last executing test programs: 7.316636405s ago: executing program 1 (id=2): r0 = fsopen(0x0, 0x1) socketpair(0x1, 0x1, 0x0, 0x0) r1 = openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xd0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = memfd_create(&(0x7f0000000000)='#!)&\x00', 0x0) r7 = fcntl$dupfd(r0, 0x0, r6) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x200a400, &(0x7f0000000100)=ANY=[@ANYRESDEC=r7], 0xfd, 0x2ad, &(0x7f0000000800)="$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") fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x2) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mknodat$loop(r8, &(0x7f00000001c0)='./file0\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@data_journal}, {@sb={'sb', 0x3d, 0x1}}, {@norecovery}, {@nodioread_nolock}, {@discard}, {@data_journal}]}, 0xd, 0x61c, &(0x7f0000000d80)="$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") 6.996924339s ago: executing program 0 (id=1): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = memfd_create(&(0x7f0000000000)='#!)&\x00', 0x0) r7 = fcntl$dupfd(r0, 0x0, r6) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x200a400, &(0x7f0000000100)=ANY=[@ANYRESDEC=r7], 0xfd, 0x2ad, &(0x7f0000000800)="$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") fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x2) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mknodat$loop(r8, &(0x7f00000001c0)='./file0\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@data_journal}, {@sb={'sb', 0x3d, 0x1}}, {@norecovery}, {@nodioread_nolock}, {@discard}, {@data_journal}]}, 0xd, 0x61c, &(0x7f0000000d80)="$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") 5.444572586s ago: executing program 0 (id=5): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) epoll_create1(0x80000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000080), 0x4) keyctl$unlink(0x9, r0, r0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x4, 0x1, 0x200, 0x7, "f67567", 0x3}}) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, 0xfffffffffffffffe) ioctl$sock_bt_hci(r1, 0x400448e2, 0x0) r8 = syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0xe0002009}) 4.923342168s ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 4.823577282s ago: executing program 3 (id=4): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = memfd_create(&(0x7f0000000000)='#!)&\x00', 0x0) r7 = fcntl$dupfd(r0, 0x0, r6) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x200a400, &(0x7f0000000100)=ANY=[@ANYRESDEC=r7], 0xfd, 0x2ad, &(0x7f0000000800)="$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") fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x2) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mknodat$loop(r8, &(0x7f00000001c0)='./file0\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@data_journal}, {@sb={'sb', 0x3d, 0x1}}, {@norecovery}, {@nodioread_nolock}, {@discard}, {@data_journal}]}, 0xd, 0x61c, &(0x7f0000000d80)="$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") 4.797881534s ago: executing program 1 (id=6): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r5) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7000007020000f8ffffffb7030000080000f75b0400000000000085000000010000090000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) rmdir(0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r7, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xfffffffffffffda1, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_ingress]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) r8 = geteuid() syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000880)={[{@acl}, {@user_xattr}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@sysvgroups}, {@debug}, {@abort}, {@noload}, {@abort}, {@nodiscard}], [{@euid_eq={'euid', 0x3d, r8}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'grpjquota'}}, {@smackfsdef={'smackfsdef', 0x3d, '!)\''}}, {@uid_eq={'uid', 0x3d, r8}}, {@flag='ro'}, {@context={'context', 0x3d, 'user_u'}}]}, 0xff, 0x48b, &(0x7f00000001c0)="$eJzs281vFOUfAPDvbLe8/qD9IaIgSBVNiC8tLaAcTIxvCQdNTPSAx9oWghRqaE2ENFo94NGQeDceTfwLPHky6snEKx5NDAnRxgQ0Jq6ZnZm+LLuwpdsOsp9Psu088zz7PM93Zp7ps/NsA+haA+mPJOJ/EXElIvqy5PICA9mvG/OzY3/Oz44lUau98VtSL3d9fnaslivetzWvc9uyRqJ3abXTFy6eGZ2cnDifp4dmzr47NH3h4tOnz46emjg1cW5jnjFytEmvf7l866j+vmlPGt/1PR9M7d19/K3Lr42duPz291+l/d21L8tP47jdsVqpgTTw37Nj05j3eKcbK9k/tcU4k2rZvaFdPRFRzQfnleiLnlg8eX3xyseldg5YU+k9e2Pr7LkacA9LouweAOUo/tCnn3+L1zpNPe4K117IPgClcd/IX1lONSp5md41bH8gIk7M/fX5ibmstaXHv9bkuQEAwGp9k85/nmo2/6vEriXltudrQ/0R8f+I2BER90XEzoi4P6Je9oGIeHCF7Q80pG+ef1au3lFgbUrnf8/la1vL53/F7C/6e/LUtnr8vcnJ05MTh/JjcjB6N6bp4WaVF1W8/NOnrdpfnP9lr7T99PeSSq5Wswd0m4o946Mzo52alF77KGJPtVn8ycJKQBIRuyNiz8qq3l5snH7iy72tCt0+/lvowDpT7Yuiktm5aIi/kDRbnxw5duzI4eFnnxk5OrQpJicODRVXxc1++PHS663aX1X8HZCe/y3Lr/+GEn1/JEvXa6cXMp5vt41LP3/S8jNltf3rf0F6/W9I3qyv6W7I970/OjNzfjhiQ/JqPb1s/8jie4t0UT6N/+CB5uN/R/6eNP6HIiK9iPdFxMMRsT8/d49ExKMRceAW8X/34mPvtMq7G87/eNP738L137/8/K98o+fMt1+3ar+9+9+R+tbBfE/9/ncbrbtT3EYbrmYAAAC4h1Xq341PKoML25XK4GD2Hf6dsaUyOTU98+TJqffOjWffoe+P3krxpKtvyfPQ4WQurzFLj+TPiov8w/lz4896NtfTg2NTk+Mlxw7dbmuL8Z/6tafs3gFrzv9rQfdqHP+VkvoBrD9//6F7Gf/QvYx/6F7Nxv+HDWlrAXAvqvWV3QOgPG3O/19a634A68/nf+hexj90pdX8X3+Tjc15tauqp7q6t/83NtIjtS5t9a9RzVEp/RjeVRv7Oz+a7nijeoej+/j84p4Sb0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9G8AAAD///JQ8Vw=") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') 4.63848903s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000000)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000040)=ANY=[], 0x0, 0x6a9, &(0x7f00000000c0)="$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") sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.642619619s ago: executing program 3 (id=8): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) ioprio_set$uid(0x3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x4000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) sendmsg$nl_generic(r5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)={0x0, {{0x2, 0x4e22, @broadcast}}, 0x1}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) fadvise64(r8, 0xe0ffff, 0x19, 0x3) 1.62577977s ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000000)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000040)=ANY=[], 0x0, 0x6a9, &(0x7f00000000c0)="$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") sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.292806814s ago: executing program 2 (id=10): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 0s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x5453, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c7401, 0x98) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x80000000, 0x10, 0x0, 0x7, 0x80000001, 0x3, 0x0, 0x0, 0x20, 0x7}}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0xeeef0000, 0x6, 0x200, 0x2, 0x0, [{0x1, 0x0, 0xe, '\x00', 0x6}, {0x0, 0xfd, 0x7, '\x00', 0x8}, {0x69, 0x5, 0x9, '\x00', 0x2}, {0x3, 0x5, 0x7, '\x00', 0x6}, {0x8, 0x46, 0x9, '\x00', 0x8}, {0x3, 0x9, 0xcc, '\x00', 0xb}, {0x6, 0xf, 0x7, '\x00', 0x7}, {0x2, 0x7, 0x7, '\x00', 0x5}, {0x0, 0x2, 0xb4, '\x00', 0x9}, {0x1, 0x6, 0x4, '\x00', 0xf7}, {0x7, 0x3, 0xa0, '\x00', 0x8}, {0x2, 0x1, 0x5, '\x00', 0x52}, {0xb, 0x34, 0x0, '\x00', 0x5}, {0x5, 0x5, 0xbb, '\x00', 0x6}, {0x3, 0xf9, 0xfd, '\x00', 0xfc}, {0x8, 0x4, 0x5, '\x00', 0x6}, {0x6, 0x18, 0x4, '\x00', 0xd}, {0x6, 0x3, 0xe0, '\x00', 0x9}, {0x1, 0x8, 0x7, '\x00', 0x81}, {0xc9, 0x3, 0x6, '\x00', 0x81}, {0x8, 0x45, 0x7, '\x00', 0x2}, {0x14, 0x83}, {0x3, 0x7c, 0xc9, '\x00', 0x5}, {0x9, 0x3, 0xb5, '\x00', 0x50}]}}) ptrace(0x10, r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. syzkaller login: [ 83.713456][ T5774] cgroup: Unknown subsys name 'net' [ 83.879581][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.604984][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.097993][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.107527][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.116024][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.124455][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.132997][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.140642][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.148059][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.148593][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.163284][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.164400][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.171548][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.178409][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.185436][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.194702][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.207555][ T5805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.207708][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.227810][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.227995][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.240783][ T5805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.260556][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.260554][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.284233][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.294357][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.324167][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.826046][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 88.951971][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 88.990716][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 89.044338][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 89.145969][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.153322][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.161072][ T5791] bridge_slave_0: entered allmulticast mode [ 89.168387][ T5791] bridge_slave_0: entered promiscuous mode [ 89.213159][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.221227][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.228460][ T5791] bridge_slave_1: entered allmulticast mode [ 89.235811][ T5791] bridge_slave_1: entered promiscuous mode [ 89.284002][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.291374][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.298545][ T5789] bridge_slave_0: entered allmulticast mode [ 89.306409][ T5789] bridge_slave_0: entered promiscuous mode [ 89.349815][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.357090][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.365263][ T5789] bridge_slave_1: entered allmulticast mode [ 89.372415][ T5789] bridge_slave_1: entered promiscuous mode [ 89.382932][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.392373][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.399653][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.407146][ T5788] bridge_slave_0: entered allmulticast mode [ 89.416193][ T5788] bridge_slave_0: entered promiscuous mode [ 89.452921][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.462319][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.469598][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.477612][ T5788] bridge_slave_1: entered allmulticast mode [ 89.484821][ T5788] bridge_slave_1: entered promiscuous mode [ 89.493504][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.500889][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.508439][ T5787] bridge_slave_0: entered allmulticast mode [ 89.515586][ T5787] bridge_slave_0: entered promiscuous mode [ 89.558892][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.566332][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.573679][ T5787] bridge_slave_1: entered allmulticast mode [ 89.582509][ T5787] bridge_slave_1: entered promiscuous mode [ 89.592037][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.604008][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.680774][ T5791] team0: Port device team_slave_0 added [ 89.689305][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.702002][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.719181][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.731936][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.756774][ T5789] team0: Port device team_slave_0 added [ 89.764500][ T5791] team0: Port device team_slave_1 added [ 89.809713][ T5789] team0: Port device team_slave_1 added [ 89.844966][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.852736][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.879131][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.930664][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.937673][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.964988][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.984437][ T5788] team0: Port device team_slave_0 added [ 89.994595][ T5788] team0: Port device team_slave_1 added [ 90.004661][ T5787] team0: Port device team_slave_0 added [ 90.014876][ T5787] team0: Port device team_slave_1 added [ 90.022366][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.029784][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.055870][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.069392][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.076559][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.102681][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.184300][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.191403][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.218409][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.231570][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.238570][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.264988][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.276901][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.284159][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.306140][ T5800] Bluetooth: hci0: command tx timeout [ 90.311158][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.373884][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.381084][ T5800] Bluetooth: hci2: command tx timeout [ 90.384240][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.391871][ T5806] Bluetooth: hci1: command tx timeout [ 90.418294][ T5800] Bluetooth: hci3: command tx timeout [ 90.424916][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.441180][ T5791] hsr_slave_0: entered promiscuous mode [ 90.447916][ T5791] hsr_slave_1: entered promiscuous mode [ 90.459652][ T5789] hsr_slave_0: entered promiscuous mode [ 90.467084][ T5789] hsr_slave_1: entered promiscuous mode [ 90.473614][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.482257][ T5789] Cannot create hsr debugfs directory [ 90.536889][ T5787] hsr_slave_0: entered promiscuous mode [ 90.544858][ T5787] hsr_slave_1: entered promiscuous mode [ 90.552918][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.561465][ T5787] Cannot create hsr debugfs directory [ 90.623759][ T5788] hsr_slave_0: entered promiscuous mode [ 90.631041][ T5788] hsr_slave_1: entered promiscuous mode [ 90.637404][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.645161][ T5788] Cannot create hsr debugfs directory [ 91.080929][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.096405][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.107222][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.119792][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.180498][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.203592][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.214796][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.227497][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.307346][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.330567][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.353730][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.395397][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.424693][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.438281][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.456191][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.467701][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.604794][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.665503][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.717496][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.728226][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.760231][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.767661][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.788848][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.796195][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.810530][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.825947][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.833318][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.867546][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.874760][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.899642][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.961691][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.978931][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.008829][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.016196][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.026231][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.033516][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.067523][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.074718][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.099038][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.147243][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.154938][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.227271][ T8] cfg80211: failed to load regulatory.db [ 92.343014][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.373096][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.388483][ T5806] Bluetooth: hci0: command tx timeout [ 92.460389][ T5806] Bluetooth: hci3: command tx timeout [ 92.461380][ T5800] Bluetooth: hci1: command tx timeout [ 92.466103][ T5806] Bluetooth: hci2: command tx timeout [ 92.564573][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.616771][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.728495][ T5791] veth0_vlan: entered promiscuous mode [ 92.768716][ T5791] veth1_vlan: entered promiscuous mode [ 92.786254][ T5789] veth0_vlan: entered promiscuous mode [ 92.815590][ T5789] veth1_vlan: entered promiscuous mode [ 92.909594][ T5791] veth0_macvtap: entered promiscuous mode [ 92.938810][ T5789] veth0_macvtap: entered promiscuous mode [ 92.948226][ T5791] veth1_macvtap: entered promiscuous mode [ 92.973207][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.989159][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.007669][ T5789] veth1_macvtap: entered promiscuous mode [ 93.018213][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.036631][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.046218][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.055671][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.065344][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.093255][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.126765][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.139474][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.151966][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.218623][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.233440][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.247718][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.271063][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.279838][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.288939][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.297908][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.348579][ T5787] veth0_vlan: entered promiscuous mode [ 93.385380][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.401892][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.428990][ T5788] veth0_vlan: entered promiscuous mode [ 93.456146][ T5787] veth1_vlan: entered promiscuous mode [ 93.485560][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.494840][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.516526][ T5788] veth1_vlan: entered promiscuous mode [ 93.559265][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.568110][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.675074][ T5787] veth0_macvtap: entered promiscuous mode [ 93.699427][ T5788] veth0_macvtap: entered promiscuous mode [ 93.736606][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.750282][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.775228][ T5787] veth1_macvtap: entered promiscuous mode [ 93.785152][ T5788] veth1_macvtap: entered promiscuous mode [ 93.852284][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.867221][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.885413][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.897429][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.921676][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.962833][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.020027][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.040166][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.061125][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.089971][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.111914][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.129181][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.173964][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.191832][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.207212][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.229434][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.265014][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.294547][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.335178][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.344122][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353047][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364370][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.377308][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.387884][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.398420][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.408363][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.419375][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.437636][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.471336][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.547641][ T5883] syz.0.1[5883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.590388][ T5883] loop0: detected capacity change from 0 to 128 [ 94.621987][ T5800] Bluetooth: hci1: command tx timeout [ 94.627583][ T5800] Bluetooth: hci3: command tx timeout [ 94.633546][ T5102] Bluetooth: hci2: command tx timeout [ 94.642330][ T5806] Bluetooth: hci0: command tx timeout [ 94.795038][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.911267][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.994842][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.108592][ T5801] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.166356][ T5881] loop0: detected capacity change from 0 to 1024 [ 95.166514][ T5801] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.203180][ T5881] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.217694][ T5881] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 95.229077][ T5881] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 95.281880][ T5882] loop1: detected capacity change from 0 to 128 [ 95.398525][ T5882] loop1: detected capacity change from 0 to 1024 [ 95.502289][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.510945][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.541664][ T5882] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 95.550422][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.560534][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.587969][ T5882] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 95.885586][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.904080][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.997374][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.010371][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.723895][ T5897] loop3: detected capacity change from 0 to 128 [ 96.906515][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 97.479951][ T5793] Bluetooth: hci0: command tx timeout [ 97.485578][ T5793] Bluetooth: hci3: command tx timeout [ 97.491265][ T5800] Bluetooth: hci1: command tx timeout [ 97.496915][ T5806] Bluetooth: hci2: command tx timeout [ 97.574384][ T5898] loop1: detected capacity change from 0 to 512 [ 97.585333][ T5898] EXT4-fs: quotafile must be on filesystem root [ 97.992177][ T5897] loop3: detected capacity change from 0 to 1024 [ 98.128145][ T5897] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 98.138511][ T5897] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 98.494731][ T5904] loop2: detected capacity change from 0 to 1024 [ 99.376059][ T5797] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.717763][ T5910] loop3: detected capacity change from 0 to 16 [ 99.736387][ T5910] erofs: (device loop3): mounted with root inode @ nid 36. [ 99.840300][ T5912] loop1: detected capacity change from 0 to 1024 [ 100.027786][ T5913] loop2: detected capacity change from 0 to 2048 [ 100.204551][ T5915] syz.3.8: attempt to access beyond end of device [ 100.204551][ T5915] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 100.291828][ T5915] syz.3.8: attempt to access beyond end of device [ 100.291828][ T5915] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 100.306752][ T5915] syz.3.8: attempt to access beyond end of device [ 100.306752][ T5915] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 100.930309][ T5913] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 100.938349][ T5913] UDF-fs: Scanning with blocksize 512 failed [ 100.996849][ T5788] BUG: Bad page state in process syz-executor pfn:78420 [ 101.004716][ T5788] page:ffffea0001e10800 refcount:0 mapcount:0 mapping:ffff88805f3907c8 index:0x2 pfn:0x78420 [ 101.015421][ T5788] aops:z_erofs_cache_aops ino:0 [ 101.020407][ T5788] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 101.028170][ T5788] page_type: 0xffffffff() [ 101.033705][ T5788] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f3907c8 [ 101.042537][ T5788] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 101.051379][ T5788] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 101.058702][ T5788] page_owner tracks the page as allocated [ 101.064975][ T5788] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5915, tgid 5907 (syz.3.8), ts 100202000597, free_ts 100075086158 [ 101.087503][ T5788] post_alloc_hook+0x1cd/0x210 [ 101.092416][ T5788] get_page_from_freelist+0x195c/0x19f0 [ 101.098048][ T5788] __alloc_pages+0x1e3/0x460 [ 101.103359][ T5788] z_erofs_do_read_page+0x20c0/0x3680 [ 101.108807][ T5788] z_erofs_pcluster_readmore+0x2cf/0x450 [ 101.115225][ T5788] z_erofs_read_folio+0x208/0x540 [ 101.120424][ T5788] filemap_read_folio+0x167/0x760 [ 101.125506][ T5788] do_read_cache_folio+0x470/0x7e0 [ 101.130750][ T5788] erofs_bread+0x16f/0x630 [ 101.136316][ T5788] erofs_namei+0x28c/0xf00 [ 101.141038][ T5788] erofs_lookup+0x135/0x310 [ 101.145603][ T5788] path_openat+0x10b8/0x3190 [ 101.150416][ T5788] do_filp_open+0x1c5/0x3d0 [ 101.154983][ T5788] do_sys_openat2+0x12c/0x1c0 [ 101.159819][ T5788] __x64_sys_openat+0x139/0x160 [ 101.165113][ T5788] do_syscall_64+0x55/0xb0 [ 101.169598][ T5788] page last free stack trace: [ 101.174538][ T5788] free_unref_page_prepare+0x7ce/0x8e0 [ 101.181241][ T5788] free_unref_page+0x32/0x2e0 [ 101.185989][ T5788] __slab_free+0x35e/0x410 [ 101.190519][ T5788] qlist_free_all+0x75/0xe0 [ 101.195078][ T5788] kasan_quarantine_reduce+0x143/0x160 [ 101.200748][ T5788] __kasan_slab_alloc+0x22/0x80 [ 101.205676][ T5788] slab_post_alloc_hook+0x6e/0x4d0 [ 101.210253][ T5913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.210903][ T5788] kmem_cache_alloc+0x11e/0x2e0 [ 101.224879][ T5788] getname_flags+0xbb/0x500 [ 101.229442][ T5788] user_path_at_empty+0x2c/0x60 [ 101.234437][ T5788] do_readlinkat+0xd8/0x480 [ 101.240083][ T5788] __x64_sys_readlink+0x7f/0x90 [ 101.245012][ T5788] do_syscall_64+0x55/0xb0 [ 101.249490][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.255714][ T5788] Modules linked in: [ 101.259687][ T5788] CPU: 1 PID: 5788 Comm: syz-executor Not tainted syzkaller #0 [ 101.267364][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.277485][ T5788] Call Trace: [ 101.280992][ T5788] [ 101.284007][ T5788] dump_stack_lvl+0x16c/0x230 [ 101.288753][ T5788] ? show_regs_print_info+0x20/0x20 [ 101.294099][ T5788] ? swiotlb_print_info+0x70/0x70 [ 101.299227][ T5788] bad_page+0x14b/0x170 [ 101.303523][ T5788] free_unref_page_prepare+0x887/0x8e0 [ 101.309057][ T5788] free_unref_page+0x32/0x2e0 [ 101.313803][ T5788] ? __folio_put+0xef/0x210 [ 101.318363][ T5788] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 101.324845][ T5788] erofs_shrink_workstation+0x118/0x290 [ 101.330417][ T5788] ? erofs_shrinker_unregister+0x170/0x170 [ 101.336251][ T5788] ? io_schedule+0xd0/0xd0 [ 101.340693][ T5788] ? kobject_put+0x43c/0x470 [ 101.345305][ T5788] erofs_shrinker_unregister+0x5d/0x170 [ 101.350880][ T5788] erofs_put_super+0x4e/0x150 [ 101.355578][ T5788] ? erofs_free_inode+0xb0/0xb0 [ 101.360458][ T5788] generic_shutdown_super+0x134/0x2b0 [ 101.366039][ T5788] kill_block_super+0x44/0x90 [ 101.370744][ T5788] erofs_kill_sb+0x4c/0x140 [ 101.375278][ T5788] deactivate_locked_super+0x97/0x100 [ 101.380675][ T5788] cleanup_mnt+0x429/0x4c0 [ 101.385123][ T5788] task_work_run+0x1ce/0x250 [ 101.389735][ T5788] ? task_work_cancel+0x240/0x240 [ 101.394778][ T5788] ? exit_to_user_mode_loop+0x3b/0x110 [ 101.400274][ T5788] exit_to_user_mode_loop+0xe6/0x110 [ 101.405585][ T5788] exit_to_user_mode_prepare+0xf6/0x180 [ 101.411156][ T5788] syscall_exit_to_user_mode+0x1a/0x50 [ 101.416648][ T5788] do_syscall_64+0x61/0xb0 [ 101.421119][ T5788] ? clear_bhb_loop+0x40/0x90 [ 101.426271][ T5788] ? clear_bhb_loop+0x40/0x90 [ 101.430968][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.436876][ T5788] RIP: 0033:0x7fe666d90a77 [ 101.441326][ T5788] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 101.460962][ T5788] RSP: 002b:00007ffc413011d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.469446][ T5788] RAX: 0000000000000000 RBX: 00007fe666e13d7d RCX: 00007fe666d90a77 [ 101.477459][ T5788] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc41301290 [ 101.485459][ T5788] RBP: 00007ffc41301290 R08: 0000000000000000 R09: 0000000000000000 [ 101.493445][ T5788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc41302320 [ 101.501433][ T5788] R13: 00007fe666e13d7d R14: 00000000000189b9 R15: 00007ffc41302360 [ 101.509795][ T5788] [ 101.514345][ T5788] Disabling lock debugging due to kernel taint [ 101.520739][ T5788] BUG: Bad page state in process syz-executor pfn:77334 [ 101.527814][ T5788] page:ffffea0001dccd00 refcount:0 mapcount:0 mapping:ffff88805f3907c8 index:0x3 pfn:0x77334 [ 101.538037][ T5788] aops:z_erofs_cache_aops ino:0 [ 101.542951][ T5788] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 101.551750][ T5788] page_type: 0xffffffff() [ 101.556123][ T5788] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f3907c8 [ 101.564920][ T5788] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 101.573594][ T5788] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 101.581004][ T5788] page_owner tracks the page as allocated [ 101.586853][ T5788] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5915, tgid 5907 (syz.3.8), ts 100202120490, free_ts 100075062757 [ 101.608851][ T5788] post_alloc_hook+0x1cd/0x210 [ 101.613703][ T5788] get_page_from_freelist+0x195c/0x19f0 [ 101.619301][ T5788] __alloc_pages+0x1e3/0x460 [ 101.624003][ T5788] z_erofs_do_read_page+0x20c0/0x3680 [ 101.629423][ T5788] z_erofs_pcluster_readmore+0x2cf/0x450 [ 101.635155][ T5788] z_erofs_read_folio+0x208/0x540 [ 101.640296][ T5788] filemap_read_folio+0x167/0x760 [ 101.645359][ T5788] do_read_cache_folio+0x470/0x7e0 [ 101.651702][ T5788] erofs_bread+0x16f/0x630 [ 101.656188][ T5788] erofs_namei+0x28c/0xf00 [ 101.661179][ T5788] erofs_lookup+0x135/0x310 [ 101.665753][ T5788] path_openat+0x10b8/0x3190 [ 101.670440][ T5788] do_filp_open+0x1c5/0x3d0 [ 101.674995][ T5788] do_sys_openat2+0x12c/0x1c0 [ 101.679714][ T5788] __x64_sys_openat+0x139/0x160 [ 101.684686][ T5788] do_syscall_64+0x55/0xb0 [ 101.689145][ T5788] page last free stack trace: [ 101.693987][ T5788] free_unref_page_prepare+0x7ce/0x8e0 [ 101.699492][ T5788] free_unref_page+0x32/0x2e0 [ 101.704277][ T5788] __slab_free+0x35e/0x410 [ 101.708740][ T5788] qlist_free_all+0x75/0xe0 [ 101.713339][ T5788] kasan_quarantine_reduce+0x143/0x160 [ 101.718843][ T5788] __kasan_slab_alloc+0x22/0x80 [ 101.723815][ T5788] slab_post_alloc_hook+0x6e/0x4d0 [ 101.728977][ T5788] kmem_cache_alloc+0x11e/0x2e0 [ 101.733930][ T5788] getname_flags+0xbb/0x500 [ 101.738476][ T5788] user_path_at_empty+0x2c/0x60 [ 101.743489][ T5788] do_readlinkat+0xd8/0x480 [ 101.748042][ T5788] __x64_sys_readlink+0x7f/0x90 [ 101.753992][ T5788] do_syscall_64+0x55/0xb0 [ 101.758461][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.764569][ T5788] Modules linked in: [ 101.768499][ T5788] CPU: 1 PID: 5788 Comm: syz-executor Tainted: G B syzkaller #0 [ 101.777561][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.787634][ T5788] Call Trace: [ 101.790927][ T5788] [ 101.793876][ T5788] dump_stack_lvl+0x16c/0x230 [ 101.798575][ T5788] ? show_regs_print_info+0x20/0x20 [ 101.803862][ T5788] ? swiotlb_print_info+0x70/0x70 [ 101.808923][ T5788] bad_page+0x14b/0x170 [ 101.813091][ T5788] free_unref_page_prepare+0x887/0x8e0 [ 101.818586][ T5788] free_unref_page+0x32/0x2e0 [ 101.823286][ T5788] ? __folio_put+0xef/0x210 [ 101.827844][ T5788] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 101.834311][ T5788] erofs_shrink_workstation+0x118/0x290 [ 101.839883][ T5788] ? erofs_shrinker_unregister+0x170/0x170 [ 101.845695][ T5788] ? io_schedule+0xd0/0xd0 [ 101.850139][ T5788] ? kobject_put+0x43c/0x470 [ 101.854790][ T5788] erofs_shrinker_unregister+0x5d/0x170 [ 101.860363][ T5788] erofs_put_super+0x4e/0x150 [ 101.865080][ T5788] ? erofs_free_inode+0xb0/0xb0 [ 101.869965][ T5788] generic_shutdown_super+0x134/0x2b0 [ 101.875466][ T5788] kill_block_super+0x44/0x90 [ 101.880159][ T5788] erofs_kill_sb+0x4c/0x140 [ 101.884691][ T5788] deactivate_locked_super+0x97/0x100 [ 101.890090][ T5788] cleanup_mnt+0x429/0x4c0 [ 101.894528][ T5788] task_work_run+0x1ce/0x250 [ 101.899133][ T5788] ? task_work_cancel+0x240/0x240 [ 101.904200][ T5788] ? exit_to_user_mode_loop+0x3b/0x110 [ 101.909675][ T5788] exit_to_user_mode_loop+0xe6/0x110 [ 101.914976][ T5788] exit_to_user_mode_prepare+0xf6/0x180 [ 101.921573][ T5788] syscall_exit_to_user_mode+0x1a/0x50 [ 101.927073][ T5788] do_syscall_64+0x61/0xb0 [ 101.931516][ T5788] ? clear_bhb_loop+0x40/0x90 [ 101.936212][ T5788] ? clear_bhb_loop+0x40/0x90 [ 101.940908][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.946819][ T5788] RIP: 0033:0x7fe666d90a77 [ 101.951285][ T5788] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 101.971170][ T5788] RSP: 002b:00007ffc413011d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.979597][ T5788] RAX: 0000000000000000 RBX: 00007fe666e13d7d RCX: 00007fe666d90a77 [ 101.987578][ T5788] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc41301290 [ 101.995667][ T5788] RBP: 00007ffc41301290 R08: 0000000000000000 R09: 0000000000000000 [ 102.003668][ T5788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc41302320 [ 102.011750][ T5788] R13: 00007fe666e13d7d R14: 00000000000189b9 R15: 00007ffc41302360 [ 102.019769][ T5788] [ 102.024621][ T5788] BUG: Bad page state in process syz-executor pfn:772a9 [ 102.031854][ T5788] page:ffffea0001dcaa40 refcount:0 mapcount:0 mapping:ffff88805f3907c8 index:0x4 pfn:0x772a9 [ 102.042107][ T5788] aops:z_erofs_cache_aops ino:0 [ 102.047006][ T5788] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 102.054819][ T5788] page_type: 0xffffffff() [ 102.060237][ T5788] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f3907c8 [ 102.068868][ T5788] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 102.077692][ T5788] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 102.085071][ T5788] page_owner tracks the page as allocated [ 102.090857][ T5788] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5915, tgid 5907 (syz.3.8), ts 100202232207, free_ts 100075042658 [ 102.112701][ T5788] post_alloc_hook+0x1cd/0x210 [ 102.117559][ T5788] get_page_from_freelist+0x195c/0x19f0 [ 102.123200][ T5788] __alloc_pages+0x1e3/0x460 [ 102.127833][ T5788] z_erofs_do_read_page+0x20c0/0x3680 [ 102.133310][ T5788] z_erofs_pcluster_readmore+0x2cf/0x450 [ 102.138998][ T5788] z_erofs_read_folio+0x208/0x540 [ 102.144115][ T5788] filemap_read_folio+0x167/0x760 [ 102.149177][ T5788] do_read_cache_folio+0x470/0x7e0 [ 102.154398][ T5788] erofs_bread+0x16f/0x630 [ 102.159962][ T5788] erofs_namei+0x28c/0xf00 [ 102.164444][ T5788] erofs_lookup+0x135/0x310 [ 102.169003][ T5788] path_openat+0x10b8/0x3190 [ 102.173834][ T5788] do_filp_open+0x1c5/0x3d0 [ 102.178401][ T5788] do_sys_openat2+0x12c/0x1c0 [ 102.183182][ T5788] __x64_sys_openat+0x139/0x160 [ 102.188157][ T5788] do_syscall_64+0x55/0xb0 [ 102.192770][ T5788] page last free stack trace: [ 102.197475][ T5788] free_unref_page_prepare+0x7ce/0x8e0 [ 102.203140][ T5788] free_unref_page+0x32/0x2e0 [ 102.207875][ T5788] __slab_free+0x35e/0x410 [ 102.212423][ T5788] qlist_free_all+0x75/0xe0 [ 102.216972][ T5788] kasan_quarantine_reduce+0x143/0x160 [ 102.222555][ T5788] __kasan_slab_alloc+0x22/0x80 [ 102.227446][ T5788] slab_post_alloc_hook+0x6e/0x4d0 [ 102.232685][ T5788] kmem_cache_alloc+0x11e/0x2e0 [ 102.237588][ T5788] getname_flags+0xbb/0x500 [ 102.242199][ T5788] user_path_at_empty+0x2c/0x60 [ 102.247112][ T5788] do_readlinkat+0xd8/0x480 [ 102.251744][ T5788] __x64_sys_readlink+0x7f/0x90 [ 102.256639][ T5788] do_syscall_64+0x55/0xb0 [ 102.262154][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.268110][ T5788] Modules linked in: [ 102.272312][ T5788] CPU: 1 PID: 5788 Comm: syz-executor Tainted: G B syzkaller #0 [ 102.281421][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.291510][ T5788] Call Trace: [ 102.294853][ T5788] [ 102.297823][ T5788] dump_stack_lvl+0x16c/0x230 [ 102.302542][ T5788] ? show_regs_print_info+0x20/0x20 [ 102.307789][ T5788] ? swiotlb_print_info+0x70/0x70 [ 102.312878][ T5788] bad_page+0x14b/0x170 [ 102.317078][ T5788] free_unref_page_prepare+0x887/0x8e0 [ 102.322604][ T5788] free_unref_page+0x32/0x2e0 [ 102.327325][ T5788] ? __folio_put+0xef/0x210 [ 102.331861][ T5788] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 102.338319][ T5788] erofs_shrink_workstation+0x118/0x290 [ 102.343904][ T5788] ? erofs_shrinker_unregister+0x170/0x170 [ 102.349751][ T5788] ? io_schedule+0xd0/0xd0 [ 102.354227][ T5788] ? kobject_put+0x43c/0x470 [ 102.358858][ T5788] erofs_shrinker_unregister+0x5d/0x170 [ 102.364443][ T5788] erofs_put_super+0x4e/0x150 [ 102.369175][ T5788] ? erofs_free_inode+0xb0/0xb0 [ 102.374079][ T5788] generic_shutdown_super+0x134/0x2b0 [ 102.379506][ T5788] kill_block_super+0x44/0x90 [ 102.384228][ T5788] erofs_kill_sb+0x4c/0x140 [ 102.388764][ T5788] deactivate_locked_super+0x97/0x100 [ 102.394242][ T5788] cleanup_mnt+0x429/0x4c0 [ 102.398698][ T5788] task_work_run+0x1ce/0x250 [ 102.403398][ T5788] ? task_work_cancel+0x240/0x240 [ 102.408444][ T5788] ? exit_to_user_mode_loop+0x3b/0x110 [ 102.414007][ T5788] exit_to_user_mode_loop+0xe6/0x110 [ 102.419310][ T5788] exit_to_user_mode_prepare+0xf6/0x180 [ 102.424873][ T5788] syscall_exit_to_user_mode+0x1a/0x50 [ 102.430346][ T5788] do_syscall_64+0x61/0xb0 [ 102.434784][ T5788] ? clear_bhb_loop+0x40/0x90 [ 102.439472][ T5788] ? clear_bhb_loop+0x40/0x90 [ 102.444161][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.450084][ T5788] RIP: 0033:0x7fe666d90a77 [ 102.454509][ T5788] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 102.474137][ T5788] RSP: 002b:00007ffc413011d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.482571][ T5788] RAX: 0000000000000000 RBX: 00007fe666e13d7d RCX: 00007fe666d90a77 [ 102.490560][ T5788] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc41301290 [ 102.498546][ T5788] RBP: 00007ffc41301290 R08: 0000000000000000 R09: 0000000000000000 [ 102.506687][ T5788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc41302320 [ 102.514695][ T5788] R13: 00007fe666e13d7d R14: 00000000000189b9 R15: 00007ffc41302360 [ 102.522696][ T5788]