last executing test programs:

8.669387299s ago: executing program 4 (id=254):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0xffffffffffffffff)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x40002001})
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4)

8.075603202s ago: executing program 4 (id=261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c)

7.994919152s ago: executing program 4 (id=262):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

4.510286343s ago: executing program 3 (id=282):
r0 = fsopen(&(0x7f0000000040)='gadgetfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x11)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x58)

4.31140669s ago: executing program 3 (id=283):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000440)={[{@nobarrier}, {@nodatasum}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x304}}, {@nodatacow}, {@flushoncommit}, {@datacow}, {@space_cache_v1}, {@nodiscard}, {@clear_cache}, {@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000)
fallocate(r0, 0x0, 0x80000, 0x4)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f00000000c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00425f156e"], 0x1, 0x9e28, &(0x7f000000a040)="$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")
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x84d9000)

3.894878317s ago: executing program 4 (id=285):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010001f0025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/16, 0x6e}], 0x1, 0xe, 0x10040006)

2.727699926s ago: executing program 3 (id=288):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)={0x40, 0xa, 0x57, "c4b333209d5b64dea9fe5603cadbfeebc688397db29a42d1ddbd66b94e294b4b18ff7b023cc83b30b268c3b5f50b096296eb3325f50cd731bcf41c1e2c22e7f545ded6ed2596a7b6ccd5a6f7115a36e7676df462f1a65c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000320000000000000038010000fb27247972cdef1a9dba5753c7cf0034001a54c781a39281bba6c3e18497470791")
ioctl(r0, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01")

2.717724212s ago: executing program 0 (id=289):
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]})
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
preadv2(r0, 0x0, 0x0, 0x6839, 0xa4dc, 0xa)

1.736485238s ago: executing program 2 (id=292):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, 0x0, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1})

1.654459152s ago: executing program 3 (id=293):
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x7f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]})
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18)

1.41579747s ago: executing program 4 (id=295):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b})
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0xb, 0xc, 0x1203fffc, 0x7, 0x3, 0x80000205}})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.408950171s ago: executing program 3 (id=296):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

1.25534594s ago: executing program 0 (id=297):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001bc0)={{r0, 0x0, 0x200000, 0x0, 0x4, 0x0, 0x0}, 0x1, &(0x7f0000001a80)=[{0x3, 0x10001, 0x0, &(0x7f0000000780)="98", 0x1, 0x30}]})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094)

1.215717705s ago: executing program 2 (id=299):
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
unshare(0x6020400)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)

1.169472236s ago: executing program 3 (id=300):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x159, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x176e, 0x8, 0x3, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0xeff9, 0x826, 0x0, 0x0}}, 0x0)

1.159080298s ago: executing program 1 (id=301):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @rand_addr, 0xfffffffe}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c)

953.388424ms ago: executing program 1 (id=302):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0080, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x1, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x1, r3})
close_range(r0, 0xffffffffffffffff, 0x0)

920.723373ms ago: executing program 0 (id=303):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d05, &(0x7f0000000900)="00000d0000000000000001")
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

895.699391ms ago: executing program 2 (id=304):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)

869.514041ms ago: executing program 4 (id=305):
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

684.614364ms ago: executing program 0 (id=306):
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000100)={[{@i_version}, {@noauto_da_alloc}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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")
r1 = openat(r0, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x31)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x180802, 0x2, 0x6})

668.480255ms ago: executing program 1 (id=307):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0)

552.758158ms ago: executing program 1 (id=308):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)

462.516366ms ago: executing program 2 (id=309):
r0 = socket$inet6(0xa, 0x3, 0x87)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c)

320.141779ms ago: executing program 1 (id=310):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x8000, 0x3, 0xfffffffc}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0xf56, 0x0, 0x2}})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}})

287.345961ms ago: executing program 2 (id=311):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2, 0x0, 0x3, 0x8}], 0x10, 0x9}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xffffffffffffffd8, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)

274.696086ms ago: executing program 0 (id=312):
r0 = socket(0x2, 0x3, 0xff)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r2=>0x0})
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x9, 0x4)
sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e26, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x8c)

195.190754ms ago: executing program 1 (id=313):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000060001000500000008000c00a80a000008000b000000000008000900020000000c001000ffffffffffffffff0c000f"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

42.169336ms ago: executing program 2 (id=314):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000001dc0)=""/4096, 0x1000)

0s ago: executing program 0 (id=315):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}})

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   55.638026][ T5273] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.666921][ T5273] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts.
syzkaller login: [   78.610649][ T5599] cgroup: Unknown subsys name 'net'
[   78.721987][ T5599] cgroup: Unknown subsys name 'cpuset'
[   78.730868][ T5599] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.335666][ T5599] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.756643][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.765867][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.766309][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.767473][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.767686][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.769910][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.772293][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.774919][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.793563][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.799980][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.814235][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.815010][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.815829][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.846196][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.846883][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.853873][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.854439][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.861565][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.863199][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.865624][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.867897][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.870479][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.871595][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.880858][ T4928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.885548][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.690446][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.690568][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.691037][ T5613] bridge_slave_0: entered allmulticast mode
[   84.693831][ T5613] bridge_slave_0: entered promiscuous mode
[   84.770884][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.771004][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.771116][ T5613] bridge_slave_1: entered allmulticast mode
[   84.773264][ T5613] bridge_slave_1: entered promiscuous mode
[   84.879595][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.932683][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.932917][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.933008][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.933115][ T5612] bridge_slave_0: entered allmulticast mode
[   84.934930][ T5612] bridge_slave_0: entered promiscuous mode
[   84.943157][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.943416][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.943745][ T5612] bridge_slave_1: entered allmulticast mode
[   84.945748][ T5612] bridge_slave_1: entered promiscuous mode
[   84.954743][ T5623] Bluetooth: hci2: command tx timeout
[   84.954971][ T4928] Bluetooth: hci4: command tx timeout
[   84.962812][ T5623] Bluetooth: hci3: command tx timeout
[   84.963019][ T4928] Bluetooth: hci1: command tx timeout
[   85.028691][ T4928] Bluetooth: hci0: command tx timeout
[   85.094146][ T5613] team0: Port device team_slave_0 added
[   85.110120][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.110251][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.110380][ T5610] bridge_slave_0: entered allmulticast mode
[   85.111966][ T5610] bridge_slave_0: entered promiscuous mode
[   85.152005][ T5613] team0: Port device team_slave_1 added
[   85.154460][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.155189][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.155261][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.155364][ T5610] bridge_slave_1: entered allmulticast mode
[   85.156852][ T5610] bridge_slave_1: entered promiscuous mode
[   85.218451][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.306644][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.306783][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.307044][ T5609] bridge_slave_0: entered allmulticast mode
[   85.309763][ T5609] bridge_slave_0: entered promiscuous mode
[   85.321976][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.322019][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.322090][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.380588][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.399311][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.399446][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.399541][ T5611] bridge_slave_0: entered allmulticast mode
[   85.401042][ T5611] bridge_slave_0: entered promiscuous mode
[   85.404990][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.405451][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.405777][ T5609] bridge_slave_1: entered allmulticast mode
[   85.413864][ T5609] bridge_slave_1: entered promiscuous mode
[   85.423191][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.423233][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.423313][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.436941][ T5612] team0: Port device team_slave_0 added
[   85.451232][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.452280][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.452538][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.452871][ T5611] bridge_slave_1: entered allmulticast mode
[   85.460477][ T5611] bridge_slave_1: entered promiscuous mode
[   85.558834][ T5612] team0: Port device team_slave_1 added
[   85.584527][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.643549][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.663040][ T5610] team0: Port device team_slave_0 added
[   85.665940][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.697892][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.697909][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.697932][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.713892][ T5610] team0: Port device team_slave_1 added
[   85.723645][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.749809][ T5613] hsr_slave_0: entered promiscuous mode
[   85.753339][ T5613] hsr_slave_1: entered promiscuous mode
[   85.778427][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.778443][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.778471][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.843302][ T5609] team0: Port device team_slave_0 added
[   85.888805][ T5609] team0: Port device team_slave_1 added
[   85.891253][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.891287][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.891359][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.903844][ T5611] team0: Port device team_slave_0 added
[   85.966958][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.966975][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.966999][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.015635][ T5611] team0: Port device team_slave_1 added
[   86.046542][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.046566][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.046590][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.096141][ T5612] hsr_slave_0: entered promiscuous mode
[   86.096936][ T5612] hsr_slave_1: entered promiscuous mode
[   86.097492][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   86.097569][ T5612] Cannot create hsr debugfs directory
[   86.136970][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.136987][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.137010][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.212474][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.212492][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.212514][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.275871][ T5610] hsr_slave_0: entered promiscuous mode
[   86.279975][ T5610] hsr_slave_1: entered promiscuous mode
[   86.289248][ T5610] debugfs: 'hsr0' already exists in 'hsr'
[   86.289318][ T5610] Cannot create hsr debugfs directory
[   86.318289][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.318305][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.318328][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.497158][ T5609] hsr_slave_0: entered promiscuous mode
[   86.497906][ T5609] hsr_slave_1: entered promiscuous mode
[   86.500419][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   86.500474][ T5609] Cannot create hsr debugfs directory
[   86.609780][ T5611] hsr_slave_0: entered promiscuous mode
[   86.610532][ T5611] hsr_slave_1: entered promiscuous mode
[   86.611050][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   86.611070][ T5611] Cannot create hsr debugfs directory
[   86.864482][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.877556][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.906154][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.920917][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.969024][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.974828][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.975795][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   87.003785][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.028478][ T5623] Bluetooth: hci3: command tx timeout
[   87.028511][ T5623] Bluetooth: hci4: command tx timeout
[   87.028532][ T5623] Bluetooth: hci2: command tx timeout
[   87.028694][ T4928] Bluetooth: hci1: command tx timeout
[   87.108757][ T4928] Bluetooth: hci0: command tx timeout
[   87.201290][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.205902][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.206708][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.232992][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.235612][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.260712][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.277892][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.297253][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.422968][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.436608][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.452244][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.455951][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.456622][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.467106][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.495682][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.506519][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.610383][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.613548][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.615738][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.641712][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.659627][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.660030][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.667089][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.700201][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.704081][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.804092][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   87.834689][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.837419][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.853993][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.855758][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.870623][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.882669][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.882842][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.904598][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.907792][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.914958][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.934208][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.958049][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.958412][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.025070][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   88.045085][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.045174][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.057959][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.096019][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.096098][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.156745][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   88.229093][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.229200][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.250798][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.281681][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.281755][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.366708][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   88.383001][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.383109][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.450559][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.450663][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.507440][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.625971][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   88.663261][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.663367][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.718866][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.718965][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.111114][   T54] Bluetooth: hci2: command tx timeout
[   89.111149][   T54] Bluetooth: hci4: command tx timeout
[   89.111172][   T54] Bluetooth: hci3: command tx timeout
[   89.111337][ T4928] Bluetooth: hci1: command tx timeout
[   89.190176][ T4928] Bluetooth: hci0: command tx timeout
[   89.417855][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.814257][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.884443][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.092850][ T5610] veth0_vlan: entered promiscuous mode
[   90.141379][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.144688][ T5612] veth0_vlan: entered promiscuous mode
[   90.167289][ T5610] veth1_vlan: entered promiscuous mode
[   90.193176][ T5612] veth1_vlan: entered promiscuous mode
[   90.205796][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.283421][ T5613] veth0_vlan: entered promiscuous mode
[   90.322106][ T5612] veth0_macvtap: entered promiscuous mode
[   90.340255][ T5610] veth0_macvtap: entered promiscuous mode
[   90.343640][ T5613] veth1_vlan: entered promiscuous mode
[   90.361545][ T5609] veth0_vlan: entered promiscuous mode
[   90.369854][ T5610] veth1_macvtap: entered promiscuous mode
[   90.372585][ T5612] veth1_macvtap: entered promiscuous mode
[   90.427684][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.446103][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.463550][ T5609] veth1_vlan: entered promiscuous mode
[   90.476134][ T5611] veth0_vlan: entered promiscuous mode
[   90.488355][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.495058][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.532341][ T5613] veth0_macvtap: entered promiscuous mode
[   90.549359][ T1047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.549483][ T1047] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.549523][ T1047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.549561][ T1047] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.551375][ T5613] veth1_macvtap: entered promiscuous mode
[   90.570831][ T5611] veth1_vlan: entered promiscuous mode
[   90.588952][   T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.589086][   T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.589194][   T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.589298][   T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.692742][ T5609] veth0_macvtap: entered promiscuous mode
[   90.721985][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.752261][ T5609] veth1_macvtap: entered promiscuous mode
[   90.776151][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.837299][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.837327][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.840051][ T1125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.872997][   T45] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.873736][   T45] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.873781][   T45] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.920400][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.938532][ T5611] veth0_macvtap: entered promiscuous mode
[   90.964157][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.986070][ T5611] veth1_macvtap: entered promiscuous mode
[   91.013264][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.013285][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.051917][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.051956][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.098628][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.128785][ T1047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.168336][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.168360][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.169688][   T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.171209][ T1125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.202252][ T5623] Bluetooth: hci3: command tx timeout
[   91.202359][ T5623] Bluetooth: hci4: command tx timeout
[   91.202419][ T5623] Bluetooth: hci2: command tx timeout
[   91.202584][ T4928] Bluetooth: hci1: command tx timeout
[   91.267801][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.280122][ T4928] Bluetooth: hci0: command tx timeout
[   91.311239][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.311262][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.325767][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.398494][ T1047] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.398548][ T1047] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.398588][ T1047] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.398626][ T1047] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.492154][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.523091][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.523110][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.643965][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.643989][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.865566][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.865589][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.943724][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.943747][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.987693][ T5819] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.018409][   T10] cfg80211: failed to load regulatory.db
[   92.041918][ T5820] FAULT_INJECTION: forcing a failure.
[   92.041918][ T5820] name failslab, interval 1, probability 0, space 0, times 1
[   92.041970][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT(full) 
[   92.042002][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   92.042025][ T5820] Call Trace:
[   92.042035][ T5820]  <TASK>
[   92.042044][ T5820]  dump_stack_lvl+0xe8/0x150
[   92.042083][ T5820]  should_fail_ex+0x3eb/0x540
[   92.042122][ T5820]  should_failslab+0xa8/0x100
[   92.042148][ T5820]  __kmalloc_noprof+0xf9/0x710
[   92.042173][ T5820]  ? tomoyo_encode2+0x28b/0x540
[   92.042194][ T5820]  ? tomoyo_encode2+0x28b/0x540
[   92.042223][ T5820]  tomoyo_encode2+0x28b/0x540
[   92.042253][ T5820]  tomoyo_check_unix_address+0x39f/0x7e0
[   92.042281][ T5820]  ? tomoyo_check_unix_address+0x16d/0x7e0
[   92.042305][ T5820]  ? __pfx_tomoyo_check_unix_address+0x10/0x10
[   92.042344][ T5820]  ? lock_acquire+0x115/0x350
[   92.042374][ T5820]  tomoyo_socket_sendmsg_permission+0x1d9/0x300
[   92.042410][ T5820]  security_socket_sendmsg+0xc0/0x280
[   92.042437][ T5820]  ____sys_sendmsg+0x51d/0x850
[   92.042467][ T5820]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.042500][ T5820]  ? import_iovec+0x73/0xa0
[   92.042527][ T5820]  ___sys_sendmsg+0x2a5/0x360
[   92.042546][ T5820]  ? __lock_acquire+0x747/0x2de0
[   92.042574][ T5820]  ? __pfx____sys_sendmsg+0x10/0x10
[   92.042605][ T5820]  ? __pfx_futex_wake_mark+0x10/0x10
[   92.042657][ T5820]  ? __fget_files+0x3a2/0x420
[   92.042678][ T5820]  ? __fget_files+0x2a/0x420
[   92.042709][ T5820]  __sys_sendmmsg+0x273/0x4d0
[   92.042738][ T5820]  ? __pfx___sys_sendmmsg+0x10/0x10
[   92.042758][ T5820]  ? do_futex+0x3e7/0x4e0
[   92.042788][ T5820]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   92.042833][ T5820]  ? rcu_is_watching+0x16/0xb0
[   92.042863][ T5820]  __x64_sys_sendmmsg+0xa0/0xc0
[   92.042888][ T5820]  do_syscall_64+0x166/0x520
[   92.042909][ T5820]  ? trace_irq_disable+0x3b/0x140
[   92.042929][ T5820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.042953][ T5820]  ? clear_bhb_loop+0x70/0xc0
[   92.042977][ T5820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.043001][ T5820] RIP: 0033:0x7f659939e199
[   92.043026][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.043057][ T5820] RSP: 002b:00007f659a1fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   92.043085][ T5820] RAX: ffffffffffffffda RBX: 00007f6599625fa0 RCX: 00007f659939e199
[   92.043101][ T5820] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000004
[   92.043134][ T5820] RBP: 00007f65994358e0 R08: 0000000000000000 R09: 0000000000000000
[   92.043148][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.043161][ T5820] R13: 00007f6599626038 R14: 00007f6599625fa0 R15: 00007ffe2d4bd768
[   92.043195][ T5820]  </TASK>
[   92.347313][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.347333][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.736996][ T5833] loop2: detected capacity change from 0 to 512
[   92.805638][ T5833] EXT4-fs (loop2): orphan cleanup on readonly fs
[   92.805675][ T5833] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[   92.814245][ T5833] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   92.826652][ T5833] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.10: attempt to clear invalid blocks 33619980 len 1
[   92.826815][ T5833] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   92.828291][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   92.828313][    C1] EXT4-fs (loop2): initial error at time 1791383930: ext4_mb_generate_buddy:1317
[   92.828338][    C1] EXT4-fs (loop2): last error at time 1791383930: ext4_mb_generate_buddy:1317
[   92.844545][ T5833] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.10: invalid indirect mapped block 1819239214 (level 0)
[   92.844651][ T5833] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   92.846419][ T5833] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.10: invalid indirect mapped block 1819239214 (level 1)
[   92.846505][ T5833] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   92.867783][ T5833] EXT4-fs (loop2): 1 truncate cleaned up
[   92.954304][ T5833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.072638][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.256898][ T5844] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82
[   93.814103][ T5838] loop4: detected capacity change from 0 to 32768
[   93.816850][ T5838] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[   93.876735][ T5838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11 (5838)
[   94.002496][ T5838] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.002547][ T5838] BTRFS info (device loop4): using sha256 checksum algorithm
[   94.247140][ T5877] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   94.247350][ T5838] BTRFS info (device loop4): rebuilding free space tree
[   94.260896][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.262208][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.364794][ T5838] BTRFS info (device loop4): disabling free space tree
[   94.364878][ T5838] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.364905][ T5838] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   94.454573][ T5838] BTRFS info (device loop4): enabling ssd optimizations
[   94.454610][ T5838] BTRFS info (device loop4): force clearing of disk cache
[   94.454629][ T5838] BTRFS info (device loop4): enabling auto defrag
[   94.474368][ T5838] BTRFS info (device loop4): max_inline set to 0
[   94.569641][ T5862] loop3: detected capacity change from 0 to 32768
[   94.598959][ T5862] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.18 (5862)
[   94.637112][ T5862] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   94.637147][ T5862] BTRFS info (device loop3): using xxhash64 checksum algorithm
[   94.699497][   T33] audit: type=1800 audit(1791383932.375:2): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11" name="bus" dev="loop4" ino=263 res=0 errno=-22
[   94.703650][   T33] audit: type=1800 audit(1791383932.375:3): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11" name="bus" dev="loop4" ino=263 res=0 errno=-22
[   94.885342][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.922264][ T5862] BTRFS info (device loop3): enabling ssd optimizations
[   94.922293][ T5862] BTRFS info (device loop3): turning on async discard
[   94.922311][ T5862] BTRFS info (device loop3): enabling free space tree
[   94.950368][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.074344][ T5909] bridge0: port 1(bridge_slave_0) entered learning state
[   95.086926][ T5909] Zero length message leads to an empty skb
[   95.140977][ T5613] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.183295][ T5612] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   95.564635][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.564786][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.564911][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.565031][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.565154][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.565654][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.565786][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.565911][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.881845][ T5939] loop4: detected capacity change from 0 to 512
[   96.904855][ T5938] FAULT_INJECTION: forcing a failure.
[   96.904855][ T5938] name failslab, interval 1, probability 0, space 0, times 0
[   96.904885][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) 
[   96.904908][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   96.904920][ T5938] Call Trace:
[   96.904927][ T5938]  <TASK>
[   96.904935][ T5938]  dump_stack_lvl+0xe8/0x150
[   96.904962][ T5938]  should_fail_ex+0x3eb/0x540
[   96.904990][ T5938]  should_failslab+0xa8/0x100
[   96.905016][ T5938]  __kmalloc_cache_noprof+0x9e/0x600
[   96.905041][ T5938]  ? nd_alloc_stack+0x7d/0xf0
[   96.905061][ T5938]  ? nd_alloc_stack+0x7d/0xf0
[   96.905089][ T5938]  nd_alloc_stack+0x7d/0xf0
[   96.905113][ T5938]  pick_link+0xda8/0xfd0
[   96.905144][ T5938]  ? __d_lookup+0x6f3/0x790
[   96.905168][ T5938]  step_into_slowpath+0x646/0xa20
[   96.905196][ T5938]  ? __pfx_step_into_slowpath+0x10/0x10
[   96.905220][ T5938]  ? inode_permission+0x2b8/0x600
[   96.905241][ T5938]  ? bpf_lsm_inode_permission+0x9/0x20
[   96.905269][ T5938]  link_path_walk+0xd50/0x1910
[   96.905310][ T5938]  path_lookupat+0xe4/0x8c0
[   96.905348][ T5938]  filename_lookup+0x265/0x5d0
[   96.905375][ T5938]  ? __pfx_filename_lookup+0x10/0x10
[   96.905436][ T5938]  ? strncpy_from_user+0x150/0x2c0
[   96.905462][ T5938]  ? do_getname+0x151/0x250
[   96.905487][ T5938]  user_path_at+0x40/0x160
[   96.905511][ T5938]  __se_sys_mount+0x2dc/0x420
[   96.905536][ T5938]  ? __pfx___se_sys_mount+0x10/0x10
[   96.905563][ T5938]  ? __x64_sys_mount+0x20/0xc0
[   96.905585][ T5938]  do_syscall_64+0x166/0x520
[   96.905607][ T5938]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.905630][ T5938]  ? clear_bhb_loop+0x70/0xc0
[   96.905654][ T5938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.905675][ T5938] RIP: 0033:0x7f6174f9e199
[   96.905696][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.905714][ T5938] RSP: 002b:00007f6175ec4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   96.905745][ T5938] RAX: ffffffffffffffda RBX: 00007f6175225fa0 RCX: 00007f6174f9e199
[   96.905762][ T5938] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000
[   96.905776][ T5938] RBP: 00007f61750358e0 R08: 0000200000000200 R09: 0000000000000000
[   96.905790][ T5938] R10: 0000000000100422 R11: 0000000000000246 R12: 0000000000000000
[   96.905804][ T5938] R13: 00007f6175226038 R14: 00007f6175225fa0 R15: 00007ffc15f1e208
[   96.905837][ T5938]  </TASK>
[   97.179348][ T5939] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.36: bg 0: block 7: invalid block bitmap
[   97.179520][ T5939] loop4: lost filesystem error report for type 5 error -117
[   97.191310][ T5939] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   97.191382][ T5939] loop4: lost filesystem error report for type 5 error -117
[   97.199461][    C1] EXT4-fs (loop4): error count since last fsck: 2
[   97.199522][    C1] EXT4-fs (loop4): initial error at time 1791383934: ext4_validate_block_bitmap:436
[   97.199586][    C1] EXT4-fs (loop4): last error at time 1791383934: ext4_mb_clear_bb:6680
[   97.206437][ T5940] netlink: 'syz.3.37': attribute type 1 has an invalid length.
[   97.265740][ T5939] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.36: corrupted xattr block 95: invalid header
[   97.265780][ T5939] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   97.267495][ T5939] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117)
[   97.267605][ T5939] EXT4-fs (loop4): 1 orphan inode deleted
[   97.333440][ T5939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.385711][ T5939] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   97.438545][   T33] audit: type=1326 audit(1791383935.105:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.2.40" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6174f9e199 code=0x0
[   97.563246][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.768018][ T5961] gadgetfs: bound to dummy_udc driver
[   97.940071][ T5968] ceph: No source
[   98.102529][ T5972] FAULT_INJECTION: forcing a failure.
[   98.102529][ T5972] name failslab, interval 1, probability 0, space 0, times 0
[   98.102566][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full) 
[   98.102592][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   98.102605][ T5972] Call Trace:
[   98.102614][ T5972]  <TASK>
[   98.102624][ T5972]  dump_stack_lvl+0xe8/0x150
[   98.102655][ T5972]  should_fail_ex+0x3eb/0x540
[   98.102685][ T5972]  should_failslab+0xa8/0x100
[   98.102709][ T5972]  __kmalloc_noprof+0xf9/0x710
[   98.102731][ T5972]  ? security_inode_alloc+0x39/0x310
[   98.102753][ T5972]  ? kmem_cache_alloc_noprof+0x151/0x600
[   98.102774][ T5972]  ? sk_prot_alloc+0xe7/0x210
[   98.102795][ T5972]  ? sk_prot_alloc+0xe7/0x210
[   98.102824][ T5972]  sk_prot_alloc+0xe7/0x210
[   98.102844][ T5972]  ? sk_alloc+0x27/0x390
[   98.102867][ T5972]  sk_alloc+0x3a/0x390
[   98.102893][ T5972]  alg_create+0xcf/0x160
[   98.102918][ T5972]  __sock_create+0x4b5/0xac0
[   98.102949][ T5972]  __sys_socket+0xd6/0x1b0
[   98.102976][ T5972]  __x64_sys_socket+0x7a/0x90
[   98.103000][ T5972]  do_syscall_64+0x166/0x520
[   98.103022][ T5972]  ? trace_irq_disable+0x3b/0x140
[   98.103042][ T5972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.103066][ T5972]  ? clear_bhb_loop+0x70/0xc0
[   98.103091][ T5972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.103122][ T5972] RIP: 0033:0x7fc56d99e199
[   98.103143][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.103173][ T5972] RSP: 002b:00007fc56e87f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   98.103196][ T5972] RAX: ffffffffffffffda RBX: 00007fc56dc25fa0 RCX: 00007fc56d99e199
[   98.103214][ T5972] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026
[   98.103226][ T5972] RBP: 00007fc56da358e0 R08: 0000000000000000 R09: 0000000000000000
[   98.103239][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.103251][ T5972] R13: 00007fc56dc26038 R14: 00007fc56dc25fa0 R15: 00007ffd074d6d18
[   98.103283][ T5972]  </TASK>
[   98.340797][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'.
[   98.699210][ T5617] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.718521][ T5725] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   98.771042][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[   98.771066][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   98.839804][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[   98.839827][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   98.866098][ T5617] usb 4-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   98.873544][   T52] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.873649][   T52] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.873729][   T52] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.895820][   T52] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.920351][ T5725] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01
[   98.941138][ T5617] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[   98.941196][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.941344][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.941385][ T5725] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   98.941407][ T5725] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   98.945771][ T5617] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   98.945794][ T5617] usb 4-1: Manufacturer: syz
[   99.024191][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   99.024220][ T5725] usb 3-1: Product: syz
[   99.024236][ T5725] usb 3-1: Manufacturer: syz
[   99.060763][ T5617] usb 4-1: config 0 descriptor??
[   99.066873][ T5980] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   99.101955][ T5725] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[   99.136747][ T5725] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[   99.230889][ T5617] rc_core: IR keymap rc-hauppauge not found
[   99.230909][ T5617] Registered IR keymap rc-empty
[   99.237391][ T5617] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[   99.280520][ T5617] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5
[   99.400120][  T989] usb 4-1: USB disconnect, device number 2
[   99.402129][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'.
[   99.568455][ T6006] loop1: detected capacity change from 0 to 1024
[   99.593059][ T6006] EXT4-fs: Ignoring removed oldalloc option
[   99.704714][ T6006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.732293][   T32] usb 3-1: USB disconnect, device number 2
[   99.875397][ T6006] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 167772185 free clusters
[   99.910319][   T32] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[   99.917773][ T6006] EXT4-fs (loop1): Remounting filesystem read-only
[   99.917993][ T6006] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[   99.963639][   T32] garmin_gps 3-1:1.0: device disconnected
[  100.244946][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.403565][   T32] net_ratelimit: 3330 callbacks suppressed
[  100.403587][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.541721][ T6008] loop4: detected capacity change from 0 to 131072
[  100.563095][ T6008] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24)
[  100.563125][ T6008] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  100.563235][ T6008] F2FS-fs (loop4): Test dummy encryption mode enabled
[  100.566727][ T6008] F2FS-fs (loop4): invalid crc value
[  100.654462][ T6008] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  100.654870][ T6008] loop4: lost filesystem error report for type 5 error -117
[  100.670371][ T6008] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.671792][ T6008] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  100.671873][ T6008] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  100.672311][ T6008] F2FS-fs (loop4): Start checkpoint disabled!
[  100.721406][ T6008] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  100.738419][ T6008] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  100.738535][ T6008] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  100.847582][ T6008] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  100.891355][ T6008] fscrypt: AES-256-XTS using blk-crypto-fallback
[  101.227423][ T6037] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[  101.428816][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.572649][ T6049] process 'syz.2.73' launched './file0' with NULL argv: empty string added
[  101.829747][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.233623][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  102.236737][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.273993][ T6044] loop3: detected capacity change from 0 to 32768
[  102.296300][ T6044] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  102.308661][ T6044] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.71 (6044)
[  102.402050][ T6044] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.402085][ T6044] BTRFS info (device loop3): using sha256 checksum algorithm
[  102.469206][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.542634][ T6044] BTRFS info (device loop3): rebuilding free space tree
[  102.591714][ T6044] BTRFS info (device loop3): disabling free space tree
[  102.591776][ T6044] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  102.591800][ T6044] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  102.671513][ T6044] BTRFS info (device loop3): enabling ssd optimizations
[  102.671543][ T6044] BTRFS info (device loop3): force clearing of disk cache
[  102.671561][ T6044] BTRFS info (device loop3): enabling auto defrag
[  102.671579][ T6044] BTRFS info (device loop3): max_inline set to 0
[  102.718023][ T6082] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  102.786498][ T5617] libceph: connect (1)[c::]:6789 error -101
[  102.788892][ T5617] libceph: mon0 (1)[c::]:6789 connect error
[  102.803058][ T5617] libceph: connect (1)[c::]:6789 error -101
[  102.803224][ T5617] libceph: mon0 (1)[c::]:6789 connect error
[  102.824295][ T6079] ceph: No mds server is up or the cluster is laggy
[  103.356957][ T5612] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.511396][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.523360][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.782424][ T6116] syz.1.85 uses obsolete (PF_INET,SOCK_PACKET)
[  104.021683][ T6120] netlink: 64 bytes leftover after parsing attributes in process `syz.4.87'.
[  104.153457][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.357894][ T6131] =======================================================
[  104.357894][ T6131] WARNING: The mand mount option has been deprecated and
[  104.357894][ T6131]          and is ignored by this kernel. Remove the mand
[  104.357894][ T6131]          option from the mount to silence this warning.
[  104.357894][ T6131] =======================================================
[  104.560972][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.94'.
[  104.561012][ T6139] netlink: 'syz.3.94': attribute type 7 has an invalid length.
[  104.561026][ T6139] netlink: 'syz.3.94': attribute type 8 has an invalid length.
[  104.561039][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'.
[  104.602373][ T6141] loop2: detected capacity change from 0 to 512
[  104.624299][ T6141] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  104.958189][  T989] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  105.121061][  T989] usb 1-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00
[  105.123368][  T989] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.127660][  T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.127685][  T989] usb 1-1: Product: syz
[  105.127702][  T989] usb 1-1: Manufacturer: syz
[  105.127717][  T989] usb 1-1: SerialNumber: syz
[  105.185677][  T989] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected
[  105.185928][  T989] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  105.206148][  T989] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81
[  105.206222][  T989] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82
[  105.206290][  T989] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1
[  105.206360][  T989] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  105.206434][  T989] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83
[  105.206612][  T989] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3
[  105.267495][  T989] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  105.572155][  T989] usb 1-1: USB disconnect, device number 2
[  105.594881][ T5747] net_ratelimit: 3 callbacks suppressed
[  105.594902][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.613964][  T989] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  105.640466][  T989] keyspan 1-1:1.0: device disconnected
[  106.009993][ T6181] loop2: detected capacity change from 0 to 1024
[  106.012307][ T6181] EXT4-fs: Ignoring removed bh option
[  106.078052][ T6181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.080057][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.085225][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.340436][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.549373][  T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.605481][ T6207] loop0: detected capacity change from 0 to 164
[  106.628898][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.737639][ T6209] FAULT_INJECTION: forcing a failure.
[  106.737639][ T6209] name failslab, interval 1, probability 0, space 0, times 0
[  106.737671][ T6209] CPU: 0 UID: 0 PID: 6209 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) 
[  106.737697][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  106.737710][ T6209] Call Trace:
[  106.737719][ T6209]  <TASK>
[  106.737729][ T6209]  dump_stack_lvl+0xe8/0x150
[  106.737758][ T6209]  should_fail_ex+0x3eb/0x540
[  106.737788][ T6209]  should_failslab+0xa8/0x100
[  106.737811][ T6209]  ? cred_alloc_blank+0x20/0x110
[  106.737835][ T6209]  kmem_cache_alloc_noprof+0x9c/0x600
[  106.737860][ T6209]  ? futex_wait+0x2a2/0x390
[  106.737881][ T6209]  ? cred_alloc_blank+0x20/0x110
[  106.737910][ T6209]  cred_alloc_blank+0x20/0x110
[  106.737944][ T6209]  keyctl_session_to_parent+0x42/0xa20
[  106.737977][ T6209]  __se_sys_keyctl+0x827/0xbc0
[  106.738003][ T6209]  ? __pfx___se_sys_keyctl+0x10/0x10
[  106.738030][ T6209]  ? __pfx_do_futex+0x10/0x10
[  106.738050][ T6209]  ? __fget_files+0x3a2/0x420
[  106.738071][ T6209]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  106.738106][ T6209]  ? __se_sys_futex+0x3a8/0x450
[  106.738135][ T6209]  ? rcu_is_watching+0x16/0xb0
[  106.738165][ T6209]  ? __x64_sys_keyctl+0x20/0xc0
[  106.738190][ T6209]  do_syscall_64+0x166/0x520
[  106.738211][ T6209]  ? trace_irq_disable+0x3b/0x140
[  106.738231][ T6209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.738255][ T6209]  ? clear_bhb_loop+0x70/0xc0
[  106.738280][ T6209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.738302][ T6209] RIP: 0033:0x7f659939e199
[  106.738323][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.738341][ T6209] RSP: 002b:00007f659a1fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  106.738366][ T6209] RAX: ffffffffffffffda RBX: 00007f6599625fa0 RCX: 00007f659939e199
[  106.738382][ T6209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[  106.738395][ T6209] RBP: 00007f65994358e0 R08: 0000000000000000 R09: 0000000000000000
[  106.738409][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.738422][ T6209] R13: 00007f6599626038 R14: 00007f6599625fa0 R15: 00007ffe2d4bd768
[  106.738459][ T6209]  </TASK>
[  107.095656][ T6218] jffs2: notice: (6218) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  107.426810][ T6233] ip_tables: iptables: counters copy to user failed while replacing table
[  107.460086][ T6233] loop2: detected capacity change from 0 to 1024
[  107.679571][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.717205][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.589943][  T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.749692][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.837304][ T6285] FAULT_INJECTION: forcing a failure.
[  109.837304][ T6285] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  109.837342][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(full) 
[  109.837369][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  109.837383][ T6285] Call Trace:
[  109.837392][ T6285]  <TASK>
[  109.837402][ T6285]  dump_stack_lvl+0xe8/0x150
[  109.837444][ T6285]  should_fail_ex+0x3eb/0x540
[  109.837473][ T6285]  _copy_from_user+0x2d/0xb0
[  109.837496][ T6285]  io_register_rsrc_update+0xc4/0x1c0
[  109.837519][ T6285]  ? __fget_files+0x2a/0x420
[  109.837559][ T6285]  ? __pfx_io_register_rsrc_update+0x10/0x10
[  109.837585][ T6285]  ? __fget_files+0x2a/0x420
[  109.837614][ T6285]  __se_sys_io_uring_register+0x1036/0x1aa0
[  109.837646][ T6285]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  109.837677][ T6285]  ? rcu_is_watching+0x16/0xb0
[  109.837713][ T6285]  do_syscall_64+0x166/0x520
[  109.837736][ T6285]  ? trace_irq_disable+0x3b/0x140
[  109.837756][ T6285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.837780][ T6285]  ? clear_bhb_loop+0x70/0xc0
[  109.837805][ T6285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.837827][ T6285] RIP: 0033:0x7fcaf759e199
[  109.837849][ T6285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.837868][ T6285] RSP: 002b:00007fcaf83a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  109.837893][ T6285] RAX: ffffffffffffffda RBX: 00007fcaf7825fa0 RCX: 00007fcaf759e199
[  109.837910][ T6285] RDX: 0000200000000440 RSI: 000000000000000e RDI: 0000000000000003
[  109.837925][ T6285] RBP: 00007fcaf76358e0 R08: 0000000000000000 R09: 0000000000000000
[  109.837950][ T6285] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[  109.837963][ T6285] R13: 00007fcaf7826038 R14: 00007fcaf7825fa0 R15: 00007ffd1762c2a8
[  109.837998][ T6285]  </TASK>
[  110.258912][ T6292] loop0: detected capacity change from 0 to 1024
[  110.282232][ T6292] hfsplus: failed to load catalog file
[  110.530474][ T6297] warning: `syz.1.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  110.685013][ T6293] loop0: detected capacity change from 1024 to 1
[  110.708801][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[  110.758884][ T6302] capability: warning: `syz.4.149' uses 32-bit capabilities (legacy support in use)
[  110.789631][  T989] net_ratelimit: 6 callbacks suppressed
[  110.789651][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.827669][ T6304] FAULT_INJECTION: forcing a failure.
[  110.827669][ T6304] name failslab, interval 1, probability 0, space 0, times 0
[  110.827703][ T6304] CPU: 1 UID: 0 PID: 6304 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) 
[  110.827724][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  110.827736][ T6304] Call Trace:
[  110.827743][ T6304]  <TASK>
[  110.827751][ T6304]  dump_stack_lvl+0xe8/0x150
[  110.827778][ T6304]  should_fail_ex+0x3eb/0x540
[  110.827804][ T6304]  should_failslab+0xa8/0x100
[  110.827826][ T6304]  __kmalloc_noprof+0xf9/0x710
[  110.827844][ T6304]  ? rcu_is_watching+0x16/0xb0
[  110.827863][ T6304]  ? tomoyo_realpath_from_path+0xef/0x640
[  110.827882][ T6304]  ? tomoyo_realpath_from_path+0xef/0x640
[  110.827909][ T6304]  tomoyo_realpath_from_path+0xef/0x640
[  110.827940][ T6304]  tomoyo_path_perm+0x283/0x560
[  110.827959][ T6304]  ? tomoyo_path_perm+0x251/0x560
[  110.827978][ T6304]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  110.828003][ T6304]  ? __pfx___futex_wait+0x10/0x10
[  110.828041][ T6304]  ? __fget_files+0x2a/0x420
[  110.828062][ T6304]  ? __fget_files+0x2a/0x420
[  110.828098][ T6304]  ? __fget_files+0x2a/0x420
[  110.828121][ T6304]  security_inode_getattr+0x12b/0x310
[  110.828153][ T6304]  __se_sys_newfstat+0x133/0x440
[  110.828176][ T6304]  ? __pfx___se_sys_newfstat+0x10/0x10
[  110.828205][ T6304]  ? do_futex+0x3e7/0x4e0
[  110.828230][ T6304]  ? __pfx_do_futex+0x10/0x10
[  110.828247][ T6304]  ? __fget_files+0x3a2/0x420
[  110.828287][ T6304]  ? rcu_is_watching+0x16/0xb0
[  110.828319][ T6304]  do_syscall_64+0x166/0x520
[  110.828339][ T6304]  ? trace_irq_disable+0x3b/0x140
[  110.828357][ T6304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.828379][ T6304]  ? clear_bhb_loop+0x70/0xc0
[  110.828401][ T6304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.828422][ T6304] RIP: 0033:0x7fcaf759e199
[  110.828441][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.828458][ T6304] RSP: 002b:00007fcaf83a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
[  110.828480][ T6304] RAX: ffffffffffffffda RBX: 00007fcaf7825fa0 RCX: 00007fcaf759e199
[  110.828496][ T6304] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  110.828509][ T6304] RBP: 00007fcaf76358e0 R08: 0000000000000000 R09: 0000000000000000
[  110.828522][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.828533][ T6304] R13: 00007fcaf7826038 R14: 00007fcaf7825fa0 R15: 00007ffd1762c2a8
[  110.828566][ T6304]  </TASK>
[  110.840837][ T6304] ERROR: Out of memory at tomoyo_realpath_from_path.
[  111.175201][ T6299] infiniband syz1: ib_query_port failed (-19)
[  111.176030][ T6299] infiniband syz1: Couldn't set up InfiniBand P_Key/GID cache
[  111.188135][ T6299] rdma_rxe: rxe_newlink: failed to add syz_tun
[  111.500749][ T6312] FAULT_INJECTION: forcing a failure.
[  111.500749][ T6312] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  111.500782][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(full) 
[  111.500806][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  111.500819][ T6312] Call Trace:
[  111.500827][ T6312]  <TASK>
[  111.500836][ T6312]  dump_stack_lvl+0xe8/0x150
[  111.500865][ T6312]  should_fail_ex+0x3eb/0x540
[  111.500893][ T6312]  prepare_alloc_pages+0x21e/0x5f0
[  111.500923][ T6312]  __alloc_frozen_pages_noprof+0x17a/0x400
[  111.500950][ T6312]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  111.500977][ T6312]  ? read_mems_allowed_begin+0x14/0x1b0
[  111.501011][ T6312]  alloc_pages_mpol+0x21e/0x390
[  111.501036][ T6312]  ? __se_sys_futex_waitv+0x19d/0x2c0
[  111.501058][ T6312]  ___kmalloc_large_node+0x7b/0x170
[  111.501082][ T6312]  __kmalloc_large_node_noprof+0x18/0x90
[  111.501107][ T6312]  __kmalloc_noprof+0x3f6/0x710
[  111.501130][ T6312]  ? __pfx_do_futex+0x10/0x10
[  111.501148][ T6312]  ? __se_sys_futex_waitv+0x19d/0x2c0
[  111.501177][ T6312]  __se_sys_futex_waitv+0x19d/0x2c0
[  111.501202][ T6312]  ? __pfx___se_sys_futex_waitv+0x10/0x10
[  111.501240][ T6312]  ? __x64_sys_futex_waitv+0x20/0xc0
[  111.501265][ T6312]  do_syscall_64+0x166/0x520
[  111.501285][ T6312]  ? trace_irq_disable+0x3b/0x140
[  111.501305][ T6312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.501328][ T6312]  ? clear_bhb_loop+0x70/0xc0
[  111.501352][ T6312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.501374][ T6312] RIP: 0033:0x7f6174f9e199
[  111.501394][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.501412][ T6312] RSP: 002b:00007f6175ec4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1
[  111.501435][ T6312] RAX: ffffffffffffffda RBX: 00007f6175225fa0 RCX: 00007f6174f9e199
[  111.501451][ T6312] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000200000002dc0
[  111.501465][ T6312] RBP: 00007f61750358e0 R08: 0000000000000000 R09: 0000000000000000
[  111.501478][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.501491][ T6312] R13: 00007f6175226038 R14: 00007f6175225fa0 R15: 00007ffc15f1e208
[  111.501525][ T6312]  </TASK>
[  111.786047][ T6306] loop0: detected capacity change from 0 to 32768
[  111.835487][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.864640][ T6306] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  111.967018][ T6327] loop2: detected capacity change from 0 to 512
[  112.023941][ T6327] EXT4-fs (loop2): Test dummy encryption mode enabled
[  112.042736][ T6327] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.043869][ T6306] XFS (loop0): Ending clean mount
[  112.266384][ T6306] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  112.285206][ T5610] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  112.540477][ T5609] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.558245][ T6336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  112.613203][ T6336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  112.613331][ T6336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  112.613455][ T6336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  112.613578][ T6336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  112.613691][ T6336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  112.613805][ T6336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  112.613917][ T6336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  112.956798][   T13] wlan1: Trigger new scan to find an IBSS to join
[  113.574169][ T6343] netlink: 'syz.4.163': attribute type 12 has an invalid length.
[  113.574191][ T6343] netlink: 'syz.4.163': attribute type 29 has an invalid length.
[  113.574206][ T6343] netlink: 148 bytes leftover after parsing attributes in process `syz.4.163'.
[  113.752502][ T6351] FAULT_INJECTION: forcing a failure.
[  113.752502][ T6351] name failslab, interval 1, probability 0, space 0, times 0
[  113.752536][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: syz.4.165 Not tainted syzkaller #0 PREEMPT(full) 
[  113.752562][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  113.752574][ T6351] Call Trace:
[  113.752582][ T6351]  <TASK>
[  113.752591][ T6351]  dump_stack_lvl+0xe8/0x150
[  113.752622][ T6351]  should_fail_ex+0x3eb/0x540
[  113.752650][ T6351]  should_failslab+0xa8/0x100
[  113.752674][ T6351]  __kmalloc_cache_noprof+0x9e/0x600
[  113.752695][ T6351]  ? __raw_spin_lock_init+0x45/0x100
[  113.752717][ T6351]  ? io_uring_alloc_task_context+0xa2/0x6c0
[  113.752738][ T6351]  ? io_uring_alloc_task_context+0xa2/0x6c0
[  113.752769][ T6351]  io_uring_alloc_task_context+0xa2/0x6c0
[  113.752792][ T6351]  ? __asan_memcpy+0x40/0x70
[  113.752812][ T6351]  ? errseq_sample+0x40/0x70
[  113.752831][ T6351]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[  113.752859][ T6351]  ? alloc_file_pseudo+0x151/0x1e0
[  113.752885][ T6351]  __io_uring_add_tctx_node+0x48d/0x630
[  113.752915][ T6351]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  113.752942][ T6351]  ? __anon_inode_getfile+0x169/0x200
[  113.752969][ T6351]  io_uring_create+0x591/0x980
[  113.752995][ T6351]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  113.753021][ T6351]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  113.753060][ T6351]  ? rcu_is_watching+0x16/0xb0
[  113.753095][ T6351]  do_syscall_64+0x166/0x520
[  113.753116][ T6351]  ? trace_irq_disable+0x3b/0x140
[  113.753136][ T6351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.753159][ T6351]  ? clear_bhb_loop+0x70/0xc0
[  113.753194][ T6351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.753214][ T6351] RIP: 0033:0x7f4186b9e199
[  113.753233][ T6351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.753250][ T6351] RSP: 002b:00007f4187ad7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  113.753272][ T6351] RAX: ffffffffffffffda RBX: 00007f4186e25fa0 RCX: 00007f4186b9e199
[  113.753287][ T6351] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001e8a
[  113.753300][ T6351] RBP: 00007f4186c358e0 R08: 0000000000000000 R09: 0000000000000000
[  113.753313][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.753324][ T6351] R13: 00007f4186e26038 R14: 00007f4186e25fa0 R15: 00007ffcced60478
[  113.753354][ T6351]  </TASK>
[  114.135791][ T6359] syzkaller1: entered promiscuous mode
[  114.135815][ T6359] syzkaller1: entered allmulticast mode
[  114.695445][ T6383] loop3: detected capacity change from 0 to 2048
[  114.800446][ T6383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.865943][ T6383] Invalid argument reading file caps for ./file0
[  114.949223][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.456937][ T6414] loop4: detected capacity change from 0 to 1024
[  115.502251][ T6414] hfsplus: failed to load extents file
[  115.836599][ T6426] jffs2: notice: (6426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  115.989018][   T12] wlan1: Trigger new scan to find an IBSS to join
[  116.185883][ T6438] loop2: detected capacity change from 0 to 128
[  116.264337][ T6438] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  116.292511][ T6438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.389087][   T32] net_ratelimit: 3329 callbacks suppressed
[  116.389108][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.488984][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[  116.489010][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[  116.788397][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.943951][ T6453] loop2: detected capacity change from 0 to 32768
[  116.947029][ T6453] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.200 (6453)
[  116.976310][ T6453] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.976343][ T6453] BTRFS info (device loop2): using sha256 checksum algorithm
[  117.012847][ T6469] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  117.106983][ T6453] BTRFS info (device loop2): enabling ssd optimizations
[  117.107027][ T6453] BTRFS info (device loop2): turning on sync discard
[  117.107045][ T6453] BTRFS info (device loop2): enabling free space tree
[  117.107076][ T6453] BTRFS info (device loop2): use zlib compression, level 3
[  117.177722][   T33] audit: type=1800 audit(1791383954.845:5): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.200" name="file1" dev="loop2" ino=260 res=0 errno=-22
[  117.243878][ T6487] netlink: 'syz.0.208': attribute type 20 has an invalid length.
[  117.243903][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'.
[  117.419015][ T6487] netlink: 'syz.0.208': attribute type 20 has an invalid length.
[  117.419039][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'.
[  117.447241][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.548788][ T5610] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.940001][   T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  117.988844][ T1047] wlan1: Creating new IBSS network, BSSID 3e:51:82:55:c3:c4
[  118.088909][   T32] usb 5-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[  118.091480][   T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  118.091510][   T32] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  118.091550][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.143275][   T32] spcp8x5 5-1:1.0: SPCP8x5 converter detected
[  118.156964][   T32] usb 5-1: SPCP8x5 converter now attached to ttyUSB0
[  118.330601][  T192] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  118.456099][   T32] usb 5-1: USB disconnect, device number 2
[  118.479109][   T32] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  118.479804][   T32] spcp8x5 5-1:1.0: device disconnected
[  118.480662][  T192] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  118.482110][  T192] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  118.482134][  T192] usb 1-1: config 1 has no interface number 0
[  118.485817][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.487523][  T192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.487545][  T192] usb 1-1: Product: syz
[  118.487560][  T192] usb 1-1: Manufacturer: syz
[  118.487574][  T192] usb 1-1: SerialNumber: syz
[  118.610667][  T192] usb 1-1: 3:0 : does not exist
[  118.610685][  T192] usb 1-1: 3:0 : does not exist
[  118.870124][ T5617] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  118.871096][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.874549][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  118.875435][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.929519][  T989] usb 1-1: USB disconnect, device number 3
[  119.033820][ T5617] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  119.035098][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.055217][ T5617] usb 4-1: config 0 descriptor??
[  119.287743][ T5617] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  119.385518][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.385785][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.416076][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.417297][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.441110][ T6547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.680820][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.720389][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.773165][ T5617] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  119.773194][ T5617] [drm] Initialized udl on minor 1
[  119.817642][ T5617] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  119.859135][ T5617] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  119.870345][  T192] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  119.899445][ T6552] FAULT_INJECTION: forcing a failure.
[  119.899445][ T6552] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.899504][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.2.228 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  119.899533][ T6552] Tainted: [L]=SOFTLOCKUP
[  119.899548][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  119.899557][ T6552] Call Trace:
[  119.899564][ T6552]  <TASK>
[  119.899570][ T6552]  dump_stack_lvl+0xe8/0x150
[  119.899627][ T6552]  should_fail_ex+0x3eb/0x540
[  119.899655][ T6552]  set_fd_set+0x3a/0xa0
[  119.899677][ T6552]  core_sys_select+0x9c1/0xb40
[  119.899713][ T6552]  ? __pfx_core_sys_select+0x10/0x10
[  119.899760][ T6552]  ? __pfx_set_user_sigmask+0x10/0x10
[  119.899784][ T6552]  ? __sys_getsockname+0x2a1/0x2d0
[  119.899823][ T6552]  __se_sys_pselect6+0x267/0x320
[  119.899846][ T6552]  ? __pfx___se_sys_pselect6+0x10/0x10
[  119.899867][ T6552]  ? __x64_sys_pselect6+0x21/0xf0
[  119.899883][ T6552]  do_syscall_64+0x166/0x520
[  119.899897][ T6552]  ? trace_irq_disable+0x3b/0x140
[  119.899910][ T6552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.899925][ T6552]  ? clear_bhb_loop+0x70/0xc0
[  119.899946][ T6552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.899960][ T6552] RIP: 0033:0x7f6174f9e199
[  119.899978][ T6552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.899990][ T6552] RSP: 002b:00007f6175ec4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  119.900008][ T6552] RAX: ffffffffffffffda RBX: 00007f6175225fa0 RCX: 00007f6174f9e199
[  119.900019][ T6552] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000000000000000
[  119.900028][ T6552] RBP: 00007f61750358e0 R08: 0000200000000340 R09: 0000000000000000
[  119.900038][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.900046][ T6552] R13: 00007f6175226038 R14: 00007f6175225fa0 R15: 00007ffc15f1e208
[  119.900068][ T6552]  </TASK>
[  120.157887][ T5617] usb 4-1: USB disconnect, device number 3
[  120.230336][  T192] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  120.669068][ T1047] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.669112][ T1047] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.669146][ T1047] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.669180][ T1047] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.038971][ T2232] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  121.076496][ T6594] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.174096][ T6599] netlink: 'syz.0.238': attribute type 39 has an invalid length.
[  121.189721][ T2232] usb 4-1: Using ep0 maxpacket: 8
[  121.191169][ T2232] usb 4-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  121.195258][ T2232] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  121.195284][ T2232] usb 4-1: config 0 has no interface number 0
[  121.195329][ T2232] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  121.195353][ T2232] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  121.195380][ T2232] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  121.195406][ T2232] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  121.195447][ T2232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.303485][ T2232] usb 4-1: config 0 descriptor??
[  121.440557][ T2232] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  121.461370][ T6607] loop4: detected capacity change from 0 to 64
[  121.630499][ T5740] usb 4-1: USB disconnect, device number 4
[  121.662942][ T5740] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  121.679932][ T1047] kworker/u8:7: attempt to access beyond end of device
[  121.679932][ T1047] loop4: rw=8388609, sector=2320, nr_sectors = 1 limit=64
[  121.680011][ T1047] Buffer I/O error on dev loop4, logical block 2320, lost async page write
[  121.680044][ T1047] kworker/u8:7: attempt to access beyond end of device
[  121.680044][ T1047] loop4: rw=8388609, sector=2321, nr_sectors = 1 limit=64
[  121.680060][ T1047] Buffer I/O error on dev loop4, logical block 2321, lost async page write
[  121.680074][ T1047] kworker/u8:7: attempt to access beyond end of device
[  121.680074][ T1047] loop4: rw=8388609, sector=2322, nr_sectors = 1 limit=64
[  121.680090][ T1047] Buffer I/O error on dev loop4, logical block 2322, lost async page write
[  121.680104][ T1047] kworker/u8:7: attempt to access beyond end of device
[  121.680104][ T1047] loop4: rw=8388609, sector=2323, nr_sectors = 1 limit=64
[  121.680120][ T1047] Buffer I/O error on dev loop4, logical block 2323, lost async page write
[  121.815259][ T1104] kworker/u8:8: attempt to access beyond end of device
[  121.815259][ T1104] loop4: rw=8390657, sector=2320, nr_sectors = 1 limit=64
[  121.815302][ T1104] Buffer I/O error on dev loop4, logical block 2320, lost async page write
[  121.815324][ T1104] kworker/u8:8: attempt to access beyond end of device
[  121.815324][ T1104] loop4: rw=8390657, sector=2321, nr_sectors = 1 limit=64
[  121.815348][ T1104] Buffer I/O error on dev loop4, logical block 2321, lost async page write
[  121.815368][ T1104] kworker/u8:8: attempt to access beyond end of device
[  121.815368][ T1104] loop4: rw=8390657, sector=2322, nr_sectors = 1 limit=64
[  121.815391][ T1104] Buffer I/O error on dev loop4, logical block 2322, lost async page write
[  121.815411][ T1104] kworker/u8:8: attempt to access beyond end of device
[  121.815411][ T1104] loop4: rw=8390657, sector=2323, nr_sectors = 1 limit=64
[  121.815434][ T1104] Buffer I/O error on dev loop4, logical block 2323, lost async page write
[  121.912741][ T2232] net_ratelimit: 5 callbacks suppressed
[  121.912759][ T2232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.016217][ T6618] loop0: detected capacity change from 0 to 128
[  122.037992][ T6618] ufs: ufstype=nextstep is supported read-only
[  122.079855][ T6619] loop4: detected capacity change from 0 to 4096
[  122.230357][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.523598][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.523777][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.524106][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.597505][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.622031][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.766467][   T33] audit: type=1326 audit(1791383960.435:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  122.766657][   T33] audit: type=1326 audit(1791383960.435:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  122.776978][   T33] audit: type=1326 audit(1791383960.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  122.777119][   T33] audit: type=1326 audit(1791383960.445:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  122.821154][   T33] audit: type=1326 audit(1791383960.495:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  122.821335][   T33] audit: type=1326 audit(1791383960.495:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  122.821450][   T33] audit: type=1326 audit(1791383960.495:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  122.827256][   T33] audit: type=1800 audit(1791383960.495:13): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.243" name="file1" dev="loop4" ino=34 res=0 errno=-22
[  122.844970][   T33] audit: type=1326 audit(1791383960.515:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  122.857024][   T33] audit: type=1326 audit(1791383960.515:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.250" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56d99e199 code=0x7ffc0000
[  123.269528][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.349319][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.381426][ T6647] FAULT_INJECTION: forcing a failure.
[  123.381426][ T6647] name failslab, interval 1, probability 0, space 0, times 0
[  123.381460][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.2.256 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  123.381489][ T6647] Tainted: [L]=SOFTLOCKUP
[  123.381497][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  123.381509][ T6647] Call Trace:
[  123.381518][ T6647]  <TASK>
[  123.381527][ T6647]  dump_stack_lvl+0xe8/0x150
[  123.381556][ T6647]  should_fail_ex+0x3eb/0x540
[  123.381585][ T6647]  should_failslab+0xa8/0x100
[  123.381606][ T6647]  ? do_fcntl_add_lease+0xa1/0x470
[  123.381628][ T6647]  kmem_cache_alloc_noprof+0x9c/0x600
[  123.381654][ T6647]  ? do_fcntl_add_lease+0xa1/0x470
[  123.381682][ T6647]  do_fcntl_add_lease+0xa1/0x470
[  123.381707][ T6647]  ? __pfx_do_fcntl_add_lease+0x10/0x10
[  123.381731][ T6647]  ? futex_wait+0x2a2/0x390
[  123.381770][ T6647]  fcntl_setlease+0x24e/0x3b0
[  123.381795][ T6647]  ? __pfx_fcntl_setlease+0x10/0x10
[  123.381838][ T6647]  do_fcntl+0x8ea/0x1a80
[  123.381864][ T6647]  ? lock_acquire+0x115/0x350
[  123.381885][ T6647]  ? __pfx_do_fcntl+0x10/0x10
[  123.381912][ T6647]  ? __fget_files+0x2a/0x420
[  123.381937][ T6647]  ? __fget_files+0x2a/0x420
[  123.381986][ T6647]  ? bpf_lsm_file_fcntl+0x9/0x20
[  123.382012][ T6647]  __se_sys_fcntl+0xc8/0x150
[  123.382038][ T6647]  do_syscall_64+0x166/0x520
[  123.382060][ T6647]  ? trace_irq_disable+0x3b/0x140
[  123.382081][ T6647]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.382105][ T6647]  ? clear_bhb_loop+0x70/0xc0
[  123.382130][ T6647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.382164][ T6647] RIP: 0033:0x7f6174f9e199
[  123.382185][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.382203][ T6647] RSP: 002b:00007f6175ec4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  123.382227][ T6647] RAX: ffffffffffffffda RBX: 00007f6175225fa0 RCX: 00007f6174f9e199
[  123.382245][ T6647] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003
[  123.382259][ T6647] RBP: 00007f61750358e0 R08: 0000000000000000 R09: 0000000000000000
[  123.382274][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.382287][ T6647] R13: 00007f6175226038 R14: 00007f6175225fa0 R15: 00007ffc15f1e208
[  123.382322][ T6647]  </TASK>
[  124.309219][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.766569][ T6670] loop2: detected capacity change from 0 to 32768
[  124.854882][ T6670] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.944268][ T6670] XFS (loop2): Ending clean mount
[  125.049624][ T6670] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  125.185480][ T5610] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  125.370488][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  125.548368][   T10] usb 4-1: Using ep0 maxpacket: 8
[  125.549192][   T10] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  125.550630][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  125.550657][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  125.550683][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  125.550707][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.551055][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.874401][   T10] usb 4-1: usb_control_msg returned -32
[  125.874452][   T10] usbtmc 4-1:16.0: can't read capabilities
[  125.943979][   T10] usb 4-1: USB disconnect, device number 5
[  126.102128][ T6699] loop1: detected capacity change from 0 to 1024
[  126.167039][ T6699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  126.179903][ T6699] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  126.245152][ T6699] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.272: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  126.245201][ T6699] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  126.248148][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  126.248172][    C0] EXT4-fs (loop1): initial error at time 1791383963: ext4_ext_check_inode:521: inode 11
[  126.248206][    C0] EXT4-fs (loop1): last error at time 1791383963: ext4_ext_check_inode:521: inode 11
[  126.320775][ T6699] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.272: couldn't read orphan inode 11 (err -117)
[  126.320810][ T6699] loop1: lost filesystem error report for type 5 error -117
[  126.355547][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.505446][ T6699] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.272: Invalid block bitmap block 0 in block_group 0
[  126.586487][ T6699] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.272: Failed to acquire dquot type 0
[  126.633302][ T6706] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  126.714453][ T6712] loop3: detected capacity change from 0 to 64
[  126.782238][ T6708] FAULT_INJECTION: forcing a failure.
[  126.782238][ T6708] name failslab, interval 1, probability 0, space 0, times 0
[  126.782279][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.0.276 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  126.782311][ T6708] Tainted: [L]=SOFTLOCKUP
[  126.782320][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  126.782334][ T6708] Call Trace:
[  126.782347][ T6708]  <TASK>
[  126.782357][ T6708]  dump_stack_lvl+0xe8/0x150
[  126.782389][ T6708]  should_fail_ex+0x3eb/0x540
[  126.782419][ T6708]  should_failslab+0xa8/0x100
[  126.782445][ T6708]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  126.782471][ T6708]  ? bpf_push_jmp_history+0x32b/0xb00
[  126.782494][ T6708]  ? bpf_push_jmp_history+0x32b/0xb00
[  126.782527][ T6708]  ? bpf_push_jmp_history+0x32b/0xb00
[  126.782551][ T6708]  krealloc_node_align_noprof+0x19a/0x390
[  126.782581][ T6708]  bpf_push_jmp_history+0x32b/0xb00
[  126.782616][ T6708]  do_check_common+0x2694/0x5970
[  126.782679][ T6708]  ? __pfx_do_check_common+0x10/0x10
[  126.782717][ T6708]  do_check_main+0xa2/0x1f0
[  126.782742][ T6708]  bpf_check+0x2c82/0x3340
[  126.782784][ T6708]  ? __pfx_bpf_check+0x10/0x10
[  126.782810][ T6708]  ? bpf_obj_name_cpy+0x194/0x1e0
[  126.782838][ T6708]  bpf_prog_load+0x158f/0x1d60
[  126.782873][ T6708]  ? __pfx_bpf_prog_load+0x10/0x10
[  126.782912][ T6708]  ? __might_fault+0xaf/0x130
[  126.782942][ T6708]  __sys_bpf+0xd86/0xe00
[  126.782973][ T6708]  ? __pfx___sys_bpf+0x10/0x10
[  126.782999][ T6708]  ? do_futex+0x3e7/0x4e0
[  126.783052][ T6708]  ? rcu_is_watching+0x16/0xb0
[  126.783081][ T6708]  __x64_sys_bpf+0xba/0xd0
[  126.783107][ T6708]  do_syscall_64+0x166/0x520
[  126.783129][ T6708]  ? trace_irq_disable+0x3b/0x140
[  126.783149][ T6708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.783173][ T6708]  ? clear_bhb_loop+0x70/0xc0
[  126.783198][ T6708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.783222][ T6708] RIP: 0033:0x7fc56d99e199
[  126.783243][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.783263][ T6708] RSP: 002b:00007fc56e87f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  126.783287][ T6708] RAX: ffffffffffffffda RBX: 00007fc56dc25fa0 RCX: 00007fc56d99e199
[  126.783304][ T6708] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  126.783318][ T6708] RBP: 00007fc56da358e0 R08: 0000000000000000 R09: 0000000000000000
[  126.783331][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.783345][ T6708] R13: 00007fc56dc26038 R14: 00007fc56dc25fa0 R15: 00007ffd074d6d18
[  126.783380][ T6708]  </TASK>
[  126.858673][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.637293][ T6719] loop1: detected capacity change from 0 to 32768
[  127.651415][  T991] net_ratelimit: 3 callbacks suppressed
[  127.651432][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.672401][ T6719] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  127.672422][ T6719] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  127.773783][ T6719] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  127.788183][ T5725] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  127.789165][   T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  127.789182][   T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  127.913234][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms
[  127.927578][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  127.928840][ T6719] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  127.945634][ T5725] usb 3-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00
[  127.959087][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.978532][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.978607][ T5725] usb 3-1: Product: syz
[  127.978625][ T5725] usb 3-1: Manufacturer: syz
[  127.978641][ T5725] usb 3-1: SerialNumber: syz
[  128.006773][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.065800][ T5725] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  128.349947][ T6725] loop3: detected capacity change from 0 to 32768
[  128.352536][ T6725] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  128.354062][ T6725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.283 (6725)
[  128.413524][ T6725] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.413562][ T6725] BTRFS info (device loop3): using crc32c checksum algorithm
[  128.452816][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.494959][ T6734] 8021q: adding VLAN 0 to HW filter on device team0
[  128.543259][ T6734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.570192][ T6725] BTRFS info (device loop3): rebuilding free space tree
[  128.620251][ T6725] BTRFS info (device loop3): disabling free space tree
[  128.620350][ T6725] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  128.620375][ T6725] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.676761][ T5725] gspca_mr97310a: reg write [19] error -71
[  128.676852][ T5725] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71
[  128.697123][ T6725] BTRFS info (device loop3): setting nodatasum
[  128.697149][ T6725] BTRFS info (device loop3): enabling ssd optimizations
[  128.697167][ T6725] BTRFS info (device loop3): turning off barriers
[  128.697185][ T6725] BTRFS info (device loop3): turning on flush-on-commit
[  128.697201][ T6725] BTRFS info (device loop3): force clearing of disk cache
[  128.717235][ T5725] usb 3-1: USB disconnect, device number 3
[  128.740517][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.863143][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.879073][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.918813][ T6734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.918840][ T6734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.010276][ T6734] veth1_vlan: left promiscuous mode
[  129.028583][ T6734] veth0_vlan: left promiscuous mode
[  129.036413][ T6734] veth0_vlan: entered promiscuous mode
[  129.050024][ T6734] veth1_vlan: entered promiscuous mode
[  129.107066][ T5612] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.122981][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.185293][ T6734] veth1_macvtap: left promiscuous mode
[  129.199166][ T6734] veth0_macvtap: left promiscuous mode
[  129.202776][ T6734] veth0_macvtap: entered promiscuous mode
[  129.225656][ T6734] veth1_macvtap: entered promiscuous mode
[  129.340108][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  129.347794][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  129.411738][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  129.460245][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  129.610266][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.610381][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.634387][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.634516][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.749700][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.759879][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.938696][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.938745][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.938792][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.938824][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.180214][ T6771] veth0: entered promiscuous mode
[  130.204393][ T6770] veth0: left promiscuous mode
[  130.389142][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.599062][ T6780] input: syz0 as /devices/virtual/input/input6
[  130.679193][ T6786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.297'.
[  130.727618][ T6786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.297'.
[  130.789248][  T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.250319][ T6811] loop0: detected capacity change from 0 to 512
[  131.255955][ T6811] EXT4-fs: Ignoring removed i_version option
[  131.255985][ T6811] EXT4-fs: Ignoring removed oldalloc option
[  131.324646][ T6811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.368501][ T6815] netlink: 'syz.1.308': attribute type 4 has an invalid length.
[  131.405582][ T6815] netlink: 'syz.1.308': attribute type 4 has an invalid length.
[  131.530808][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.855275][ T6830] capability: warning: `syz.0.315' uses deprecated v2 capabilities in a way that may be insecure
[  131.892203][ T6828] 
[  131.894593][ T6828] ======================================================
[  131.901648][ T6828] WARNING: possible circular locking dependency detected
[  131.908710][ T6828] syzkaller #0 Tainted: G             L      
[  131.914794][ T6828] ------------------------------------------------------
[  131.921837][ T6828] syz.2.314/6828 is trying to acquire lock:
[  131.927762][ T6828] ffff88804c811dc0 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x287/0x880
[  131.937468][ T6828] 
[  131.937468][ T6828] but task is already holding lock:
[  131.944878][ T6828] ffff8880352b9cb8 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0
[  131.955885][ T6828] 
[  131.955885][ T6828] which lock already depends on the new lock.
[  131.955885][ T6828] 
[  131.966321][ T6828] 
[  131.966321][ T6828] the existing dependency chain (in reverse order) is:
[  131.975355][ T6828] 
[  131.975355][ T6828] -> #2 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}:
[  131.984258][ T6828]        down_read+0x45/0x320
[  131.988963][ T6828]        lookup_slow+0x46/0x80
[  131.993756][ T6828]        ovl_lookup_single+0x323/0xe90
[  131.999245][ T6828]        ovl_lookup_layer+0x377/0x440
[  132.004650][ T6828]        ovl_lookup+0x9ae/0x1c80
[  132.009617][ T6828]        lookup_open+0x94b/0x1970
[  132.014665][ T6828]        path_openat+0x673/0x1da0
[  132.019699][ T6828]        do_file_open+0x23e/0x4a0
[  132.024829][ T6828]        do_sys_openat2+0x115/0x200
[  132.030059][ T6828]        __x64_sys_openat+0x138/0x170
[  132.035452][ T6828]        do_syscall_64+0x166/0x520
[  132.040584][ T6828]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.047027][ T6828] 
[  132.047027][ T6828] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}:
[  132.054884][ T6828]        __d_alloc_parallel+0xc32/0x1700
[  132.060583][ T6828]        __lookup_slow+0x82/0x2f0
[  132.065629][ T6828]        lookup_slow+0x59/0x80
[  132.070436][ T6828]        path_lookupat+0x3f5/0x8c0
[  132.075586][ T6828]        filename_lookup+0x265/0x5d0
[  132.080888][ T6828]        do_readlinkat+0xe3/0x510
[  132.085931][ T6828]        __x64_sys_readlink+0x7f/0x90
[  132.091350][ T6828]        do_syscall_64+0x166/0x520
[  132.096504][ T6828]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.102953][ T6828] 
[  132.102953][ T6828] -> #0 (&type->i_mutex_dir_key#4){++++}-{4:4}:
[  132.111452][ T6828]        __lock_acquire+0x164c/0x2de0
[  132.116849][ T6828]        lock_acquire+0x115/0x350
[  132.121901][ T6828]        down_read_killable+0x4b/0x3b0
[  132.127394][ T6828]        iterate_dir+0x287/0x880
[  132.132348][ T6828]        ovl_dir_read+0x141/0x4a0
[  132.137391][ T6828]        ovl_dir_read_merged+0x2fb/0x520
[  132.143037][ T6828]        ovl_iterate+0xd5a/0x2160
[  132.148078][ T6828]        wrap_directory_iterator+0x96/0xe0
[  132.153905][ T6828]        iterate_dir+0x3db/0x880
[  132.158860][ T6828]        __se_sys_getdents64+0xf1/0x280
[  132.164414][ T6828]        do_syscall_64+0x166/0x520
[  132.169537][ T6828]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.175966][ T6828] 
[  132.175966][ T6828] other info that might help us debug this:
[  132.175966][ T6828] 
[  132.186202][ T6828] Chain exists of:
[  132.186202][ T6828]   &type->i_mutex_dir_key#4 --> DCACHE_PAR_LOOKUP --> &ovl_i_mutex_dir_key[depth]#2
[  132.186202][ T6828] 
[  132.201442][ T6828]  Possible unsafe locking scenario:
[  132.201442][ T6828] 
[  132.208925][ T6828]        CPU0                    CPU1
[  132.214310][ T6828]        ----                    ----
[  132.219685][ T6828]   lock(&ovl_i_mutex_dir_key[depth]#2);
[  132.225353][ T6828]                                lock(DCACHE_PAR_LOOKUP);
[  132.232475][ T6828]                                lock(&ovl_i_mutex_dir_key[depth]#2);
[  132.240652][ T6828]   rlock(&type->i_mutex_dir_key#4);
[  132.245956][ T6828] 
[  132.245956][ T6828]  *** DEADLOCK ***
[  132.245956][ T6828] 
[  132.254114][ T6828] locks held by syz.2.314/6828: 2, last CPU#0:
[  132.260286][ T6828]  #0: ffff8880356cdeb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160
[  132.269383][ T6828]  #1: ffff8880352b9cb8 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0
[  132.280808][ T6828] 
[  132.280808][ T6828] stack backtrace:
[  132.286736][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.2.314 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  132.297604][ T6828] Tainted: [L]=SOFTLOCKUP
[  132.301948][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  132.312030][ T6828] Call Trace:
[  132.315332][ T6828]  <TASK>
[  132.318277][ T6828]  dump_stack_lvl+0xe8/0x150
[  132.322894][ T6828]  print_circular_bug+0x2e2/0x300
[  132.327937][ T6828]  check_noncircular+0x12f/0x150
[  132.332899][ T6828]  __lock_acquire+0x164c/0x2de0
[  132.337776][ T6828]  ? apparmor_file_open+0x523/0x6c0
[  132.342997][ T6828]  ? __pfx_aa_file_perm+0x10/0x10
[  132.348042][ T6828]  lock_acquire+0x115/0x350
[  132.352565][ T6828]  ? iterate_dir+0x287/0x880
[  132.357178][ T6828]  ? iterate_dir+0x287/0x880
[  132.361803][ T6828]  down_read_killable+0x4b/0x3b0
[  132.366764][ T6828]  ? iterate_dir+0x287/0x880
[  132.371370][ T6828]  iterate_dir+0x287/0x880
[  132.375807][ T6828]  ovl_dir_read+0x141/0x4a0
[  132.380330][ T6828]  ? __pfx_ovl_dir_read+0x10/0x10
[  132.385370][ T6828]  ? ovl_path_upper+0x105/0x170
[  132.390339][ T6828]  ? ovl_path_next+0x21a/0x430
[  132.395129][ T6828]  ovl_dir_read_merged+0x2fb/0x520
[  132.400266][ T6828]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[  132.405922][ T6828]  ? __pfx_ovl_fill_merge+0x10/0x10
[  132.411140][ T6828]  ? __kasan_kmalloc+0x93/0xb0
[  132.415928][ T6828]  ? __kmalloc_cache_noprof+0x148/0x600
[  132.421508][ T6828]  ? ovl_iterate+0xcbc/0x2160
[  132.426224][ T6828]  ? ovl_iterate+0xcbc/0x2160
[  132.430928][ T6828]  ovl_iterate+0xd5a/0x2160
[  132.435463][ T6828]  ? arch_stack_walk+0xfb/0x150
[  132.440344][ T6828]  ? check_path+0x21/0x40
[  132.444701][ T6828]  ? check_noncircular+0xdb/0x150
[  132.449750][ T6828]  ? __pfx_ovl_iterate+0x10/0x10
[  132.454738][ T6828]  ? lockdep_unlock+0x5c/0xd0
[  132.459439][ T6828]  ? __lock_acquire+0x1511/0x2de0
[  132.464501][ T6828]  ? lock_acquire+0x115/0x350
[  132.469219][ T6828]  ? down_write+0x166/0x200
[  132.473747][ T6828]  ? __pfx_down_write+0x10/0x10
[  132.478615][ T6828]  ? wrap_directory_iterator+0x52/0xe0
[  132.484098][ T6828]  ? __pfx_ovl_iterate+0x10/0x10
[  132.489050][ T6828]  wrap_directory_iterator+0x96/0xe0
[  132.494392][ T6828]  iterate_dir+0x3db/0x880
[  132.498848][ T6828]  __se_sys_getdents64+0xf1/0x280
[  132.503911][ T6828]  ? __pfx___se_sys_getdents64+0x10/0x10
[  132.509564][ T6828]  ? __pfx_filldir64+0x10/0x10
[  132.514354][ T6828]  ? rcu_is_watching+0x16/0xb0
[  132.519139][ T6828]  do_syscall_64+0x166/0x520
[  132.523765][ T6828]  ? trace_irq_disable+0x3b/0x140
[  132.528812][ T6828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.534897][ T6828]  ? clear_bhb_loop+0x70/0xc0
[  132.539590][ T6828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.545501][ T6828] RIP: 0033:0x7f6174f9e199
[  132.549959][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.569758][ T6828] RSP: 002b:00007f6175ec4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  132.578226][ T6828] RAX: ffffffffffffffda RBX: 00007f6175225fa0 RCX: 00007f6174f9e199
[  132.586234][ T6828] RDX: 0000000000001000 RSI: 0000200000001dc0 RDI: 0000000000000003
[  132.594230][ T6828] RBP: 00007f61750358e0 R08: 0000000000000000 R09: 0000000000000000
[  132.602226][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.610218][ T6828] R13: 00007f6175226038 R14: 00007f6175225fa0 R15: 00007ffc15f1e208
[  132.618213][ T6828]  </TASK>
[  132.640510][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.868496][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.949262][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  132.949299][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  133.908498][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.708425][ T4928] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  134.949526][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.668352][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.988841][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.029072][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.068340][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.708341][ T2232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.118522][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.988340][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.149275][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.188485][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.748291][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog