last executing test programs: 6.356821227s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c7401, 0x98) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x80000000, 0x10, 0x0, 0x7, 0x80000001, 0x3, 0x0, 0x0, 0x20, 0x7}}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0xeeef0000, 0x6, 0x200, 0x2, 0x0, [{0x1, 0x0, 0xe, '\x00', 0x6}, {0x0, 0xfd, 0x7, '\x00', 0x8}, {0x69, 0x5, 0x9, '\x00', 0x2}, {0x3, 0x5, 0x7, '\x00', 0x6}, {0x8, 0x46, 0x9, '\x00', 0x8}, {0x3, 0x9, 0xcc, '\x00', 0xb}, {0x6, 0xf, 0x7, '\x00', 0x7}, {0x2, 0x7, 0x7, '\x00', 0x5}, {0x0, 0x2, 0xb4, '\x00', 0x9}, {0x1, 0x6, 0x4, '\x00', 0xf7}, {0x7, 0x3, 0xa0, '\x00', 0x8}, {0x2, 0x1, 0x5, '\x00', 0x52}, {0xb, 0x34, 0x0, '\x00', 0x5}, {0x5, 0x5, 0xbb, '\x00', 0x6}, {0x3, 0xf9, 0xfd, '\x00', 0xfc}, {0x8, 0x4, 0x5, '\x00', 0x6}, {0x6, 0x18, 0x4, '\x00', 0xd}, {0x6, 0x3, 0xe0, '\x00', 0x9}, {0x1, 0x8, 0x7, '\x00', 0x81}, {0xc9, 0x3, 0x6, '\x00', 0x81}, {0x8, 0x45, 0x7, '\x00', 0x2}, {0x14, 0x83}, {0x3, 0x7c, 0xc9, '\x00', 0x5}, {0x9, 0x3, 0xb5, '\x00', 0x50}]}}) ptrace(0x10, r3) 6.241567822s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b25, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200003, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYRESOCT], 0x12, 0xc38, &(0x7f0000001080)="$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") r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x541b, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000640)=0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r6, 0x400, 0x1) 5.189937538s ago: executing program 2 (id=5): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0xdc) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x42002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) fspick(0xffffffffffffffff, 0x0, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe8000000000000000000000140000aaff0200000000000000000000000000012902000000000101bc"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init() io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r3}, 0x38) 4.862147571s ago: executing program 1 (id=6): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000040)={0x800100, 0x0, 0x3, 0x100, 0x81, 0x4000003}) close_range(r4, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") 3.782718778s ago: executing program 3 (id=4): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0xdc) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x42002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) fspick(0xffffffffffffffff, 0x0, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe8000000000000000000000140000aaff0200000000000000000000000000012902000000000101bc"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60c40, 0x8) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0xb40) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r3}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f00000007c0)=ANY=[@ANYBLOB="12014002020000082505a1a440000102030109027400020139f0040904000001020d0000052406000105240000060d240f010200000000000300b9060100000020042402070c241b0000ffff855403006108241c030005c10e0905810328000408090904010000020d00000904010102020d0000090582021000067bc6090509000002100b022c42984e55ddc9543c6c669adc5c078f8c14975aa297c3693b333f57186a8f74c544a2a4ac77e11bb3c3f0a5d48cef030fd1bb368180122d48524d9c13758c1672b2c3099f150f19"], &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x45, 0x72, 0x4c, 0x40, 0x4}, 0x94, &(0x7f0000000340)=ANY=[@ANYBLOB="050f9400020a10030209000807050085100ad0fbbdcb7f42e5de73c45f0bf5734d5f95b94326af4b4bfbae2c45ef93a22d197737e31a1701aa044e5746e116459e3cb5f389015da6ef1125930c2e1be04d0a4911a40997f64a7ac1a8d326371c921a94939bba57006e26149fbff654bb34dfab72852f28b7bb6a9a4ea5b5fb0115e3fe13078c93932e1a423b9a2322383f853c79adc0e114e22442a1f7a714287ea10a8d54a58dcc563afc4d865462"], 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x444}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2807}}]}) 3.775703158s ago: executing program 2 (id=7): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) ioprio_set$uid(0x3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) fadvise64(r7, 0xe0ffff, 0x19, 0x3) 3.616504765s ago: executing program 1 (id=8): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200003, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYRESOCT], 0x12, 0xc38, &(0x7f0000001080)="$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") r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000640)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) 3.610153505s ago: executing program 0 (id=1): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) ptrace(0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 2.164702797s ago: executing program 0 (id=9): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0xdc) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x42002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) fspick(0xffffffffffffffff, 0x0, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe8000000000000000000000140000aaff0200000000000000000000000000012902000000000101bc"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60c40, 0x8) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0xb40) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r3}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f00000007c0)=ANY=[@ANYBLOB="12014002020000082505a1a440000102030109027400020139f0040904000001020d0000052406000105240000060d240f010200000000000300b9060100000020042402070c241b0000ffff855403006108241c030005c10e0905810328000408090904010000020d00000904010102020d0000090582021000067bc6090509000002100b022c42984e55ddc9543c6c669adc5c078f8c14975aa297c3693b333f57186a8f74c544a2a4ac77e11bb3c3f0a5d48cef030fd1bb368180122d48524d9c13758c1672b2c3099f150f19"], &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x45, 0x72, 0x4c, 0x40, 0x4}, 0x94, &(0x7f0000000340)=ANY=[@ANYBLOB="050f9400020a10030209000807050085100ad0fbbdcb7f42e5de73c45f0bf5734d5f95b94326af4b4bfbae2c45ef93a22d197737e31a1701aa044e5746e116459e3cb5f389015da6ef1125930c2e1be04d0a4911a40997f64a7ac1a8d326371c921a94939bba57006e26149fbff654bb34dfab72852f28b7bb6a9a4ea5b5fb0115e3fe13078c93932e1a423b9a2322383f853c79adc0e114e22442a1f7a714287ea10a8d54a58dcc563afc4d865462"], 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x444}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2807}}]}) 26.785649ms ago: executing program 3 (id=10): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000040)={0x800100, 0x0, 0x3, 0x100, 0x81, 0x4000003}) close_range(r4, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 0s ago: executing program 2 (id=11): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0xdc) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x42002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) fspick(0xffffffffffffffff, 0x0, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe8000000000000000000000140000aaff0200000000000000000000000000012902000000000101bc"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60c40, 0x8) inotify_init() io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r3}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 73.462710][ T5781] cgroup: Unknown subsys name 'net' [ 73.629712][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.222616][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.918695][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.933021][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.949665][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.960958][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.969429][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.977586][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.985424][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.993237][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.000821][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.009321][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.017493][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.021659][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.032564][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.040709][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.048071][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.056292][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.064311][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.072998][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.073548][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.083978][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.102778][ T5808] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.110759][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.132449][ T5808] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.142026][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.586758][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 77.657322][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 77.745204][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 77.785869][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 77.836755][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.844660][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.852511][ T5792] bridge_slave_0: entered allmulticast mode [ 77.859908][ T5792] bridge_slave_0: entered promiscuous mode [ 77.896279][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.903606][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.910752][ T5792] bridge_slave_1: entered allmulticast mode [ 77.918038][ T5792] bridge_slave_1: entered promiscuous mode [ 77.937711][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.944900][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.952364][ T5794] bridge_slave_0: entered allmulticast mode [ 77.959321][ T5794] bridge_slave_0: entered promiscuous mode [ 78.011451][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.018611][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.026792][ T5794] bridge_slave_1: entered allmulticast mode [ 78.034501][ T5794] bridge_slave_1: entered promiscuous mode [ 78.074862][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.095283][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.103819][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.111047][ T5793] bridge_slave_0: entered allmulticast mode [ 78.118125][ T5793] bridge_slave_0: entered promiscuous mode [ 78.132469][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.156756][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.166030][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.173774][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.180972][ T5793] bridge_slave_1: entered allmulticast mode [ 78.189012][ T5793] bridge_slave_1: entered promiscuous mode [ 78.219729][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.292957][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.303401][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.310595][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.317950][ T5791] bridge_slave_0: entered allmulticast mode [ 78.325131][ T5791] bridge_slave_0: entered promiscuous mode [ 78.335818][ T5792] team0: Port device team_slave_0 added [ 78.345074][ T5792] team0: Port device team_slave_1 added [ 78.365802][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.375408][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.382875][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.390113][ T5791] bridge_slave_1: entered allmulticast mode [ 78.397778][ T5791] bridge_slave_1: entered promiscuous mode [ 78.430075][ T5794] team0: Port device team_slave_0 added [ 78.483173][ T5794] team0: Port device team_slave_1 added [ 78.489921][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.497010][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.523070][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.540546][ T5793] team0: Port device team_slave_0 added [ 78.549064][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.561883][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.590758][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.598106][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.624259][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.636567][ T5793] team0: Port device team_slave_1 added [ 78.682319][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.689304][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.715606][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.757636][ T5791] team0: Port device team_slave_0 added [ 78.766322][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.773372][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.799638][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.817503][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.824638][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.850836][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.863555][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.870529][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.896604][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.909816][ T5791] team0: Port device team_slave_1 added [ 78.970671][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.977834][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.005121][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.050463][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.057486][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.084804][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.100070][ T5792] hsr_slave_0: entered promiscuous mode [ 79.106974][ T5792] hsr_slave_1: entered promiscuous mode [ 79.130229][ T5794] hsr_slave_0: entered promiscuous mode [ 79.136907][ T5794] hsr_slave_1: entered promiscuous mode [ 79.143220][ T5808] Bluetooth: hci2: command tx timeout [ 79.148062][ T5106] Bluetooth: hci3: command tx timeout [ 79.148885][ T5795] Bluetooth: hci0: command tx timeout [ 79.159991][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.168573][ T5794] Cannot create hsr debugfs directory [ 79.199245][ T5793] hsr_slave_0: entered promiscuous mode [ 79.205758][ T5793] hsr_slave_1: entered promiscuous mode [ 79.212504][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.220088][ T5793] Cannot create hsr debugfs directory [ 79.232331][ T5795] Bluetooth: hci1: command tx timeout [ 79.322717][ T5791] hsr_slave_0: entered promiscuous mode [ 79.329648][ T5791] hsr_slave_1: entered promiscuous mode [ 79.336251][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.344030][ T5791] Cannot create hsr debugfs directory [ 79.693603][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.707362][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.720607][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.730943][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.805772][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.820663][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.830965][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.843607][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.935419][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.946646][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.964032][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.974968][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.107368][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.119221][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.130897][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.146459][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.180711][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.236111][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.267097][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.277480][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.296608][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.304014][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.328448][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.335649][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.358857][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.392602][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.399769][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.414713][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.421924][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.436353][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.473394][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.480569][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.513907][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.521048][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.585334][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.658261][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.774659][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.814677][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.821921][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.854093][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.861356][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.112905][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.159626][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.222672][ T5795] Bluetooth: hci2: command tx timeout [ 81.224224][ T5808] Bluetooth: hci0: command tx timeout [ 81.228263][ T5795] Bluetooth: hci3: command tx timeout [ 81.274930][ T5794] veth0_vlan: entered promiscuous mode [ 81.300016][ T5794] veth1_vlan: entered promiscuous mode [ 81.306540][ T5795] Bluetooth: hci1: command tx timeout [ 81.379446][ T5791] veth0_vlan: entered promiscuous mode [ 81.393001][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.412898][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.442293][ T5791] veth1_vlan: entered promiscuous mode [ 81.459241][ T5794] veth0_macvtap: entered promiscuous mode [ 81.481023][ T5794] veth1_macvtap: entered promiscuous mode [ 81.549286][ T5793] veth0_vlan: entered promiscuous mode [ 81.566609][ T5792] veth0_vlan: entered promiscuous mode [ 81.580861][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.608819][ T5793] veth1_vlan: entered promiscuous mode [ 81.618894][ T5792] veth1_vlan: entered promiscuous mode [ 81.636699][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.645965][ T5791] veth0_macvtap: entered promiscuous mode [ 81.670534][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.680018][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.690278][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.700125][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.717625][ T5791] veth1_macvtap: entered promiscuous mode [ 81.787229][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.799105][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.811205][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.822761][ T5792] veth0_macvtap: entered promiscuous mode [ 81.829939][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.843075][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.855434][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.885275][ T5793] veth0_macvtap: entered promiscuous mode [ 81.900892][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.913419][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.926524][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.943669][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.959280][ T5793] veth1_macvtap: entered promiscuous mode [ 81.992462][ T5792] veth1_macvtap: entered promiscuous mode [ 82.087174][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.112111][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.137862][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.155132][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.167194][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.178386][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.192568][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.221029][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.242407][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.252893][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.264903][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.275109][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.286245][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.298692][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.318038][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.330707][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.347762][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.366226][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.386408][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.406491][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.424665][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.435057][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.446026][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.456170][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.466897][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.479247][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.490712][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.494666][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.511398][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.515887][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.528481][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.537406][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.567579][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.580917][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.592272][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.601012][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.632296][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.640175][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.734524][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.749411][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.934791][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.970141][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.035242][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.062938][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.133267][ T5886] syz.2.3[5886]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.148467][ T5886] loop2: detected capacity change from 0 to 128 [ 83.181158][ T5886] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 83.247225][ T5886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.329959][ T5106] Bluetooth: hci0: command tx timeout [ 83.335674][ T5106] Bluetooth: hci2: command tx timeout [ 83.341492][ T5795] Bluetooth: hci3: command tx timeout [ 83.544257][ T5106] Bluetooth: hci1: command tx timeout [ 83.782768][ T5890] loop1: detected capacity change from 0 to 2048 [ 83.986486][ T5889] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.004620][ T5890] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.143115][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.146728][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.174851][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.212979][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.085735][ T5899] loop1: detected capacity change from 0 to 8 [ 85.834897][ T5808] Bluetooth: hci1: command tx timeout [ 85.840418][ T5808] Bluetooth: hci3: command tx timeout [ 85.845950][ T5808] Bluetooth: hci2: command tx timeout [ 85.851412][ T5808] Bluetooth: hci0: command tx timeout [ 86.888765][ T5911] loop2: detected capacity change from 0 to 16 [ 86.941286][ C0] sched: RT throttling activated [ 86.984271][ T5911] erofs: (device loop2): mounted with root inode @ nid 36. [ 87.292242][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.451253][ T5920] syz.2.7: attempt to access beyond end of device [ 87.451253][ T5920] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 87.497044][ T5920] syz.2.7: attempt to access beyond end of device [ 87.497044][ T5920] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 87.511251][ T5920] syz.2.7: attempt to access beyond end of device [ 87.511251][ T5920] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 88.359014][ T5921] loop1: detected capacity change from 0 to 2048 [ 89.201720][ T5921] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.290660][ T5794] BUG: Bad page state in process syz-executor pfn:2dc95 [ 89.298213][ T5794] page:ffffea0000b72540 refcount:0 mapcount:0 mapping:ffff88805c3a07c8 index:0x2 pfn:0x2dc95 [ 89.310067][ T5794] aops:z_erofs_cache_aops ino:0 [ 89.315351][ T5794] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 89.323183][ T5794] page_type: 0xffffffff() [ 89.327550][ T5794] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805c3a07c8 [ 89.336203][ T5794] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 89.344891][ T5794] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 89.352301][ T5794] page_owner tracks the page as allocated [ 89.358223][ T5794] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5920, tgid 5903 (syz.2.7), ts 87448814718, free_ts 87306105938 [ 89.380064][ T5794] post_alloc_hook+0x1cd/0x210 [ 89.385586][ T5794] get_page_from_freelist+0x195c/0x19f0 [ 89.392485][ T5794] __alloc_pages+0x1e3/0x460 [ 89.397134][ T5794] z_erofs_do_read_page+0x20c0/0x3680 [ 89.402785][ T5794] z_erofs_pcluster_readmore+0x2cf/0x450 [ 89.408453][ T5794] z_erofs_read_folio+0x208/0x540 [ 89.413586][ T5794] filemap_read_folio+0x167/0x760 [ 89.418639][ T5794] do_read_cache_folio+0x470/0x7e0 [ 89.423865][ T5794] erofs_bread+0x16f/0x630 [ 89.428332][ T5794] erofs_namei+0x28c/0xf00 [ 89.432834][ T5794] erofs_lookup+0x135/0x310 [ 89.433726][ T27] usb 4-1: device not accepting address 2, error -71 [ 89.437408][ T5794] path_openat+0x10b8/0x3190 [ 89.448759][ T5794] do_filp_open+0x1c5/0x3d0 [ 89.453375][ T5794] do_sys_openat2+0x12c/0x1c0 [ 89.458102][ T5794] __x64_sys_openat+0x139/0x160 [ 89.464671][ T5794] do_syscall_64+0x55/0xb0 [ 89.469153][ T5794] page last free stack trace: [ 89.474396][ T5794] free_unref_page_prepare+0x7ce/0x8e0 [ 89.479935][ T5794] free_unref_page+0x32/0x2e0 [ 89.484702][ T5794] __unfreeze_partials+0x1cf/0x210 [ 89.489888][ T5794] put_cpu_partial+0x17c/0x250 [ 89.495718][ T5794] __slab_free+0x31d/0x410 [ 89.500206][ T5794] qlist_free_all+0x75/0xe0 [ 89.505419][ T5794] kasan_quarantine_reduce+0x143/0x160 [ 89.511609][ T5794] __kasan_slab_alloc+0x22/0x80 [ 89.516675][ T5794] slab_post_alloc_hook+0x6e/0x4d0 [ 89.521923][ T5794] __kmem_cache_alloc_node+0x13e/0x260 [ 89.527517][ T5794] __kmalloc+0xa4/0x240 [ 89.531776][ T5794] tomoyo_realpath_from_path+0xe3/0x5d0 [ 89.537373][ T5794] tomoyo_path_perm+0x20f/0x4b0 [ 89.543232][ T5794] security_inode_getattr+0xd3/0x120 [ 89.548584][ T5794] __x64_sys_newfstat+0x101/0x1f0 [ 89.554183][ T5794] do_syscall_64+0x55/0xb0 [ 89.558671][ T5794] Modules linked in: [ 89.562702][ T5794] CPU: 0 PID: 5794 Comm: syz-executor Not tainted syzkaller #0 [ 89.570366][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.580566][ T5794] Call Trace: [ 89.583886][ T5794] [ 89.586868][ T5794] dump_stack_lvl+0x16c/0x230 [ 89.591614][ T5794] ? show_regs_print_info+0x20/0x20 [ 89.596860][ T5794] ? swiotlb_print_info+0x70/0x70 [ 89.601942][ T5794] bad_page+0x14b/0x170 [ 89.606129][ T5794] free_unref_page_prepare+0x887/0x8e0 [ 89.611630][ T5794] free_unref_page+0x32/0x2e0 [ 89.616343][ T5794] ? __folio_put+0xef/0x210 [ 89.620872][ T5794] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 89.627327][ T5794] erofs_shrink_workstation+0x118/0x290 [ 89.632908][ T5794] ? erofs_shrinker_unregister+0x170/0x170 [ 89.638757][ T5794] ? io_schedule+0xd0/0xd0 [ 89.643216][ T5794] ? kobject_put+0x43c/0x470 [ 89.647842][ T5794] erofs_shrinker_unregister+0x5d/0x170 [ 89.653427][ T5794] erofs_put_super+0x4e/0x150 [ 89.658147][ T5794] ? erofs_free_inode+0xb0/0xb0 [ 89.663039][ T5794] generic_shutdown_super+0x134/0x2b0 [ 89.668474][ T5794] kill_block_super+0x44/0x90 [ 89.673181][ T5794] erofs_kill_sb+0x4c/0x140 [ 89.677722][ T5794] deactivate_locked_super+0x97/0x100 [ 89.683132][ T5794] cleanup_mnt+0x429/0x4c0 [ 89.687587][ T5794] task_work_run+0x1ce/0x250 [ 89.692217][ T5794] ? task_work_cancel+0x240/0x240 [ 89.697286][ T5794] ? exit_to_user_mode_loop+0x3b/0x110 [ 89.702790][ T5794] exit_to_user_mode_loop+0xe6/0x110 [ 89.708105][ T5794] exit_to_user_mode_prepare+0xf6/0x180 [ 89.713685][ T5794] syscall_exit_to_user_mode+0x1a/0x50 [ 89.719177][ T5794] do_syscall_64+0x61/0xb0 [ 89.723636][ T5794] ? clear_bhb_loop+0x40/0x90 [ 89.728353][ T5794] ? clear_bhb_loop+0x40/0x90 [ 89.733067][ T5794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.738993][ T5794] RIP: 0033:0x7f93f8590a77 [ 89.743457][ T5794] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 89.763098][ T5794] RSP: 002b:00007fff5596eaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 89.771552][ T5794] RAX: 0000000000000000 RBX: 00007f93f8613d7d RCX: 00007f93f8590a77 [ 89.779553][ T5794] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5596ebb0 [ 89.787571][ T5794] RBP: 00007fff5596ebb0 R08: 0000000000000000 R09: 0000000000000000 [ 89.795577][ T5794] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5596fc40 [ 89.803583][ T5794] R13: 00007f93f8613d7d R14: 00000000000154d3 R15: 00007fff5596fc80 [ 89.811622][ T5794] [ 89.816826][ T5794] Disabling lock debugging due to kernel taint [ 89.823380][ T5794] BUG: Bad page state in process syz-executor pfn:26043 [ 89.830477][ T5794] page:ffffea00009810c0 refcount:0 mapcount:0 mapping:ffff88805c3a07c8 index:0x3 pfn:0x26043 [ 89.840705][ T5794] aops:z_erofs_cache_aops ino:0 [ 89.845644][ T5794] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 89.853415][ T5794] page_type: 0xffffffff() [ 89.857785][ T5794] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805c3a07c8 [ 89.866992][ T5794] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 89.875906][ T5794] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 89.883255][ T5794] page_owner tracks the page as allocated [ 89.888991][ T5794] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5920, tgid 5903 (syz.2.7), ts 87449337078, free_ts 87305994855 [ 89.911613][ T5794] post_alloc_hook+0x1cd/0x210 [ 89.916428][ T5794] get_page_from_freelist+0x195c/0x19f0 [ 89.922139][ T5794] __alloc_pages+0x1e3/0x460 [ 89.926758][ T5794] z_erofs_do_read_page+0x20c0/0x3680 [ 89.932180][ T5794] z_erofs_pcluster_readmore+0x2cf/0x450 [ 89.937826][ T5794] z_erofs_read_folio+0x208/0x540 [ 89.942902][ T5794] filemap_read_folio+0x167/0x760 [ 89.947946][ T5794] do_read_cache_folio+0x470/0x7e0 [ 89.953098][ T5794] erofs_bread+0x16f/0x630 [ 89.957638][ T5794] erofs_namei+0x28c/0xf00 [ 89.962111][ T5794] erofs_lookup+0x135/0x310 [ 89.966656][ T5794] path_openat+0x10b8/0x3190 [ 89.971304][ T5794] do_filp_open+0x1c5/0x3d0 [ 89.975858][ T5794] do_sys_openat2+0x12c/0x1c0 [ 89.980564][ T5794] __x64_sys_openat+0x139/0x160 [ 89.985467][ T5794] do_syscall_64+0x55/0xb0 [ 89.989907][ T5794] page last free stack trace: [ 89.994676][ T5794] free_unref_page_prepare+0x7ce/0x8e0 [ 90.000178][ T5794] free_unref_page+0x32/0x2e0 [ 90.005873][ T5794] __unfreeze_partials+0x1cf/0x210 [ 90.011053][ T5794] put_cpu_partial+0x17c/0x250 [ 90.015954][ T5794] __slab_free+0x31d/0x410 [ 90.020400][ T5794] qlist_free_all+0x75/0xe0 [ 90.025158][ T5794] kasan_quarantine_reduce+0x143/0x160 [ 90.030646][ T5794] __kasan_slab_alloc+0x22/0x80 [ 90.035560][ T5794] slab_post_alloc_hook+0x6e/0x4d0 [ 90.040696][ T5794] __kmem_cache_alloc_node+0x13e/0x260 [ 90.046252][ T5794] __kmalloc+0xa4/0x240 [ 90.050456][ T5794] tomoyo_realpath_from_path+0xe3/0x5d0 [ 90.056118][ T5794] tomoyo_path_perm+0x20f/0x4b0 [ 90.061007][ T5794] security_inode_getattr+0xd3/0x120 [ 90.066350][ T5794] __x64_sys_newfstat+0x101/0x1f0 [ 90.071414][ T5794] do_syscall_64+0x55/0xb0 [ 90.075941][ T5794] Modules linked in: [ 90.079885][ T5794] CPU: 0 PID: 5794 Comm: syz-executor Tainted: G B syzkaller #0 [ 90.088924][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.099002][ T5794] Call Trace: [ 90.102313][ T5794] [ 90.105268][ T5794] dump_stack_lvl+0x16c/0x230 [ 90.109984][ T5794] ? show_regs_print_info+0x20/0x20 [ 90.115217][ T5794] ? swiotlb_print_info+0x70/0x70 [ 90.120297][ T5794] bad_page+0x14b/0x170 [ 90.124476][ T5794] free_unref_page_prepare+0x887/0x8e0 [ 90.129980][ T5794] free_unref_page+0x32/0x2e0 [ 90.134715][ T5794] ? __folio_put+0xef/0x210 [ 90.139254][ T5794] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 90.145710][ T5794] erofs_shrink_workstation+0x118/0x290 [ 90.151287][ T5794] ? erofs_shrinker_unregister+0x170/0x170 [ 90.157207][ T5794] ? io_schedule+0xd0/0xd0 [ 90.161692][ T5794] ? kobject_put+0x43c/0x470 [ 90.166319][ T5794] erofs_shrinker_unregister+0x5d/0x170 [ 90.171904][ T5794] erofs_put_super+0x4e/0x150 [ 90.176625][ T5794] ? erofs_free_inode+0xb0/0xb0 [ 90.181511][ T5794] generic_shutdown_super+0x134/0x2b0 [ 90.186921][ T5794] kill_block_super+0x44/0x90 [ 90.191610][ T5794] erofs_kill_sb+0x4c/0x140 [ 90.196234][ T5794] deactivate_locked_super+0x97/0x100 [ 90.201629][ T5794] cleanup_mnt+0x429/0x4c0 [ 90.206057][ T5794] task_work_run+0x1ce/0x250 [ 90.210661][ T5794] ? task_work_cancel+0x240/0x240 [ 90.215706][ T5794] ? exit_to_user_mode_loop+0x3b/0x110 [ 90.221197][ T5794] exit_to_user_mode_loop+0xe6/0x110 [ 90.226488][ T5794] exit_to_user_mode_prepare+0xf6/0x180 [ 90.232067][ T5794] syscall_exit_to_user_mode+0x1a/0x50 [ 90.237717][ T5794] do_syscall_64+0x61/0xb0 [ 90.242141][ T5794] ? clear_bhb_loop+0x40/0x90 [ 90.246875][ T5794] ? clear_bhb_loop+0x40/0x90 [ 90.251560][ T5794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.257459][ T5794] RIP: 0033:0x7f93f8590a77 [ 90.261876][ T5794] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 90.281574][ T5794] RSP: 002b:00007fff5596eaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 90.289993][ T5794] RAX: 0000000000000000 RBX: 00007f93f8613d7d RCX: 00007f93f8590a77 [ 90.297973][ T5794] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5596ebb0 [ 90.305964][ T5794] RBP: 00007fff5596ebb0 R08: 0000000000000000 R09: 0000000000000000 [ 90.313960][ T5794] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5596fc40 [ 90.321948][ T5794] R13: 00007f93f8613d7d R14: 00000000000154d3 R15: 00007fff5596fc80 [ 90.329935][ T5794] [ 90.334328][ T5794] BUG: Bad page state in process syz-executor pfn:2dc85 [ 90.341576][ T5794] page:ffffea0000b72140 refcount:0 mapcount:0 mapping:ffff88805c3a07c8 index:0x4 pfn:0x2dc85 [ 90.351858][ T5794] aops:z_erofs_cache_aops ino:0 [ 90.356738][ T5794] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 90.364514][ T5794] page_type: 0xffffffff() [ 90.368861][ T5794] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805c3a07c8 [ 90.377561][ T5794] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 90.386220][ T5794] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 90.393681][ T5794] page_owner tracks the page as allocated [ 90.399421][ T5794] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5920, tgid 5903 (syz.2.7), ts 87449453544, free_ts 87305979711 [ 90.422015][ T5794] post_alloc_hook+0x1cd/0x210 [ 90.426844][ T5794] get_page_from_freelist+0x195c/0x19f0 [ 90.432614][ T5794] __alloc_pages+0x1e3/0x460 [ 90.437246][ T5794] z_erofs_do_read_page+0x20c0/0x3680 [ 90.442685][ T5794] z_erofs_pcluster_readmore+0x2cf/0x450 [ 90.448352][ T5794] z_erofs_read_folio+0x208/0x540 [ 90.453429][ T5794] filemap_read_folio+0x167/0x760 [ 90.458478][ T5794] do_read_cache_folio+0x470/0x7e0 [ 90.463764][ T5794] erofs_bread+0x16f/0x630 [ 90.468271][ T5794] erofs_namei+0x28c/0xf00 [ 90.472807][ T5794] erofs_lookup+0x135/0x310 [ 90.477356][ T5794] path_openat+0x10b8/0x3190 [ 90.482107][ T5794] do_filp_open+0x1c5/0x3d0 [ 90.486646][ T5794] do_sys_openat2+0x12c/0x1c0 [ 90.491380][ T5794] __x64_sys_openat+0x139/0x160 [ 90.496258][ T5794] do_syscall_64+0x55/0xb0 [ 90.500703][ T5794] page last free stack trace: [ 90.505445][ T5794] free_unref_page_prepare+0x7ce/0x8e0 [ 90.510947][ T5794] free_unref_page+0x32/0x2e0 [ 90.516615][ T5794] __unfreeze_partials+0x1cf/0x210 [ 90.521931][ T5794] put_cpu_partial+0x17c/0x250 [ 90.526830][ T5794] __slab_free+0x31d/0x410 [ 90.531326][ T5794] qlist_free_all+0x75/0xe0 [ 90.535863][ T5794] kasan_quarantine_reduce+0x143/0x160 [ 90.541398][ T5794] __kasan_slab_alloc+0x22/0x80 [ 90.546278][ T5794] slab_post_alloc_hook+0x6e/0x4d0 [ 90.551485][ T5794] __kmem_cache_alloc_node+0x13e/0x260 [ 90.556973][ T5794] __kmalloc+0xa4/0x240 [ 90.561144][ T5794] tomoyo_realpath_from_path+0xe3/0x5d0 [ 90.566748][ T5794] tomoyo_path_perm+0x20f/0x4b0 [ 90.571692][ T5794] security_inode_getattr+0xd3/0x120 [ 90.577061][ T5794] __x64_sys_newfstat+0x101/0x1f0 [ 90.582136][ T5794] do_syscall_64+0x55/0xb0 [ 90.586589][ T5794] Modules linked in: [ 90.590495][ T5794] CPU: 0 PID: 5794 Comm: syz-executor Tainted: G B syzkaller #0 [ 90.599514][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.609581][ T5794] Call Trace: [ 90.612885][ T5794] [ 90.615831][ T5794] dump_stack_lvl+0x16c/0x230 [ 90.620536][ T5794] ? show_regs_print_info+0x20/0x20 [ 90.625783][ T5794] ? swiotlb_print_info+0x70/0x70 [ 90.630824][ T5794] bad_page+0x14b/0x170 [ 90.634987][ T5794] free_unref_page_prepare+0x887/0x8e0 [ 90.640458][ T5794] free_unref_page+0x32/0x2e0 [ 90.645148][ T5794] ? __folio_put+0xef/0x210 [ 90.649678][ T5794] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 90.656103][ T5794] erofs_shrink_workstation+0x118/0x290 [ 90.661663][ T5794] ? erofs_shrinker_unregister+0x170/0x170 [ 90.667484][ T5794] ? io_schedule+0xd0/0xd0 [ 90.671911][ T5794] ? kobject_put+0x43c/0x470 [ 90.676505][ T5794] erofs_shrinker_unregister+0x5d/0x170 [ 90.682057][ T5794] erofs_put_super+0x4e/0x150 [ 90.686742][ T5794] ? erofs_free_inode+0xb0/0xb0 [ 90.691618][ T5794] generic_shutdown_super+0x134/0x2b0 [ 90.697004][ T5794] kill_block_super+0x44/0x90 [ 90.701682][ T5794] erofs_kill_sb+0x4c/0x140 [ 90.706192][ T5794] deactivate_locked_super+0x97/0x100 [ 90.711576][ T5794] cleanup_mnt+0x429/0x4c0 [ 90.716000][ T5794] task_work_run+0x1ce/0x250 [ 90.720600][ T5794] ? task_work_cancel+0x240/0x240 [ 90.725641][ T5794] ? exit_to_user_mode_loop+0x3b/0x110 [ 90.731111][ T5794] exit_to_user_mode_loop+0xe6/0x110 [ 90.736401][ T5794] exit_to_user_mode_prepare+0xf6/0x180 [ 90.741957][ T5794] syscall_exit_to_user_mode+0x1a/0x50 [ 90.747511][ T5794] do_syscall_64+0x61/0xb0 [ 90.751941][ T5794] ? clear_bhb_loop+0x40/0x90 [ 90.756626][ T5794] ? clear_bhb_loop+0x40/0x90 [ 90.761321][ T5794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.767229][ T5794] RIP: 0033:0x7f93f8590a77 [ 90.771649][ T5794] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 90.791259][ T5794] RSP: 002b:00007fff5596eaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 90.799686][ T5794] RAX: 0000000000000000 RBX: 00007f93f8613d7d RCX: 00007f93f8590a77 [ 90.807662][ T5794] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5596ebb0 [ 90.815639][ T5794] RBP: 00007fff5596ebb0 R08: 0000000000000000 R09: 0000000000000000 [ 90.823623][ T5794] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5596fc40 [ 90.831617][ T5794] R13: 00007f93f8613d7d R14: 00000000000154d3 R15: 00007fff5596fc80 [ 90.839611][ T5794] [ 91.271761][ T5847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.473882][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 91.501856][ T5847] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 91.510740][ T5847] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 91.521101][ T5847] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 91.555495][ T5847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.564794][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.573313][ T5847] usb 1-1: Manufacturer: ф [ 91.577847][ T5847] usb 1-1: SerialNumber: ⠇ [ 92.113244][ T788] cfg80211: failed to load regulatory.db [ 92.362977][ T5847] cdc_ncm 1-1:1.0: skipping garbage [ 92.368264][ T5847] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 92.437437][ T5847] cdc_ncm 1-1:1.0: bind() failure [ 92.446131][ T5847] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 92.453016][ T5847] cdc_ncm 1-1:1.1: bind() failure [ 92.462441][ T5847] usb 1-1: USB disconnect, device number 2