited with preempt_count 1 [ 33.293187][ T491] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.301242][ T492] note: syz.1.113[492] exited with preempt_count 1 [ 33.307800][ T491] note: syz.2.114[491] exited with preempt_count 1 [ 33.338277][ T493] erofs: (device loop0): mounted with root inode @ nid 36. [ 33.345945][ T493] note: syz.0.116[493] exited with preempt_count 1 [ 33.379631][ T494] erofs: (device loop6): mounted with root inode @ nid 36. [ 33.387440][ T494] note: syz.6.115[494] exited with preempt_count 1 [ 33.390289][ T497] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.402193][ T496] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.410045][ T496] note: syz.2.117[496] exited with preempt_count 1 [ 33.417306][ T497] note: syz.1.119[497] exited with preempt_count 1 [ 33.417863][ T495] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.433795][ T495] note: syz.4.118[495] exited with preempt_count 1 [ 33.472754][ T498] erofs: (device loop0): mounted with root inode @ nid 36. [ 33.483472][ T498] note: syz.0.120[498] exited with preempt_count 1 [ 33.498526][ T502] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.506293][ T502] note: syz.4.124[502] exited with preempt_count 1 [ 33.513949][ T501] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.515416][ T500] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.522619][ T501] note: syz.1.121[501] exited with preempt_count 1 [ 33.537253][ T500] note: syz.2.122[500] exited with preempt_count 1 [ 33.544501][ T499] erofs: (device loop6): mounted with root inode @ nid 36. [ 33.552236][ T499] note: syz.6.123[499] exited with preempt_count 1 [ 33.586862][ T503] erofs: (device loop0): mounted with root inode @ nid 36. [ 33.595549][ T503] note: syz.0.125[503] exited with preempt_count 1 [ 33.608642][ T506] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.608950][ T507] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.617610][ T506] BUG: scheduling while atomic: syz.1.127/506/0x00000002 [ 33.623843][ T505] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.630395][ T506] Modules linked in: [ 33.630406][ T506] Preemption disabled at: [ 33.630411][ T506] [] z_erofs_reload_indexes+0x310/0x410 [ 33.630443][ T506] CPU: 1 PID: 506 Comm: syz.1.127 Tainted: G W syzkaller #0 [ 33.630462][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.639057][ T504] erofs: (device loop6): mounted with root inode @ nid 36. [ 33.641565][ T506] Call Trace: [ 33.641573][ T506] [ 33.647099][ T504] note: syz.6.129[504] exited with preempt_count 1 [ 33.653015][ T506] __dump_stack+0x21/0x30 [ 33.653042][ T506] dump_stack_lvl+0x110/0x170 [ 33.653062][ T506] ? show_regs_print_info+0x20/0x20 [ 33.663095][ T505] note: syz.4.126[505] exited with preempt_count 1 [ 33.671932][ T506] ? z_erofs_reload_indexes+0x310/0x410 [ 33.671967][ T506] dump_stack+0x15/0x20 [ 33.680546][ T507] note: syz.2.128[507] exited with preempt_count 1 [ 33.682561][ T506] __schedule_bug+0x180/0x230 [ 33.734064][ T506] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 33.739371][ T506] ? _raw_spin_lock+0x94/0xf0 [ 33.744066][ T506] ? _raw_spin_trylock_bh+0x150/0x150 [ 33.749446][ T506] ? task_work_add+0x11e/0x1e0 [ 33.754218][ T506] __schedule+0xc30/0x14c0 [ 33.758638][ T506] ? _raw_spin_unlock+0x4d/0x70 [ 33.763500][ T506] ? pick_file+0x252/0x2c0 [ 33.767947][ T506] ? release_firmware_map_entry+0x190/0x190 [ 33.773841][ T506] ? __close_range+0x39e/0x420 [ 33.778609][ T506] ? pick_file+0x2c0/0x2c0 [ 33.783032][ T506] schedule+0x11e/0x1e0 [ 33.787272][ T506] exit_to_user_mode_loop+0x50/0xe0 [ 33.792738][ T506] exit_to_user_mode_prepare+0x87/0xd0 [ 33.798199][ T506] syscall_exit_to_user_mode+0x1a/0x30 [ 33.803664][ T506] do_syscall_64+0x58/0xa0 [ 33.808089][ T506] ? clear_bhb_loop+0x50/0xa0 [ 33.812768][ T506] ? clear_bhb_loop+0x50/0xa0 [ 33.817579][ T506] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.823489][ T506] RIP: 0033:0x7f9a8f8bbe59 [ 33.827992][ T506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.847767][ T506] RSP: 002b:00007ffd7caf71c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 33.856184][ T506] RAX: 0000000000000000 RBX: 00007ffd7caf72b0 RCX: 00007f9a8f8bbe59 [ 33.864284][ T506] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 33.872354][ T506] RBP: 000000000000831e R08: 0000000000000001 R09: 0000000000000000 [ 33.880528][ T506] R10: 0000001b33220000 R11: 0000000000000246 R12: 0000000000000000 [ 33.888508][ T506] R13: 00007f9a8fb34fac R14: 00007f9a8fb34fa8 R15: 00007f9a8fb34fa0 [ 33.896492][ T506] [ 33.943272][ T508] erofs: (device loop0): mounted with root inode @ nid 36. [ 33.951273][ T508] note: syz.0.130[508] exited with preempt_count 1 [ 33.968318][ T509] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.968675][ T512] erofs: (device loop4): mounted with root inode @ nid 36. [ 33.976911][ T509] note: syz.2.133[509] exited with preempt_count 1 [ 33.984261][ T512] note: syz.4.131[512] exited with preempt_count 1 [ 33.996336][ T511] erofs: (device loop6): mounted with root inode @ nid 36. [ 34.003792][ T510] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.013994][ T511] note: syz.6.132[511] exited with preempt_count 1 [ 34.023516][ T510] note: syz.1.134[510] exited with preempt_count 1 [ 34.060900][ T513] erofs: (device loop0): mounted with root inode @ nid 36. [ 34.069273][ T516] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.076840][ T514] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.077886][ T513] note: syz.0.135[513] exited with preempt_count 1 [ 34.091222][ T515] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.092758][ T516] note: syz.4.137[516] exited with preempt_count 1 [ 34.101961][ T514] note: syz.2.136[514] exited with preempt_count 1 [ 34.112242][ T517] erofs: (device loop6): mounted with root inode @ nid 36. [ 34.122481][ T515] note: syz.1.138[515] exited with preempt_count 1 [ 34.128891][ T517] note: syz.6.139[517] exited with preempt_count 1 [ 34.172135][ T518] erofs: (device loop0): mounted with root inode @ nid 36. [ 34.179582][ T519] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.188555][ T519] note: syz.4.141[519] exited with preempt_count 1 [ 34.197474][ T518] note: syz.0.140[518] exited with preempt_count 1 [ 34.204985][ T521] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.212940][ T521] note: syz.2.143[521] exited with preempt_count 1 [ 34.228136][ T520] erofs: (device loop6): mounted with root inode @ nid 36. [ 34.237246][ T520] note: syz.6.144[520] exited with preempt_count 1 [ 34.239464][ T522] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.255833][ T522] note: syz.1.142[522] exited with preempt_count 1 [ 34.265272][ T523] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.272884][ T523] note: syz.4.145[523] exited with preempt_count 1 [ 34.302037][ T525] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.302048][ T524] erofs: (device loop0): mounted with root inode @ nid 36. [ 34.303062][ T524] note: syz.0.146[524] exited with preempt_count 1 [ 34.315048][ T525] note: syz.2.147[525] exited with preempt_count 1 [ 34.358528][ T526] erofs: (device loop6): mounted with root inode @ nid 36. [ 34.365980][ T528] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.373886][ T527] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.374873][ T526] note: syz.6.148[526] exited with preempt_count 1 [ 34.393423][ T527] note: syz.1.149[527] exited with preempt_count 1 [ 34.400444][ T528] note: syz.4.150[528] exited with preempt_count 1 [ 34.432080][ T530] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.439544][ T529] erofs: (device loop0): mounted with root inode @ nid 36. [ 34.452051][ T530] note: syz.2.151[530] exited with preempt_count 1 [ 34.461362][ T529] note: syz.0.152[529] exited with preempt_count 1 [ 34.478633][ T533] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.486047][ T532] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.487006][ T533] note: syz.4.155[533] exited with preempt_count 1 [ 34.495123][ T531] erofs: (device loop6): mounted with root inode @ nid 36. [ 34.514861][ T532] note: syz.1.154[532] exited with preempt_count 1 [ 34.523563][ T531] note: syz.6.153[531] exited with preempt_count 1 [ 34.551772][ T535] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.559281][ T534] erofs: (device loop0): mounted with root inode @ nid 36. [ 34.569117][ T535] note: syz.2.156[535] exited with preempt_count 1 [ 34.576167][ T534] note: syz.0.157[534] exited with preempt_count 1 [ 34.585775][ T536] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.587032][ T537] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.603561][ T538] erofs: (device loop6): mounted with root inode @ nid 36. [ 34.607891][ T537] note: syz.1.159[537] exited with preempt_count 1 [ 34.617095][ T536] note: syz.4.158[536] exited with preempt_count 1 [ 34.625278][ T538] note: syz.6.160[538] exited with preempt_count 1 [ 34.658618][ T539] erofs: (device loop0): mounted with root inode @ nid 36. [ 34.658701][ T540] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.667150][ T539] note: syz.0.162[539] exited with preempt_count 1 [ 34.687141][ T540] note: syz.2.161[540] exited with preempt_count 1 [ 34.728794][ T541] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.736603][ T543] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.744365][ T541] BUG: scheduling while atomic: syz.4.164/541/0x00000002 [ 34.750730][ T543] note: syz.1.163[543] exited with preempt_count 1 [ 34.751643][ T541] Modules linked in: [ 34.761989][ T541] Preemption disabled at: [ 34.761998][ T541] [] z_erofs_reload_indexes+0x310/0x410 [ 34.773590][ T541] CPU: 1 PID: 541 Comm: syz.4.164 Tainted: G W syzkaller #0 [ 34.782278][ T541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.792338][ T541] Call Trace: [ 34.795620][ T541] [ 34.798553][ T541] __dump_stack+0x21/0x30 [ 34.803449][ T541] dump_stack_lvl+0x110/0x170 [ 34.808337][ T541] ? show_regs_print_info+0x20/0x20 [ 34.813617][ T541] ? z_erofs_reload_indexes+0x310/0x410 [ 34.819173][ T541] dump_stack+0x15/0x20 [ 34.823359][ T541] __schedule_bug+0x180/0x230 [ 34.828046][ T541] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 34.833369][ T541] ? selinux_file_ioctl+0x3a0/0x4d0 [ 34.838675][ T541] __schedule+0xc30/0x14c0 [ 34.843095][ T541] ? release_firmware_map_entry+0x190/0x190 [ 34.849145][ T541] ? security_file_ioctl+0x84/0xa0 [ 34.854975][ T541] schedule+0x11e/0x1e0 [ 34.859179][ T541] exit_to_user_mode_loop+0x50/0xe0 [ 34.864397][ T541] exit_to_user_mode_prepare+0x87/0xd0 [ 34.869933][ T541] syscall_exit_to_user_mode+0x1a/0x30 [ 34.875793][ T541] do_syscall_64+0x58/0xa0 [ 34.880335][ T541] ? clear_bhb_loop+0x50/0xa0 [ 34.885204][ T541] ? clear_bhb_loop+0x50/0xa0 [ 34.889907][ T541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.895996][ T541] RIP: 0033:0x7fe794c82e59 [ 34.900441][ T541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.920173][ T541] RSP: 002b:00007ffffe79c948 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.928613][ T541] RAX: 0000000000000000 RBX: 00007fe794efbfa0 RCX: 00007fe794c82e59 [ 34.936733][ T541] RDX: 00002000000005c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 34.944718][ T541] RBP: 00007fe794d18d6f R08: 0000000000000000 R09: 0000000000000000 [ 34.952711][ T541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.960778][ T541] R13: 00007fe794efbfac R14: 00007fe794efbfa0 R15: 00007fe794efbfa0 [ 34.968859][ T541] [ 34.975313][ T542] erofs: (device loop6): mounted with root inode @ nid 36. [ 34.983010][ T542] note: syz.6.165[542] exited with preempt_count 1 [ 34.989868][ T545] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.990124][ T544] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.010461][ T544] note: syz.0.166[544] exited with preempt_count 1 [ 35.012897][ T545] note: syz.2.167[545] exited with preempt_count 1 [ 35.025777][ T546] set_capacity_and_notify: 139 callbacks suppressed [ 35.025793][ T546] loop4: detected capacity change from 0 to 16 [ 35.033026][ T547] loop1: detected capacity change from 0 to 16 [ 35.055681][ T549] loop6: detected capacity change from 0 to 16 [ 35.059924][ T550] loop0: detected capacity change from 0 to 16 [ 35.064401][ T546] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.075772][ T547] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.083298][ T549] erofs: (device loop6): mounted with root inode @ nid 36. [ 35.092910][ T549] note: syz.6.170[549] exited with preempt_count 1 [ 35.095226][ T551] loop2: detected capacity change from 0 to 16 [ 35.109141][ T550] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.116991][ T547] note: syz.1.168[547] exited with preempt_count 1 [ 35.124395][ T546] note: syz.4.169[546] exited with preempt_count 1 [ 35.125016][ T550] note: syz.0.171[550] exited with preempt_count 1 [ 35.156637][ T553] loop6: detected capacity change from 0 to 16 [ 35.166541][ T554] loop1: detected capacity change from 0 to 16 [ 35.172007][ T551] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.184450][ T555] loop4: detected capacity change from 0 to 16 [ 35.193639][ T551] note: syz.2.173[551] exited with preempt_count 1 [ 35.200681][ T555] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.201351][ T554] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.214122][ T555] note: syz.4.176[555] exited with preempt_count 1 [ 35.217101][ T556] loop0: detected capacity change from 0 to 16 [ 35.229326][ T554] note: syz.1.175[554] exited with preempt_count 1 [ 35.261365][ T553] erofs: (device loop6): mounted with root inode @ nid 36. [ 35.270316][ T556] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.278393][ T553] note: syz.6.174[553] exited with preempt_count 1 [ 35.285283][ T556] note: syz.0.178[556] exited with preempt_count 1 [ 35.293107][ T557] loop2: detected capacity change from 0 to 16 [ 35.319105][ T557] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.326553][ T559] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.329629][ T557] note: syz.2.179[557] exited with preempt_count 1 [ 35.340467][ T558] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.346335][ T559] note: syz.1.181[559] exited with preempt_count 1 [ 35.362514][ T558] note: syz.4.180[558] exited with preempt_count 1 [ 35.388142][ T560] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.395864][ T560] note: syz.0.182[560] exited with preempt_count 1 [ 35.409597][ T561] erofs: (device loop6): mounted with root inode @ nid 36. [ 35.421735][ T562] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.429907][ T561] note: syz.6.183[561] exited with preempt_count 1 [ 35.437088][ T562] note: syz.2.184[562] exited with preempt_count 1 [ 35.444784][ T564] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.452457][ T563] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.465668][ T564] note: syz.4.186[564] exited with preempt_count 1 [ 35.472670][ T563] note: syz.1.185[563] exited with preempt_count 1 [ 35.483170][ T566] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.495497][ T566] note: syz.0.190[566] exited with preempt_count 1 [ 35.512010][ T567] erofs: (device loop6): mounted with root inode @ nid 36. [ 35.520114][ T568] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.527509][ T569] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.535244][ T567] note: syz.6.188[567] exited with preempt_count 1 [ 35.538962][ T570] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.544312][ T568] note: syz.2.189[568] exited with preempt_count 1 [ 35.558240][ T569] note: syz.4.191[569] exited with preempt_count 1 [ 35.565732][ T570] note: syz.1.192[570] exited with preempt_count 1 [ 35.609370][ T571] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.626458][ T571] note: syz.0.193[571] exited with preempt_count 1 [ 35.668813][ T574] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.668836][ T573] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.677457][ T574] note: syz.2.196[574] exited with preempt_count 1 [ 35.690771][ T572] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.696661][ T573] note: syz.1.197[573] exited with preempt_count 1 [ 35.705170][ T572] note: syz.4.195[572] exited with preempt_count 1 [ 35.713395][ T575] erofs: (device loop6): mounted with root inode @ nid 36. [ 35.721516][ T575] note: syz.6.194[575] exited with preempt_count 1 [ 35.729840][ T576] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.737896][ T576] note: syz.0.198[576] exited with preempt_count 1 [ 35.781640][ T578] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.789539][ T577] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.797889][ T577] note: syz.2.199[577] exited with preempt_count 1 [ 35.803017][ T578] note: syz.1.200[578] exited with preempt_count 1 [ 35.811524][ T579] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.816687][ T580] erofs: (device loop6): mounted with root inode @ nid 36. [ 35.821165][ T579] note: syz.4.201[579] exited with preempt_count 1 [ 35.827967][ T580] note: syz.6.202[580] exited with preempt_count 1 [ 35.866161][ T583] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.869640][ T581] erofs: (device loop0): mounted with root inode @ nid 36. [ 35.885010][ T583] note: syz.4.206[583] exited with preempt_count 1 [ 35.885948][ T581] note: syz.0.203[581] exited with preempt_count 1 [ 35.918348][ T582] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.926229][ T582] note: syz.2.204[582] exited with preempt_count 1 [ 35.932984][ T584] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.940407][ T585] erofs: (device loop6): mounted with root inode @ nid 36. [ 35.942386][ T584] BUG: scheduling while atomic: syz.1.205/584/0x00000002 [ 35.955012][ T584] Modules linked in: [ 35.958983][ T584] Preemption disabled at: [ 35.958993][ T584] [] z_erofs_reload_indexes+0x310/0x410 [ 35.970521][ T584] CPU: 0 PID: 584 Comm: syz.1.205 Tainted: G W syzkaller #0 [ 35.979262][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 35.985315][ T585] note: syz.6.207[585] exited with preempt_count 1 [ 35.989348][ T584] Call Trace: [ 35.989361][ T584] [ 35.989367][ T584] __dump_stack+0x21/0x30 [ 35.989393][ T584] dump_stack_lvl+0x110/0x170 [ 36.011185][ T584] ? show_regs_print_info+0x20/0x20 [ 36.017041][ T584] ? z_erofs_reload_indexes+0x310/0x410 [ 36.022937][ T584] dump_stack+0x15/0x20 [ 36.027916][ T584] __schedule_bug+0x180/0x230 [ 36.032625][ T584] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 36.038425][ T584] ? selinux_file_ioctl+0x3a0/0x4d0 [ 36.044159][ T584] __schedule+0xc30/0x14c0 [ 36.048590][ T584] ? release_firmware_map_entry+0x190/0x190 [ 36.054618][ T584] ? security_file_ioctl+0x84/0xa0 [ 36.059999][ T584] schedule+0x11e/0x1e0 [ 36.064180][ T584] exit_to_user_mode_loop+0x50/0xe0 [ 36.069389][ T584] exit_to_user_mode_prepare+0x87/0xd0 [ 36.075067][ T584] syscall_exit_to_user_mode+0x1a/0x30 [ 36.080656][ T584] do_syscall_64+0x58/0xa0 [ 36.085187][ T584] ? clear_bhb_loop+0x50/0xa0 [ 36.090562][ T584] ? clear_bhb_loop+0x50/0xa0 [ 36.095250][ T584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.101239][ T584] RIP: 0033:0x7f9a8f8bbe59 [ 36.105657][ T584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.125460][ T584] RSP: 002b:00007ffd7caf7108 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.133986][ T584] RAX: 0000000000000000 RBX: 00007f9a8fb34fa0 RCX: 00007f9a8f8bbe59 [ 36.141997][ T584] RDX: 00002000000005c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 36.150060][ T584] RBP: 00007f9a8f951d6f R08: 0000000000000000 R09: 0000000000000000 [ 36.158040][ T584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.166033][ T584] R13: 00007f9a8fb34fac R14: 00007f9a8fb34fa0 R15: 00007f9a8fb34fa0 [ 36.174105][ T584] [ 36.202078][ T586] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.209603][ T587] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.217909][ T586] note: syz.0.209[586] exited with preempt_count 1 [ 36.220533][ T587] note: syz.4.208[587] exited with preempt_count 1 [ 36.252195][ T589] erofs: (device loop1): mounted with root inode @ nid 36. [ 36.252223][ T590] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.259722][ T588] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.278693][ T589] note: syz.1.212[589] exited with preempt_count 1 [ 36.281075][ T590] note: syz.6.211[590] exited with preempt_count 1 [ 36.286479][ T588] note: syz.2.210[588] exited with preempt_count 1 [ 36.300721][ T592] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.308548][ T592] note: syz.4.214[592] exited with preempt_count 1 [ 36.317935][ T591] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.325569][ T591] note: syz.0.213[591] exited with preempt_count 1 [ 36.351874][ T593] erofs: (device loop1): mounted with root inode @ nid 36. [ 36.359290][ T594] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.361163][ T595] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.375311][ T595] note: syz.2.217[595] exited with preempt_count 1 [ 36.375319][ T593] note: syz.1.216[593] exited with preempt_count 1 [ 36.380141][ T594] note: syz.6.215[594] exited with preempt_count 1 [ 36.398290][ T596] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.406509][ T596] note: syz.4.218[596] exited with preempt_count 1 [ 36.438979][ T597] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.446697][ T597] note: syz.0.219[597] exited with preempt_count 1 [ 36.452547][ T601] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.461379][ T601] note: syz.4.223[601] exited with preempt_count 1 [ 36.470383][ T599] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.477821][ T600] erofs: (device loop1): mounted with root inode @ nid 36. [ 36.485145][ T599] note: syz.6.222[599] exited with preempt_count 1 [ 36.486082][ T600] note: syz.1.221[600] exited with preempt_count 1 [ 36.508109][ T602] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.516148][ T602] note: syz.2.225[602] exited with preempt_count 1 [ 36.523695][ T603] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.534763][ T603] note: syz.0.224[603] exited with preempt_count 1 [ 36.542388][ T604] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.553538][ T604] note: syz.4.226[604] exited with preempt_count 1 [ 36.562657][ T606] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.570733][ T606] note: syz.6.227[606] exited with preempt_count 1 [ 36.581738][ T607] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.583005][ T605] erofs: (device loop1): mounted with root inode @ nid 36. [ 36.590381][ T607] note: syz.2.229[607] exited with preempt_count 1 [ 36.607360][ T605] note: syz.1.228[605] exited with preempt_count 1 [ 36.628951][ T608] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.636642][ T608] note: syz.0.230[608] exited with preempt_count 1 [ 36.645420][ T609] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.647935][ T610] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.662712][ T609] note: syz.4.231[609] exited with preempt_count 1 [ 36.662712][ T610] note: syz.6.232[610] exited with preempt_count 1 [ 36.688115][ T611] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.695707][ T611] note: syz.2.233[611] exited with preempt_count 1 [ 36.708112][ T612] erofs: (device loop1): mounted with root inode @ nid 36. [ 36.715136][ T613] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.717311][ T612] note: syz.1.234[612] exited with preempt_count 1 [ 36.729295][ T613] note: syz.0.235[613] exited with preempt_count 1 [ 36.738889][ T614] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.751683][ T615] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.756763][ T614] note: syz.4.236[614] exited with preempt_count 1 [ 36.766298][ T615] note: syz.6.237[615] exited with preempt_count 1 [ 36.788330][ T616] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.797669][ T617] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.801376][ T618] erofs: (device loop1): mounted with root inode @ nid 36. [ 36.807098][ T617] note: syz.0.239[617] exited with preempt_count 1 [ 36.821581][ T616] note: syz.2.238[616] exited with preempt_count 1 [ 36.830248][ T618] note: syz.1.240[618] exited with preempt_count 1 [ 36.858818][ T619] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.872873][ T619] note: syz.6.242[619] exited with preempt_count 1 [ 36.879944][ T620] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.891254][ T620] note: syz.4.241[620] exited with preempt_count 1 [ 36.921067][ T622] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.921067][ T623] erofs: (device loop1): mounted with root inode @ nid 36. [ 36.922274][ T623] note: syz.1.244[623] exited with preempt_count 1 [ 36.935670][ T622] note: syz.0.243[622] exited with preempt_count 1 [ 36.938245][ T621] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.963600][ T621] note: syz.2.245[621] exited with preempt_count 1 [ 36.978360][ T624] erofs: (device loop6): mounted with root inode @ nid 36. [ 36.986103][ T624] note: syz.6.246[624] exited with preempt_count 1 [ 36.998464][ T625] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.006324][ T625] note: syz.4.247[625] exited with preempt_count 1 [ 37.018770][ T627] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.026480][ T627] note: syz.0.248[627] exited with preempt_count 1 [ 37.037863][ T626] erofs: (device loop1): mounted with root inode @ nid 36. [ 37.048140][ T626] note: syz.1.249[626] exited with preempt_count 1 [ 37.059179][ T628] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.066907][ T628] note: syz.2.250[628] exited with preempt_count 1 [ 37.071524][ T629] erofs: (device loop6): mounted with root inode @ nid 36. [ 37.082026][ T630] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.093411][ T630] note: syz.4.252[630] exited with preempt_count 1 [ 37.097048][ T629] note: syz.6.251[629] exited with preempt_count 1 [ 37.128779][ T631] erofs: (device loop1): mounted with root inode @ nid 36. [ 37.136486][ T631] note: syz.1.254[631] exited with preempt_count 1 [ 37.152619][ T632] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.160350][ T632] note: syz.0.253[632] exited with preempt_count 1 [ 37.167130][ T633] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.170744][ T634] erofs: (device loop6): mounted with root inode @ nid 36. [ 37.181912][ T635] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.186434][ T634] note: syz.6.257[634] exited with preempt_count 1 [ 37.196659][ T633] note: syz.2.255[633] exited with preempt_count 1 [ 37.203867][ T635] note: syz.4.256[635] exited with preempt_count 1 [ 37.240921][ T637] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.244066][ T636] erofs: (device loop1): mounted with root inode @ nid 36. [ 37.259006][ T636] note: syz.1.258[636] exited with preempt_count 1 [ 37.263432][ T637] note: syz.0.259[637] exited with preempt_count 1 [ 37.288638][ T640] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.288638][ T639] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.290616][ T639] note: syz.2.261[639] exited with preempt_count 1 [ 37.305816][ T640] note: syz.4.262[640] exited with preempt_count 1 [ 37.338147][ T638] erofs: (device loop6): mounted with root inode @ nid 36. [ 37.345935][ T638] note: syz.6.260[638] exited with preempt_count 1 [ 37.358142][ T642] erofs: (device loop1): mounted with root inode @ nid 36. [ 37.365582][ T641] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.366610][ T642] note: syz.1.263[642] exited with preempt_count 1 [ 37.379195][ T641] note: syz.0.264[641] exited with preempt_count 1 [ 37.390497][ T643] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.398872][ T643] BUG: scheduling while atomic: syz.2.265/643/0x00000002 [ 37.406108][ T643] Modules linked in: [ 37.410188][ T643] Preemption disabled at: [ 37.410199][ T643] [] z_erofs_reload_indexes+0x310/0x410 [ 37.421792][ T643] CPU: 1 PID: 643 Comm: syz.2.265 Tainted: G W syzkaller #0 [ 37.430502][ T643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 37.440911][ T643] Call Trace: [ 37.444215][ T643] [ 37.447167][ T643] __dump_stack+0x21/0x30 [ 37.451512][ T643] dump_stack_lvl+0x110/0x170 [ 37.456200][ T643] ? show_regs_print_info+0x20/0x20 [ 37.461402][ T643] ? __hrtimer_run_queues+0x85e/0x8c0 [ 37.467812][ T643] ? z_erofs_reload_indexes+0x310/0x410 [ 37.473452][ T643] dump_stack+0x15/0x20 [ 37.477622][ T643] __schedule_bug+0x180/0x230 [ 37.482683][ T643] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 37.488046][ T643] ? ktime_get+0x12f/0x160 [ 37.492470][ T643] ? lapic_next_event+0x5f/0x70 [ 37.497601][ T643] __schedule+0xc30/0x14c0 [ 37.502167][ T643] ? release_firmware_map_entry+0x190/0x190 [ 37.508762][ T643] ? kvm_sched_clock_read+0x18/0x40 [ 37.514114][ T643] ? sched_clock+0x9/0x10 [ 37.518542][ T643] ? sched_clock_cpu+0x18/0x3c0 [ 37.523406][ T643] schedule+0x11e/0x1e0 [ 37.527786][ T643] exit_to_user_mode_loop+0x50/0xe0 [ 37.533004][ T643] exit_to_user_mode_prepare+0x87/0xd0 [ 37.538743][ T643] irqentry_exit_to_user_mode+0x9/0x10 [ 37.544400][ T643] irqentry_exit+0x12/0x40 [ 37.549029][ T643] sysvec_apic_timer_interrupt+0x64/0xc0 [ 37.554764][ T643] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 37.560763][ T643] RIP: 0033:0x7ff4bec96e59 [ 37.565390][ T643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.585097][ T643] RSP: 002b:00007fffea9dab68 EFLAGS: 00000246 [ 37.591257][ T643] RAX: 0000000000000000 RBX: 00007ff4bef0ffa0 RCX: 00007ff4bec96e59 [ 37.599238][ T643] RDX: 00002000000005c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 37.607565][ T643] RBP: 00007ff4bed2cd6f R08: 0000000000000000 R09: 0000000000000000 [ 37.615643][ T643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.623625][ T643] R13: 00007ff4bef0ffac R14: 00007ff4bef0ffa0 R15: 00007ff4bef0ffa0 [ 37.631605][ T643] [ 37.638056][ T644] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.645755][ T644] note: syz.4.266[644] exited with preempt_count 1 [ 37.658990][ T645] erofs: (device loop6): mounted with root inode @ nid 36. [ 37.667066][ T645] note: syz.6.267[645] exited with preempt_count 1 [ 37.698116][ T646] erofs: (device loop1): mounted with root inode @ nid 36. [ 37.705927][ T646] note: syz.1.268[646] exited with preempt_count 1 [ 37.714433][ T648] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.721890][ T647] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.723694][ T649] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.739204][ T648] note: syz.2.270[648] exited with preempt_count 1 [ 37.747360][ T647] note: syz.0.269[647] exited with preempt_count 1 [ 37.757552][ T649] BUG: scheduling while atomic: syz.4.271/649/0x00000002 [ 37.764660][ T649] Modules linked in: [ 37.768637][ T649] Preemption disabled at: [ 37.768649][ T649] [] z_erofs_reload_indexes+0x310/0x410 [ 37.780334][ T649] CPU: 0 PID: 649 Comm: syz.4.271 Tainted: G W syzkaller #0 [ 37.788958][ T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 37.799166][ T649] Call Trace: [ 37.802458][ T649] [ 37.805404][ T649] __dump_stack+0x21/0x30 [ 37.810119][ T649] dump_stack_lvl+0x110/0x170 [ 37.814814][ T649] ? show_regs_print_info+0x20/0x20 [ 37.820035][ T649] ? z_erofs_reload_indexes+0x310/0x410 [ 37.825690][ T649] dump_stack+0x15/0x20 [ 37.829853][ T649] __schedule_bug+0x180/0x230 [ 37.834543][ T649] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 37.839837][ T649] ? rcu_gp_kthread_wake+0x90/0x90 [ 37.845135][ T649] __schedule+0xc30/0x14c0 [ 37.849571][ T649] ? blkcg_maybe_throttle_current+0x1e0/0xa10 [ 37.855680][ T649] ? release_firmware_map_entry+0x190/0x190 [ 37.861666][ T649] ? __blkcg_punt_bio_submit+0x170/0x170 [ 37.867393][ T649] ? unlock_page_memcg+0x130/0x130 [ 37.872509][ T649] ? ____fput+0x15/0x20 [ 37.876764][ T649] schedule+0x11e/0x1e0 [ 37.881078][ T649] exit_to_user_mode_loop+0x50/0xe0 [ 37.886299][ T649] exit_to_user_mode_prepare+0x87/0xd0 [ 37.891896][ T649] syscall_exit_to_user_mode+0x1a/0x30 [ 37.897364][ T649] do_syscall_64+0x58/0xa0 [ 37.901825][ T649] ? clear_bhb_loop+0x50/0xa0 [ 37.906527][ T649] ? clear_bhb_loop+0x50/0xa0 [ 37.911580][ T649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.917560][ T649] RIP: 0033:0x7fe794c82e59 [ 37.922085][ T649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 2026/05/23 15:49:25 executed programs: 267 [ 37.942943][ T649] RSP: 002b:00007ffffe79ca08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 37.952028][ T649] RAX: 0000000000000000 RBX: 00007ffffe79caf0 RCX: 00007fe794c82e59 [ 37.960017][ T649] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 37.968099][ T649] RBP: 000000000000931b R08: 0000000000000001 R09: 0000000000000000 [ 37.976161][ T649] R10: 0000001b33820000 R11: 0000000000000246 R12: 0000000000000000 [ 37.985113][ T649] R13: 00007fe794efbfac R14: 00007fe794efbfa8 R15: 00007fe794efbfa0 [ 37.993233][ T649] [ 38.004757][ T650] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.012890][ T650] note: syz.1.273[650] exited with preempt_count 1 [ 38.019110][ T651] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.028340][ T651] note: syz.6.272[651] exited with preempt_count 1 [ 38.031629][ T652] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.043439][ T652] note: syz.2.274[652] exited with preempt_count 1 [ 38.071185][ T653] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.078608][ T654] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.086317][ T654] note: syz.4.276[654] exited with preempt_count 1 [ 38.095311][ T653] note: syz.0.275[653] exited with preempt_count 1 [ 38.103801][ T655] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.109251][ T657] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.119192][ T655] note: syz.1.278[655] exited with preempt_count 1 [ 38.127793][ T656] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.135413][ T656] note: syz.6.277[656] exited with preempt_count 1 [ 38.147099][ T657] note: syz.2.279[657] exited with preempt_count 1 [ 38.173111][ T658] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.180861][ T658] note: syz.4.280[658] exited with preempt_count 1 [ 38.208152][ T659] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.216061][ T659] note: syz.0.281[659] exited with preempt_count 1 [ 38.222879][ T661] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.231364][ T661] note: syz.1.282[661] exited with preempt_count 1 [ 38.237767][ T662] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.245560][ T660] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.254421][ T662] note: syz.6.283[662] exited with preempt_count 1 [ 38.259571][ T660] note: syz.2.284[660] exited with preempt_count 1 [ 38.270455][ T663] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.279186][ T663] note: syz.4.285[663] exited with preempt_count 1 [ 38.333011][ T664] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.341435][ T665] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.349973][ T665] note: syz.1.287[665] exited with preempt_count 1 [ 38.357980][ T664] note: syz.0.286[664] exited with preempt_count 1 [ 38.366441][ T666] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.374443][ T666] note: syz.6.288[666] exited with preempt_count 1 [ 38.376632][ T667] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.388744][ T667] note: syz.2.289[667] exited with preempt_count 1 [ 38.401658][ T668] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.410867][ T668] note: syz.4.290[668] exited with preempt_count 1 [ 38.420645][ T669] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.429380][ T669] note: syz.1.291[669] exited with preempt_count 1 [ 38.448168][ T670] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.455955][ T670] note: syz.0.292[670] exited with preempt_count 1 [ 38.464719][ T672] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.472285][ T671] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.473550][ T672] note: syz.6.293[672] exited with preempt_count 1 [ 38.490024][ T671] note: syz.2.294[671] exited with preempt_count 1 [ 38.510596][ T674] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.518295][ T673] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.527860][ T674] note: syz.4.295[674] exited with preempt_count 1 [ 38.533441][ T673] note: syz.1.296[673] exited with preempt_count 1 [ 38.558633][ T675] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.559735][ T677] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.566316][ T676] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.582874][ T675] note: syz.6.298[675] exited with preempt_count 1 [ 38.590093][ T677] note: syz.2.299[677] exited with preempt_count 1 [ 38.598265][ T676] note: syz.0.297[676] exited with preempt_count 1 [ 38.616172][ T678] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.625415][ T679] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.637282][ T679] note: syz.4.300[679] exited with preempt_count 1 [ 38.645973][ T678] note: syz.1.301[678] exited with preempt_count 1 [ 38.659261][ T681] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.666973][ T681] note: syz.0.303[681] exited with preempt_count 1 [ 38.675743][ T682] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.683154][ T680] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.684452][ T680] note: syz.6.302[680] exited with preempt_count 1 [ 38.697874][ T683] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.703970][ T682] note: syz.2.304[682] exited with preempt_count 1 [ 38.706437][ T683] note: syz.4.305[683] exited with preempt_count 1 [ 38.742387][ T684] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.752323][ T684] note: syz.1.306[684] exited with preempt_count 1 [ 38.764308][ T685] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.772117][ T685] note: syz.0.307[685] exited with preempt_count 1 [ 38.780007][ T686] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.782914][ T688] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.788972][ T686] note: syz.2.309[686] exited with preempt_count 1 [ 38.803062][ T687] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.811804][ T688] note: syz.4.310[688] exited with preempt_count 1 [ 38.815086][ T687] note: syz.6.308[687] exited with preempt_count 1 [ 38.837582][ T689] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.847452][ T689] note: syz.1.311[689] exited with preempt_count 1 [ 38.867646][ T690] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.876006][ T690] note: syz.2.313[690] exited with preempt_count 1 [ 38.901989][ T692] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.910728][ T692] note: syz.6.314[692] exited with preempt_count 1 [ 38.917706][ T691] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.926193][ T691] note: syz.0.312[691] exited with preempt_count 1 [ 38.941585][ T693] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.950001][ T695] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.957477][ T693] note: syz.4.315[693] exited with preempt_count 1 [ 38.957697][ T694] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.971789][ T696] erofs: (device loop6): mounted with root inode @ nid 36. [ 38.971984][ T695] note: syz.2.317[695] exited with preempt_count 1 [ 38.988852][ T694] note: syz.1.316[694] exited with preempt_count 1 [ 38.989940][ T696] note: syz.6.318[696] exited with preempt_count 1 [ 39.038250][ T697] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.046050][ T697] note: syz.0.319[697] exited with preempt_count 1 [ 39.072257][ T699] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.079794][ T700] erofs: (device loop6): mounted with root inode @ nid 36. [ 39.088270][ T701] erofs: (device loop4): mounted with root inode @ nid 36. [ 39.096438][ T701] note: syz.4.322[701] exited with preempt_count 1 [ 39.099097][ T699] note: syz.1.321[699] exited with preempt_count 1 [ 39.106207][ T698] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.118020][ T700] note: syz.6.323[700] exited with preempt_count 1 [ 39.118730][ T702] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.129586][ T698] note: syz.2.320[698] exited with preempt_count 1 [ 39.143002][ T702] note: syz.0.324[702] exited with preempt_count 1 [ 39.219030][ T707] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.221216][ T705] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.226887][ T704] erofs: (device loop4): mounted with root inode @ nid 36. [ 39.241539][ T703] erofs: (device loop6): mounted with root inode @ nid 36. [ 39.245311][ T706] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.250268][ T707] note: syz.0.329[707] exited with preempt_count 1 [ 39.263629][ T704] note: syz.4.326[704] exited with preempt_count 1 [ 39.270827][ T703] note: syz.6.325[703] exited with preempt_count 1 [ 39.270852][ T705] note: syz.1.328[705] exited with preempt_count 1 [ 39.285006][ T706] note: syz.2.327[706] exited with preempt_count 1 [ 39.368669][ T709] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.368669][ T708] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.369816][ T709] note: syz.0.331[709] exited with preempt_count 1 [ 39.377567][ T712] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.390901][ T708] note: syz.1.334[708] exited with preempt_count 1 [ 39.405107][ T711] erofs: (device loop6): mounted with root inode @ nid 36. [ 39.412543][ T710] erofs: (device loop4): mounted with root inode @ nid 36. [ 39.413518][ T712] note: syz.2.333[712] exited with preempt_count 1 [ 39.428262][ T710] note: syz.4.332[710] exited with preempt_count 1 [ 39.436666][ T711] note: syz.6.330[711] exited with preempt_count 1 [ 39.449831][ T713] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.458410][ T713] note: syz.0.335[713] exited with preempt_count 1 [ 39.481878][ T716] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.489619][ T715] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.489849][ T716] note: syz.2.338[716] exited with preempt_count 1 [ 39.500402][ T715] note: syz.1.336[715] exited with preempt_count 1 [ 39.529923][ T717] erofs: (device loop6): mounted with root inode @ nid 36. [ 39.534491][ T714] erofs: (device loop4): mounted with root inode @ nid 36. [ 39.537404][ T718] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.552139][ T717] note: syz.6.339[717] exited with preempt_count 1 [ 39.562900][ T718] note: syz.0.340[718] exited with preempt_count 1 [ 39.570004][ T714] note: syz.4.337[714] exited with preempt_count 1 [ 39.613328][ T719] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.620957][ T720] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.630385][ T719] note: syz.1.342[719] exited with preempt_count 1 [ 39.637393][ T720] note: syz.2.341[720] exited with preempt_count 1 [ 39.644928][ T722] erofs: (device loop6): mounted with root inode @ nid 36. [ 39.654384][ T722] note: syz.6.343[722] exited with preempt_count 1 [ 39.660147][ T721] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.674483][ T721] note: syz.0.344[721] exited with preempt_count 1 [ 39.708594][ T724] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.715358][ T725] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.724241][ T723] erofs: (device loop4): mounted with root inode @ nid 36. [ 39.733873][ T725] note: syz.2.347[725] exited with preempt_count 1 [ 39.734058][ T724] note: syz.1.346[724] exited with preempt_count 1 [ 39.748160][ T723] note: syz.4.345[723] exited with preempt_count 1 [ 39.768348][ T727] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.768354][ T726] erofs: (device loop6): mounted with root inode @ nid 36. [ 39.769498][ T727] note: syz.0.349[727] exited with preempt_count 1 [ 39.776776][ T726] note: syz.6.348[726] exited with preempt_count 1 [ 39.848992][ T730] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.856390][ T729] erofs: (device loop4): mounted with root inode @ nid 36. [ 39.859416][ T730] note: syz.1.352[730] exited with preempt_count 1 [ 39.870576][ T728] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.877008][ T729] note: syz.4.351[729] exited with preempt_count 1 [ 39.878999][ T728] note: syz.2.350[728] exited with preempt_count 1 [ 39.898507][ T731] erofs: (device loop6): mounted with root inode @ nid 36. [ 39.905977][ T732] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.906848][ T731] note: syz.6.354[731] exited with preempt_count 1 [ 39.919912][ T732] note: syz.0.353[732] exited with preempt_count 1 [ 39.968559][ T734] erofs: (device loop4): mounted with root inode @ nid 36. [ 39.976205][ T733] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.977101][ T734] note: syz.4.357[734] exited with preempt_count 1 [ 39.984319][ T735] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.997970][ T733] note: syz.2.356[733] exited with preempt_count 1 [ 39.999987][ T735] note: syz.1.355[735] exited with preempt_count 1 [ 40.031777][ T736] erofs: (device loop6): mounted with root inode @ nid 36. [ 40.034963][ T739] set_capacity_and_notify: 178 callbacks suppressed [ 40.035007][ T739] loop4: detected capacity change from 0 to 16 [ 40.040890][ T736] note: syz.6.358[736] exited with preempt_count 1 [ 40.052906][ T737] erofs: (device loop0): mounted with root inode @ nid 36. [ 40.065762][ T740] loop1: detected capacity change from 0 to 16 [ 40.073368][ T738] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.077801][ T737] BUG: scheduling while atomic: syz.0.359/737/0x00000002 [ 40.082512][ T738] note: syz.2.361[738] exited with preempt_count 1 [ 40.087889][ T737] Modules linked in: [ 40.098988][ T737] Preemption disabled at: [ 40.098997][ T737] [] z_erofs_reload_indexes+0x310/0x410 [ 40.110707][ T737] CPU: 1 PID: 737 Comm: syz.0.359 Tainted: G W syzkaller #0 [ 40.119523][ T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 40.129630][ T737] Call Trace: [ 40.132936][ T737] [ 40.135881][ T737] __dump_stack+0x21/0x30 [ 40.140223][ T737] dump_stack_lvl+0x110/0x170 [ 40.144925][ T737] ? show_regs_print_info+0x20/0x20 [ 40.150129][ T737] ? z_erofs_reload_indexes+0x310/0x410 [ 40.155679][ T737] dump_stack+0x15/0x20 [ 40.159882][ T737] __schedule_bug+0x180/0x230 [ 40.164860][ T737] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 40.170304][ T737] ? _raw_spin_lock+0x94/0xf0 [ 40.175620][ T737] ? _raw_spin_trylock_bh+0x150/0x150 [ 40.181004][ T737] __schedule+0xc30/0x14c0 [ 40.185429][ T737] ? _raw_spin_unlock+0x4d/0x70 [ 40.190314][ T737] ? pick_file+0x252/0x2c0 [ 40.194740][ T737] ? release_firmware_map_entry+0x190/0x190 [ 40.200642][ T737] ? __close_range+0x39e/0x420 [ 40.205450][ T737] ? pick_file+0x2c0/0x2c0 [ 40.209961][ T737] schedule+0x11e/0x1e0 [ 40.214119][ T737] exit_to_user_mode_loop+0x50/0xe0 [ 40.219320][ T737] exit_to_user_mode_prepare+0x87/0xd0 [ 40.224789][ T737] syscall_exit_to_user_mode+0x1a/0x30 [ 40.230261][ T737] do_syscall_64+0x58/0xa0 [ 40.234683][ T737] ? clear_bhb_loop+0x50/0xa0 [ 40.239506][ T737] ? clear_bhb_loop+0x50/0xa0 [ 40.244195][ T737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.250095][ T737] RIP: 0033:0x7f92a9ee1e59 [ 40.254515][ T737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.274218][ T737] RSP: 002b:00007ffeb0140e38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 40.282645][ T737] RAX: 0000000000000000 RBX: 00007ffeb0140f20 RCX: 00007f92a9ee1e59 [ 40.290765][ T737] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 40.298833][ T737] RBP: 0000000000009c3d R08: 0000000000000001 R09: 0000000000000000 [ 40.306817][ T737] R10: 0000001b33120000 R11: 0000000000000246 R12: 0000000000000000 [ 40.314795][ T737] R13: 00007f92aa15afac R14: 00007f92aa15afa8 R15: 00007f92aa15afa0 [ 40.322916][ T737] [ 40.351021][ T739] erofs: (device loop4): mounted with root inode @ nid 36. [ 40.358608][ T740] erofs: (device loop1): mounted with root inode @ nid 36. [ 40.366331][ T740] note: syz.1.362[740] exited with preempt_count 1 [ 40.374568][ T742] loop2: detected capacity change from 0 to 16 [ 40.379599][ T741] loop0: detected capacity change from 0 to 16 [ 40.388062][ T739] note: syz.4.360[739] exited with preempt_count 1 [ 40.392167][ T743] erofs: (device loop6): mounted with root inode @ nid 36. [ 40.404324][ T743] note: syz.6.364[743] exited with preempt_count 1 [ 40.433037][ T744] loop4: detected capacity change from 0 to 16 [ 40.437387][ T741] erofs: (device loop0): mounted with root inode @ nid 36. [ 40.439744][ T742] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.451778][ T745] loop1: detected capacity change from 0 to 16 [ 40.463031][ T746] loop6: detected capacity change from 0 to 16 [ 40.469581][ T741] note: syz.0.365[741] exited with preempt_count 1 [ 40.471192][ T742] note: syz.2.363[742] exited with preempt_count 1 [ 40.486606][ T746] erofs: (device loop6): mounted with root inode @ nid 36. [ 40.494799][ T746] note: syz.6.368[746] exited with preempt_count 1 [ 40.518770][ T745] erofs: (device loop1): mounted with root inode @ nid 36. [ 40.527689][ T747] loop2: detected capacity change from 0 to 16 [ 40.534131][ T744] erofs: (device loop4): mounted with root inode @ nid 36. [ 40.536468][ T748] loop6: detected capacity change from 0 to 16 [ 40.543430][ T745] note: syz.1.366[745] exited with preempt_count 1 [ 40.554710][ T744] BUG: scheduling while atomic: syz.4.367/744/0x00000002 [ 40.561846][ T744] Modules linked in: [ 40.565763][ T744] Preemption disabled at: [ 40.565772][ T744] [] z_erofs_reload_indexes+0x310/0x410 [ 40.570564][ T749] loop0: detected capacity change from 0 to 16 [ 40.577282][ T744] CPU: 1 PID: 744 Comm: syz.4.367 Tainted: G W syzkaller #0 [ 40.577302][ T744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 40.577313][ T744] Call Trace: [ 40.577318][ T744] [ 40.577326][ T744] __dump_stack+0x21/0x30 [ 40.612661][ T744] dump_stack_lvl+0x110/0x170 [ 40.617352][ T744] ? show_regs_print_info+0x20/0x20 [ 40.622591][ T744] ? z_erofs_reload_indexes+0x310/0x410 [ 40.628157][ T744] dump_stack+0x15/0x20 [ 40.632459][ T744] __schedule_bug+0x180/0x230 [ 40.637153][ T744] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 40.642444][ T744] ? _raw_spin_lock+0x94/0xf0 [ 40.647141][ T744] ? _raw_spin_trylock_bh+0x150/0x150 [ 40.652711][ T744] ? task_work_add+0x11e/0x1e0 [ 40.657535][ T744] __schedule+0xc30/0x14c0 [ 40.661974][ T744] ? _raw_spin_unlock+0x4d/0x70 [ 40.666826][ T744] ? pick_file+0x252/0x2c0 [ 40.671247][ T744] ? release_firmware_map_entry+0x190/0x190 [ 40.677174][ T744] ? __close_range+0x39e/0x420 [ 40.681943][ T744] ? pick_file+0x2c0/0x2c0 [ 40.686537][ T744] schedule+0x11e/0x1e0 [ 40.690977][ T744] exit_to_user_mode_loop+0x50/0xe0 [ 40.696176][ T744] exit_to_user_mode_prepare+0x87/0xd0 [ 40.701634][ T744] syscall_exit_to_user_mode+0x1a/0x30 [ 40.707208][ T744] do_syscall_64+0x58/0xa0 [ 40.711717][ T744] ? clear_bhb_loop+0x50/0xa0 [ 40.716661][ T744] ? clear_bhb_loop+0x50/0xa0 [ 40.721351][ T744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.727252][ T744] RIP: 0033:0x7fe794c82e59 [ 40.731951][ T744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.751917][ T744] RSP: 002b:00007ffffe79ca08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 40.760545][ T744] RAX: 0000000000000000 RBX: 00007ffffe79caf0 RCX: 00007fe794c82e59 [ 40.768714][ T744] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 40.776695][ T744] RBP: 0000000000009dde R08: 0000000000000001 R09: 0000000000000000 [ 40.784769][ T744] R10: 0000001b33820000 R11: 0000000000000246 R12: 0000000000000000 [ 40.792863][ T744] R13: 00007fe794efbfac R14: 00007fe794efbfa8 R15: 00007fe794efbfa0 [ 40.800849][ T744] [ 40.808789][ T748] erofs: (device loop6): mounted with root inode @ nid 36. [ 40.808898][ T749] erofs: (device loop0): mounted with root inode @ nid 36. [ 40.817415][ T748] note: syz.6.371[748] exited with preempt_count 1 [ 40.825242][ T749] note: syz.0.369[749] exited with preempt_count 1 [ 40.837887][ T747] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.845627][ T747] note: syz.2.370[747] exited with preempt_count 1 [ 40.888998][ T751] erofs: (device loop4): mounted with root inode @ nid 36. [ 40.888998][ T750] erofs: (device loop1): mounted with root inode @ nid 36. [ 40.890243][ T751] note: syz.4.373[751] exited with preempt_count 1 [ 40.908002][ T750] note: syz.1.372[750] exited with preempt_count 1 [ 40.921407][ T752] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.929196][ T753] erofs: (device loop6): mounted with root inode @ nid 36.