last executing test programs: 7.101925363s ago: executing program 2 (id=40): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 6.830474092s ago: executing program 2 (id=43): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x0, 0x92f}, &(0x7f0000000080)=0x8) 5.723949604s ago: executing program 2 (id=52): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 3.442168204s ago: executing program 2 (id=61): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 3.419585805s ago: executing program 0 (id=63): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x2000000000003, 0x2}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.105789906s ago: executing program 0 (id=65): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) eventfd(0x0) io_submit(r0, 0x0, 0x0) 2.831268274s ago: executing program 2 (id=68): mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)={0x40, 0x14, 0x4, "0000e4ff"}, 0x0, 0x0}) 2.620591848s ago: executing program 0 (id=69): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x5d9f61795f7ff7f7) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xf519, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 2.620224738s ago: executing program 3 (id=70): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x1, 0x0, 0x1, 0x2}, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 2.141718669s ago: executing program 3 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) 1.786217973s ago: executing program 3 (id=72): creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0xca, &(0x7f0000000080)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, r1, &(0x7f0000000140)="e5ed6dd8c28ce374a9991b119a575f82eeb4fe0366c48f49b5830beb2fe516e43c4065ad72d51fd2a19955be74d9c74a0764681b66812090e2f5a9cc0a678964a8bd877b7b301df8a0071a3db4745dc889d6c158b9ebc3cdc8e45af26ab43790af545d10b3a7ae7c02d062d574a028c98f5a44d44ca85bb095349418f5ffcc55ebb900eea47dd463b8e1a83eb061179d54b36399968b2ede680f1f234dc71d5f107d12c318b4c51f0820d49be9702a5bace4e3d6c9df81f6a5c86fd7c752bfe5c5641e6cb9567a94cf4f25be7d9f67bb6d746657a5c0631dade3805207c27c9a2b188215cff9fa099f3bb570caae3fdf79a0c3f4", 0xb499, 0x8}]) 1.567246207s ago: executing program 1 (id=73): r0 = syz_io_uring_setup(0x6df0, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) 1.266881807s ago: executing program 3 (id=74): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000008c0)="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", 0x1db}], 0x1}}], 0x1, 0x60cd894) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000380)={0x21, 0x0, [{0x298, 0x0, 0x100}]}) 977.386846ms ago: executing program 0 (id=75): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) close(r0) 928.784189ms ago: executing program 3 (id=76): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0xa27, &(0x7f0000000040)={0x0, 0x755e, 0x40, 0x1, 0x51, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 905.262161ms ago: executing program 1 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@empty, @empty, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x3, 0x0, 0x4, 0xfffffffe}, 0x3c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) 754.944981ms ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x400020008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) 725.558582ms ago: executing program 2 (id=79): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x4, 0x0, 0x6, r2}, 0x10) 551.367054ms ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0x10, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x99, 0xff}}, @supported_rates={0x1, 0x4, [{0x48, 0x1}, {0x6c}, {0x6}, {0x74, 0x1}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a4b3a127efc1"}]}, 0x50}}, 0x0) 315.144939ms ago: executing program 1 (id=81): mkdir(&(0x7f0000000440)='./file1\x00', 0x82) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) 286.969901ms ago: executing program 0 (id=82): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) fadvise64(r0, 0xe0ffff, 0x9, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 223.198585ms ago: executing program 1 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) 76.347615ms ago: executing program 1 (id=84): r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x4) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 0s ago: executing program 0 (id=85): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x3c, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0xb, "689c292f0f994d9c52794649ca8b7d49"}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 79.077187][ T5772] cgroup: Unknown subsys name 'net' [ 79.247186][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.951478][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.143022][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.151370][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.160786][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.170083][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.178392][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.184323][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.187123][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.194577][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.201581][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.208977][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.214936][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.224108][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.236056][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.236561][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.244881][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.252188][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.258999][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.265476][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.272439][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.283640][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.293143][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.302617][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.310223][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.358724][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.775445][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 83.941196][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 83.965425][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.972761][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.981183][ T5791] bridge_slave_0: entered allmulticast mode [ 83.988976][ T5791] bridge_slave_0: entered promiscuous mode [ 84.002486][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.009837][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.017056][ T5791] bridge_slave_1: entered allmulticast mode [ 84.024639][ T5791] bridge_slave_1: entered promiscuous mode [ 84.129938][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.167222][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.176527][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.250206][ T5791] team0: Port device team_slave_0 added [ 84.274100][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.282403][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.290118][ T5782] bridge_slave_0: entered allmulticast mode [ 84.298441][ T5782] bridge_slave_0: entered promiscuous mode [ 84.320185][ T5791] team0: Port device team_slave_1 added [ 84.341882][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.349308][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.356537][ T5782] bridge_slave_1: entered allmulticast mode [ 84.364400][ T5782] bridge_slave_1: entered promiscuous mode [ 84.395294][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 84.425126][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.432397][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.459175][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.516167][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.523284][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.550106][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.571549][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.584450][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.602007][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.609412][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.616745][ T5787] bridge_slave_0: entered allmulticast mode [ 84.623989][ T5787] bridge_slave_0: entered promiscuous mode [ 84.632990][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.640268][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.647661][ T5787] bridge_slave_1: entered allmulticast mode [ 84.654689][ T5787] bridge_slave_1: entered promiscuous mode [ 84.762790][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.774863][ T5782] team0: Port device team_slave_0 added [ 84.784773][ T5782] team0: Port device team_slave_1 added [ 84.827321][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.858652][ T5791] hsr_slave_0: entered promiscuous mode [ 84.865258][ T5791] hsr_slave_1: entered promiscuous mode [ 84.912888][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.920068][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.946586][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.971699][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.979081][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.986273][ T5785] bridge_slave_0: entered allmulticast mode [ 84.993803][ T5785] bridge_slave_0: entered promiscuous mode [ 85.014915][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.022210][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.048333][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.084231][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.091470][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.099033][ T5785] bridge_slave_1: entered allmulticast mode [ 85.106039][ T5785] bridge_slave_1: entered promiscuous mode [ 85.116020][ T5787] team0: Port device team_slave_0 added [ 85.125252][ T5787] team0: Port device team_slave_1 added [ 85.189339][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.196354][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.222551][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.256823][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.269404][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.279807][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.286872][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.314241][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.328374][ T5792] Bluetooth: hci3: command tx timeout [ 85.393558][ T5782] hsr_slave_0: entered promiscuous mode [ 85.398269][ T5788] Bluetooth: hci1: command tx timeout [ 85.405253][ T5099] Bluetooth: hci0: command tx timeout [ 85.408795][ T5782] hsr_slave_1: entered promiscuous mode [ 85.411440][ T5792] Bluetooth: hci2: command tx timeout [ 85.422825][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.432027][ T5782] Cannot create hsr debugfs directory [ 85.455507][ T5785] team0: Port device team_slave_0 added [ 85.508261][ T5785] team0: Port device team_slave_1 added [ 85.536636][ T5787] hsr_slave_0: entered promiscuous mode [ 85.543947][ T5787] hsr_slave_1: entered promiscuous mode [ 85.550643][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.558590][ T5787] Cannot create hsr debugfs directory [ 85.666600][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.673756][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.700038][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.713549][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.720967][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.747342][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.924285][ T5785] hsr_slave_0: entered promiscuous mode [ 85.932661][ T5785] hsr_slave_1: entered promiscuous mode [ 85.939845][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.947542][ T5785] Cannot create hsr debugfs directory [ 85.968637][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.982907][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.995199][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.006906][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.160365][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.180166][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.204729][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.246562][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.363533][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.385833][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.400660][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.435278][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.518551][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.529486][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.550397][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.566202][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.578494][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.671094][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.692970][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.700415][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.728433][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.746434][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.753667][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.804483][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.845883][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.853115][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.897452][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.904620][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.942810][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.056718][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.084488][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.100803][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.108083][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.140326][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.147574][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.231327][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.290460][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.297685][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.370845][ T2879] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.378070][ T2879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.401139][ T5792] Bluetooth: hci3: command tx timeout [ 87.477795][ T5792] Bluetooth: hci2: command tx timeout [ 87.483286][ T5792] Bluetooth: hci1: command tx timeout [ 87.489236][ T5788] Bluetooth: hci0: command tx timeout [ 87.590278][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.777506][ T5791] veth0_vlan: entered promiscuous mode [ 87.838834][ T5791] veth1_vlan: entered promiscuous mode [ 87.929989][ T5791] veth0_macvtap: entered promiscuous mode [ 87.967984][ T5791] veth1_macvtap: entered promiscuous mode [ 88.004365][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.051920][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.100240][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.172273][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.182931][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.193638][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.205219][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.315953][ T5782] veth0_vlan: entered promiscuous mode [ 88.330634][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.351982][ T5782] veth1_vlan: entered promiscuous mode [ 88.434533][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.501529][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.510325][ T5782] veth0_macvtap: entered promiscuous mode [ 88.514090][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.542596][ T5787] veth0_vlan: entered promiscuous mode [ 88.563808][ T5787] veth1_vlan: entered promiscuous mode [ 88.576977][ T5782] veth1_macvtap: entered promiscuous mode [ 88.622789][ T4471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.632793][ T4471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.643237][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.654897][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.669180][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.709581][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.721619][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.734346][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.754870][ T5785] veth0_vlan: entered promiscuous mode [ 88.770550][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.783625][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.797085][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.808653][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.823127][ T5787] veth0_macvtap: entered promiscuous mode [ 88.862394][ T5787] veth1_macvtap: entered promiscuous mode [ 88.901676][ T5785] veth1_vlan: entered promiscuous mode [ 88.920970][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.933355][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.944369][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.955262][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.968609][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.005264][ T5876] syz.1.2[5876]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.046137][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.061066][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.071446][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.082753][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.094897][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.154586][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.164071][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.179524][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.193021][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.218187][ T4471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.226213][ T4471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.326713][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.338931][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.349555][ T5785] veth0_macvtap: entered promiscuous mode [ 89.385836][ T5785] veth1_macvtap: entered promiscuous mode [ 89.452251][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.469784][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.485201][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.487631][ T5792] Bluetooth: hci3: command tx timeout [ 89.501391][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.514396][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.530901][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.544765][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.558101][ T5099] Bluetooth: hci0: command tx timeout [ 89.564067][ T5788] Bluetooth: hci2: command tx timeout [ 89.579730][ T5792] Bluetooth: hci1: command tx timeout [ 89.584749][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.642678][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.656890][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.685657][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.696053][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.708860][ T5876] loop1: detected capacity change from 0 to 40427 [ 89.724274][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.743918][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.768237][ T5876] F2FS-fs (loop1): invalid crc value [ 89.783025][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.796384][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.804328][ T5878] loop0: detected capacity change from 0 to 128 [ 89.813006][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.839750][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.852596][ T5876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.859274][ T5878] qnx4: no qnx4 filesystem (no root dir). [ 89.884443][ T4471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.915996][ T4471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.113231][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.126967][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.148606][ T5876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 90.206454][ T28] audit: type=1800 audit(1759814088.349:2): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 90.234046][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.263478][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.286626][ T28] audit: type=1800 audit(1759814088.379:3): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 90.325311][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.337937][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.342624][ T5791] syz-executor: attempt to access beyond end of device [ 90.342624][ T5791] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.391776][ T5791] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 90.407881][ T5858] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.670891][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 90.692405][ T5858] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 90.723587][ T5892] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.731308][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.779856][ T5858] usb 1-1: config 0 descriptor?? [ 91.027981][ T5858] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 91.054951][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.099289][ T5858] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 91.106735][ T5858] usb 1-1: media controller created [ 91.202523][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.310019][ T5858] az6027: usb out operation failed. (-71) [ 91.330629][ T5858] az6027: usb out operation failed. (-71) [ 91.344612][ T5858] stb0899_attach: Driver disabled by Kconfig [ 91.351389][ T5858] az6027: no front-end attached [ 91.351389][ T5858] [ 91.361093][ T5858] az6027: usb out operation failed. (-71) [ 91.371593][ T5858] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 91.390380][ T5858] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 91.451517][ T5858] dvb-usb: schedule remote query interval to 400 msecs. [ 91.503380][ T5858] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 91.558933][ T5792] Bluetooth: hci3: command tx timeout [ 91.574851][ T5858] usb 1-1: USB disconnect, device number 2 [ 91.641824][ T5792] Bluetooth: hci1: command tx timeout [ 91.647338][ T5788] Bluetooth: hci2: command tx timeout [ 91.653060][ T5788] Bluetooth: hci0: command tx timeout [ 91.680668][ T5858] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 91.700715][ T5907] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 92.212748][ T27] cfg80211: failed to load regulatory.db [ 92.296895][ T5921] loop0: detected capacity change from 0 to 4096 [ 92.379425][ T5927] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.484416][ T5929] loop2: detected capacity change from 0 to 256 [ 92.688115][ T5929] FAT-fs (loop2): Directory bread(block 64) failed [ 92.703000][ T5929] FAT-fs (loop2): Directory bread(block 65) failed [ 92.715345][ T5929] FAT-fs (loop2): Directory bread(block 66) failed [ 92.728344][ T5929] FAT-fs (loop2): Directory bread(block 67) failed [ 92.735078][ T5929] FAT-fs (loop2): Directory bread(block 68) failed [ 92.747511][ T5929] FAT-fs (loop2): Directory bread(block 69) failed [ 92.787647][ T5929] FAT-fs (loop2): Directory bread(block 70) failed [ 92.800460][ T5929] FAT-fs (loop2): Directory bread(block 71) failed [ 92.818794][ T5929] FAT-fs (loop2): Directory bread(block 72) failed [ 92.825401][ T5929] FAT-fs (loop2): Directory bread(block 73) failed [ 92.965013][ T5935] loop1: detected capacity change from 0 to 128 [ 92.974805][ T5935] ======================================================= [ 92.974805][ T5935] WARNING: The mand mount option has been deprecated and [ 92.974805][ T5935] and is ignored by this kernel. Remove the mand [ 92.974805][ T5935] option from the mount to silence this warning. [ 92.974805][ T5935] ======================================================= [ 93.051126][ T5937] netlink: 71 bytes leftover after parsing attributes in process `syz.0.23'. [ 93.074083][ T5935] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 93.082775][ C0] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 93.091168][ T5935] hpfs: filesystem error: improperly stopped [ 93.144946][ T5935] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 93.187314][ T5935] hpfs: You really don't want any checks? You are crazy... [ 93.201249][ T5935] hpfs: hpfs_map_sector(): read error [ 93.206813][ T5935] hpfs: code page support is disabled [ 93.219985][ T5935] hpfs: hpfs_map_4sectors(): unaligned read [ 93.226314][ T5935] hpfs: hpfs_map_4sectors(): unaligned read [ 93.236733][ T5935] hpfs: filesystem error: unable to find root dir [ 93.362195][ T5935] hpfs: hpfs_map_4sectors(): unaligned read [ 93.509277][ T5942] capability: warning: `syz.0.26' uses 32-bit capabilities (legacy support in use) [ 93.692249][ T5933] loop3: detected capacity change from 0 to 32768 [ 93.721582][ T5933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.22 (5933) [ 93.777162][ T5933] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.800078][ T5933] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 93.821355][ T5933] BTRFS info (device loop3): max_inline at 0 [ 93.852885][ T5933] BTRFS info (device loop3): enabling disk space caching [ 93.864068][ T5933] BTRFS info (device loop3): setting nodatasum [ 93.872373][ T5933] BTRFS info (device loop3): turning off barriers [ 93.889758][ T5933] BTRFS info (device loop3): turning on flush-on-commit [ 93.905153][ T5933] BTRFS info (device loop3): doing ref verification [ 93.920104][ T5933] BTRFS info (device loop3): force clearing of disk cache [ 93.950282][ T5933] BTRFS warning (device loop3): excessive commit interval 2147483647 [ 93.966428][ T5933] BTRFS info (device loop3): turning on sync discard [ 93.987500][ T5933] BTRFS info (device loop3): use zlib compression, level 3 [ 94.007131][ T5933] BTRFS info (device loop3): disk space caching is enabled [ 94.076155][ T5955] loop0: detected capacity change from 0 to 128 [ 94.141623][ T5933] BTRFS info (device loop3): enabling ssd optimizations [ 94.159773][ T5933] BTRFS info (device loop3): rebuilding free space tree [ 94.181340][ T5955] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.240234][ T5955] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.328696][ T5933] BTRFS info (device loop3): disabling free space tree [ 94.351299][ T5933] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.360315][ T5940] loop2: detected capacity change from 0 to 32768 [ 94.370888][ T5955] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 20: comm syz.0.29: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 94.397356][ T5933] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.418430][ T5955] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 94.563288][ T28] audit: type=1800 audit(1759814092.699:4): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 94.610915][ T5969] loop1: detected capacity change from 0 to 128 [ 94.624611][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.074209][ T5976] loop1: detected capacity change from 0 to 256 [ 95.190872][ T5787] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.741410][ T5986] tipc: Started in network mode [ 95.763481][ T5986] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 95.776608][ T5989] 9p: Unknown uid 00000000004294967295 [ 95.792271][ T5986] tipc: Enabled bearer , priority 10 [ 96.033549][ T5995] team_slave_0: entered promiscuous mode [ 96.039579][ T5995] team_slave_1: entered promiscuous mode [ 96.070038][ T5995] macsec1: entered promiscuous mode [ 96.087574][ T5995] team0: entered promiscuous mode [ 96.098474][ T5995] macsec1: entered allmulticast mode [ 96.106092][ T5997] loop3: detected capacity change from 0 to 2048 [ 96.131622][ T5995] team0: entered allmulticast mode [ 96.136979][ T5995] team_slave_0: entered allmulticast mode [ 96.161067][ T5995] team_slave_1: entered allmulticast mode [ 96.191090][ T5997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.201509][ T5995] team0: Device macsec1 is already an upper device of the team interface [ 96.237873][ T5995] team0: left allmulticast mode [ 96.246076][ T5995] team_slave_0: left allmulticast mode [ 96.261996][ T5995] team_slave_1: left allmulticast mode [ 96.278338][ T5995] team0: left promiscuous mode [ 96.285485][ T5995] team_slave_0: left promiscuous mode [ 96.291062][ T5995] team_slave_1: left promiscuous mode [ 96.368559][ T28] audit: type=1800 audit(1759814094.509:5): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.33" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 96.910162][ T5831] tipc: Node number set to 4269801494 [ 97.084917][ T6014] loop3: detected capacity change from 0 to 4096 [ 97.119231][ T6014] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 97.274307][ T6014] ntfs3: loop3: $Secure::$SDH is corrupted. [ 97.290298][ T6014] ntfs3: loop3: Failed to initialize $Secure (-22). [ 97.305155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.358136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.367176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.377050][ T5831] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.404386][ T6006] loop1: detected capacity change from 0 to 40427 [ 97.455558][ T6006] F2FS-fs (loop1): invalid crc value [ 97.482879][ T6006] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.597598][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 97.620145][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.663998][ T6006] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.675377][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.718757][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 97.758395][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.840761][ T5831] usb 1-1: config 0 descriptor?? [ 97.893988][ T5791] syz-executor: attempt to access beyond end of device [ 97.893988][ T5791] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.895871][ T5831] hub 1-1:0.0: USB hub found [ 97.945026][ T5791] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.007814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.096391][ T5831] hub 1-1:0.0: 1 port detected [ 98.525684][ T5831] usb 1-1: USB disconnect, device number 3 [ 98.707716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.716253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.827896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.292679][ T6038] loop1: detected capacity change from 0 to 4096 [ 99.383059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.496074][ T6038] ntfs3: loop1: ino=b, Correct links count -> 1. [ 99.532222][ T6038] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 100.081076][ T28] audit: type=1326 audit(1759814098.219:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978b8eec9 code=0x7ffc0000 [ 100.159004][ T28] audit: type=1326 audit(1759814098.229:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978b8eec9 code=0x7ffc0000 [ 100.238681][ T28] audit: type=1326 audit(1759814098.229:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fd978b8eec9 code=0x7ffc0000 [ 100.317177][ T28] audit: type=1326 audit(1759814098.229:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978b8eec9 code=0x7ffc0000 [ 100.380143][ T6068] loop3: detected capacity change from 0 to 64 [ 100.387492][ T28] audit: type=1326 audit(1759814098.239:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fd978b8eec9 code=0x7ffc0000 [ 100.447607][ T28] audit: type=1326 audit(1759814098.239:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978b8eec9 code=0x7ffc0000 [ 100.477945][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.510543][ T28] audit: type=1326 audit(1759814098.239:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd978b8eec9 code=0x7ffc0000 [ 100.561136][ T6068] minix_free_block (loop3:1): bit already cleared [ 100.591171][ T6068] minix_free_block (loop3:4): bit already cleared [ 100.607513][ T6068] minix_free_block (loop3:3): bit already cleared [ 100.627501][ T6068] minix_free_block (loop3:2): bit already cleared [ 100.644848][ T6068] minix_free_block (loop3:1): bit already cleared [ 100.677987][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 100.690131][ T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 100.717467][ T27] usb 3-1: config 0 has no interface number 0 [ 100.730444][ T6061] loop1: detected capacity change from 0 to 32768 [ 100.732364][ T27] usb 3-1: config 0 interface 184 has no altsetting 0 [ 100.770730][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 100.786894][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.809792][ T27] usb 3-1: Product: syz [ 100.814033][ T27] usb 3-1: Manufacturer: syz [ 100.846087][ T27] usb 3-1: SerialNumber: syz [ 100.878582][ T27] usb 3-1: config 0 descriptor?? [ 100.893997][ T27] smsc75xx v1.0.0 [ 100.906836][ T6061] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 101.249319][ T6066] loop0: detected capacity change from 0 to 40427 [ 101.281947][ T6066] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 101.308368][ T6066] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.371234][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 101.379578][ T6066] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.521619][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 101.552964][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 101.553817][ T6066] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.594841][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 101.597530][ T6066] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.632145][ T27] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 101.687838][ T27] usb 3-1: USB disconnect, device number 2 [ 101.791354][ T6066] syz.0.69: attempt to access beyond end of device [ 101.791354][ T6066] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 101.914313][ T5782] syz-executor: attempt to access beyond end of device [ 101.914313][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.947855][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 102.675902][ T6106] loop0: detected capacity change from 0 to 16 [ 102.707291][ T6106] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.784943][ T6106] syz.0.82: attempt to access beyond end of device [ 102.784943][ T6106] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 102.799507][ T6106] syz.0.82: attempt to access beyond end of device [ 102.799507][ T6106] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 102.832466][ T6106] syz.0.82: attempt to access beyond end of device [ 102.832466][ T6106] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 102.894039][ T5782] BUG: Bad page state in process syz-executor pfn:7c968 [ 102.902286][ T5782] page:ffffea0001f25a00 refcount:0 mapcount:0 mapping:ffff8880792c07c8 index:0x2 pfn:0x7c968 [ 102.913025][ T5782] aops:z_erofs_cache_aops ino:0 [ 102.918113][ T5782] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 102.925980][ T5782] page_type: 0xffffffff() [ 102.930529][ T5782] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880792c07c8 [ 102.940348][ T5782] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 102.949275][ T5782] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 102.957442][ T5782] page_owner tracks the page as allocated [ 102.964193][ T5782] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6106, tgid 6105 (syz.0.82), ts 102784544608, free_ts 101980467341 [ 102.986315][ T5782] post_alloc_hook+0x1cd/0x210 [ 102.991247][ T5782] get_page_from_freelist+0x195c/0x19f0 [ 102.996865][ T5782] __alloc_pages+0x1e3/0x460 [ 103.001863][ T5782] z_erofs_do_read_page+0x20c0/0x3680 [ 103.007585][ T5782] z_erofs_readahead+0x862/0xd50 [ 103.012582][ T5782] read_pages+0x177/0x840 [ 103.016967][ T5782] page_cache_ra_unbounded+0x692/0x770 [ 103.022656][ T5782] force_page_cache_ra+0x2c1/0x320 [ 103.027898][ T5782] generic_fadvise+0x44f/0x730 [ 103.032722][ T5782] __x64_sys_fadvise64+0x140/0x180 [ 103.038006][ T5782] do_syscall_64+0x55/0xb0 [ 103.043541][ T5782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.049755][ T5782] page last free stack trace: [ 103.054480][ T5782] free_unref_page_prepare+0x7ce/0x8e0 [ 103.060189][ T5782] free_unref_page_list+0xbe/0x860 [ 103.065375][ T5782] release_pages+0x1fa0/0x2220 [ 103.070324][ T5782] tlb_flush_mmu+0x368/0x4f0 [ 103.074983][ T5782] tlb_finish_mmu+0xc3/0x1d0 [ 103.082839][ T5782] exit_mmap+0x3f0/0xb50 [ 103.089117][ T5782] __mmput+0x118/0x3c0 [ 103.093261][ T5782] exit_mm+0x1da/0x2c0 [ 103.097524][ T5782] do_exit+0x88e/0x23c0 [ 103.101736][ T5782] do_group_exit+0x21b/0x2d0 [ 103.106386][ T5782] get_signal+0x12fc/0x1400 [ 103.111034][ T5782] arch_do_signal_or_restart+0x96/0x780 [ 103.116642][ T5782] exit_to_user_mode_loop+0x70/0x110 [ 103.122093][ T5782] exit_to_user_mode_prepare+0xf6/0x180 [ 103.127866][ T5782] syscall_exit_to_user_mode+0x1a/0x50 [ 103.133406][ T5782] do_syscall_64+0x61/0xb0 [ 103.138325][ T5782] Modules linked in: [ 103.143379][ T5782] CPU: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 [ 103.151071][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.161276][ T5782] Call Trace: [ 103.164606][ T5782] [ 103.167588][ T5782] dump_stack_lvl+0x16c/0x230 [ 103.172323][ T5782] ? show_regs_print_info+0x20/0x20 [ 103.177575][ T5782] ? swiotlb_print_info+0x70/0x70 [ 103.182660][ T5782] bad_page+0x14b/0x170 [ 103.186859][ T5782] free_unref_page_prepare+0x887/0x8e0 [ 103.192391][ T5782] free_unref_page+0x32/0x2e0 [ 103.197132][ T5782] ? __folio_put+0xef/0x210 [ 103.201686][ T5782] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 103.208154][ T5782] erofs_shrink_workstation+0x118/0x290 [ 103.213758][ T5782] ? erofs_shrinker_unregister+0x170/0x170 [ 103.219606][ T5782] ? io_schedule+0xd0/0xd0 [ 103.224141][ T5782] ? kobject_put+0x43c/0x470 [ 103.228799][ T5782] erofs_shrinker_unregister+0x5d/0x170 [ 103.234373][ T5782] erofs_put_super+0x4e/0x150 [ 103.239078][ T5782] ? erofs_free_inode+0xb0/0xb0 [ 103.243961][ T5782] generic_shutdown_super+0x134/0x2b0 [ 103.249372][ T5782] kill_block_super+0x44/0x90 [ 103.254071][ T5782] erofs_kill_sb+0x4c/0x140 [ 103.258605][ T5782] deactivate_locked_super+0x97/0x100 [ 103.264004][ T5782] cleanup_mnt+0x429/0x4c0 [ 103.268452][ T5782] task_work_run+0x1ce/0x250 [ 103.273071][ T5782] ? task_work_cancel+0x240/0x240 [ 103.278119][ T5782] ? exit_to_user_mode_loop+0x3b/0x110 [ 103.283602][ T5782] exit_to_user_mode_loop+0xe6/0x110 [ 103.289348][ T5782] exit_to_user_mode_prepare+0xf6/0x180 [ 103.294921][ T5782] syscall_exit_to_user_mode+0x1a/0x50 [ 103.300409][ T5782] do_syscall_64+0x61/0xb0 [ 103.304843][ T5782] ? clear_bhb_loop+0x40/0x90 [ 103.309538][ T5782] ? clear_bhb_loop+0x40/0x90 [ 103.314237][ T5782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.320150][ T5782] RIP: 0033:0x7fd978b901f7 [ 103.324600][ T5782] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 103.344239][ T5782] RSP: 002b:00007ffecb806198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.352679][ T5782] RAX: 0000000000000000 RBX: 00007fd978c11d7d RCX: 00007fd978b901f7 [ 103.360664][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecb806250 [ 103.368739][ T5782] RBP: 00007ffecb806250 R08: 0000000000000000 R09: 0000000000000000 [ 103.376730][ T5782] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffecb8072e0 [ 103.384713][ T5782] R13: 00007fd978c11d7d R14: 00000000000191a6 R15: 00007ffecb807320 [ 103.392803][ T5782] [ 103.396293][ T5782] Disabling lock debugging due to kernel taint