last executing test programs:

12.647735022s ago: executing program 0 (id=367):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2018010, &(0x7f0000000080)={[{@nogrpid}, {@noalign}, {@sysvgroups}, {@inode64}, {@nolazytime}]}, 0x1, 0xb99f, &(0x7f0000018700)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0)
write(r0, &(0x7f0000004200)='t', 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
futex(&(0x7f0000000280), 0xb, 0x1, &(0x7f0000000380), &(0x7f0000000400)=0x1, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r1, 0x2007ffb)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)

11.211475792s ago: executing program 0 (id=370):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
fanotify_init(0x20, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x2}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x2)
sendmmsg(r3, &(0x7f0000000b40), 0x0, 0x48000)

9.322832724s ago: executing program 0 (id=375):
r0 = syz_open_dev$dri(0x0, 0x1ff, 0xa800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x205c2, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)

8.247157378s ago: executing program 0 (id=380):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0x1000, 0x0, 0x20002fa})
socket$inet(0x2, 0x80001, 0x84)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70)

8.01367745s ago: executing program 2 (id=381):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002)

6.862357949s ago: executing program 1 (id=383):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r1, 0x13, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffff}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "2c357080b23af771ab807be4af371a97"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8fbfc9e6f2dc7aa8fd5103ec5a04dbff"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x48100)

6.621955374s ago: executing program 2 (id=385):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f000040b000/0x1000)=nil, 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
io_setup(0x3ff, &(0x7f0000000500)=<r8=>0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0xfffffdfc}])
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0)

6.620992987s ago: executing program 3 (id=386):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)

6.606861496s ago: executing program 1 (id=387):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

6.434720468s ago: executing program 1 (id=388):
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8)
preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10)
tkill(r2, 0xb)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000840)=0x1, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x4204, 0x7, 0x9}, &(0x7f00000000c0)=0x10)
close(r0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kexec_crash_size', 0x2, 0x42)
write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'cpuset'}, {0x2d, 'rlimit'}, {0x2d, 'blkio'}]}, 0x17)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}})

6.367774818s ago: executing program 3 (id=389):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x800)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0x0, 0x6, 0x4000000, 0x0, 0x97})

5.439975656s ago: executing program 0 (id=390):
syz_open_dev$evdev(0x0, 0x2, 0x101000)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a92000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"})
mount(&(0x7f0000000500)=@rnullb, &(0x7f00000004c0)='./cgroup/file0\x00', &(0x7f0000000180)='ufs\x00', 0x1a68099, 0x0)
r3 = syz_open_pts(0xffffffffffffffff, 0x80)
r4 = dup3(r3, 0xffffffffffffffff, 0x80000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={<r6=>0x0}, &(0x7f0000000380)=0xc)
capget(&(0x7f0000000440)={0x20080522, r6}, &(0x7f0000000480)={0x5, 0xb, 0xfb1d, 0x6, 0x1155, 0x2})
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9)
ioctl$KDENABIO(r5, 0x4b36)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300))
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

5.278905164s ago: executing program 1 (id=391):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="230000000100", 0x6)

5.240817631s ago: executing program 1 (id=392):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x18, 0x0, 0x3, 0xfffffffffffeffff, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000000))
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
syz_pidfd_open(0x0, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0)
open$dir(0x0, 0x648400, 0x121)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x20004804, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r3, 0x1)

3.847810346s ago: executing program 4 (id=396):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2.828560058s ago: executing program 2 (id=397):
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000780)=0x2, 0x0, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0xdc1, 0x0, 0x1, 0x4, 0x7, 0x6}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380), 0xa, 0x4004000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.827384233s ago: executing program 4 (id=398):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

2.776823066s ago: executing program 3 (id=399):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x700, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x4})

2.674138169s ago: executing program 4 (id=400):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x4}, 0x18)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a8, 0x4})
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

2.590050485s ago: executing program 2 (id=401):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
syz_open_dev$loop(&(0x7f0000000040), 0x59c0ffb3, 0x48100)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0xd}, 0x50)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10)
shutdown(r0, 0x1)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2.498928382s ago: executing program 3 (id=402):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="230000000100", 0x6)

2.439614459s ago: executing program 4 (id=403):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, r1, 0x852dd6c070cd7e4d, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0)

2.317132731s ago: executing program 2 (id=404):
r0 = socket$tipc(0x1e, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x10007d89, 0x10100, 0x3, 0x85}, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000700)=<r2=>0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600)
r8 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000000c0)={r8, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020000003b3acc9f02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x1, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x200)
socket$tipc(0x1e, 0x0, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4)

2.262246982s ago: executing program 3 (id=405):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$lock(r0, 0x11, 0x0)

2.170854684s ago: executing program 4 (id=406):
r0 = syz_open_dev$sndctrl(&(0x7f0000000a80), 0xd4, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
r1 = open(0x0, 0x400, 0x43)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x1, 0x5, {<r2=>0x0}, {}, 0x8000000000000000, 0xb327})
fcntl$lock(r0, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x7, r2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1})
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"003477a87d6300"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118)
r6 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0)
io_setup(0x7d, &(0x7f0000000600)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x2000, 0x8, 0x0, r6, 0x0}])
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r5, 0x6, '\x00)O', "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"}}, 0x110)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r8, 0x58, &(0x7f0000000180)}, 0x10)
sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004)

1.955119549s ago: executing program 3 (id=407):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000200)=ANY=[], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x10)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000100000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10)
lsm_list_modules(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8004)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x1b3)
setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2080, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r7, 0xc048aec8, &(0x7f0000000000)={0x40004})
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400})
ioctl$UFFDIO_CONTINUE(r8, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000122000/0x2000)=nil, 0x2000}, 0x1000000})
r9 = syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000100)=<r10=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r10, 0x7c80, 0x0)

1.203268685s ago: executing program 2 (id=408):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000342000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000000)="dde936181966d245ab66b84d008ed00f0766ba610066b8ee0066efb9800000c035001000000f30660f323e660f2debc4c1e9f47b00", 0x35}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7, 0x100000000], 0x3000, 0x280384})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

850.314309ms ago: executing program 0 (id=409):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_setup(0x437, 0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006)

19.641773ms ago: executing program 1 (id=410):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

0s ago: executing program 4 (id=411):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4)
connect$inet(r4, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10)
r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
socket$inet6(0xa, 0x800, 0xefb8)
ftruncate(r5, 0x0)
fsetxattr$security_ima(r0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0302fc"], 0xa, 0x0)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   47.820850][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.850141][ T5488] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts.
syzkaller login: [   70.065355][ T5810] cgroup: Unknown subsys name 'net'
[   70.216498][ T5810] cgroup: Unknown subsys name 'cpuset'
[   70.224951][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.398552][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[   71.405081][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[   71.745904][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.735337][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.743838][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.751763][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.764464][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.773852][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.898128][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.908004][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.916207][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.925371][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.933835][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.942731][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.951004][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.958948][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.968186][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.968410][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.975735][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.984056][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.990274][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.997937][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.005534][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.019123][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.023670][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.037892][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.049166][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.069321][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.342708][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   76.591644][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.599294][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.607561][ T5820] bridge_slave_0: entered allmulticast mode
[   76.614814][ T5820] bridge_slave_0: entered promiscuous mode
[   76.655099][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.662287][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.670141][ T5820] bridge_slave_1: entered allmulticast mode
[   76.678453][ T5820] bridge_slave_1: entered promiscuous mode
[   76.720031][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.733002][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.824151][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   76.865740][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   76.878416][ T5820] team0: Port device team_slave_0 added
[   76.923178][ T5820] team0: Port device team_slave_1 added
[   77.057543][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.066958][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.093158][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.115874][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.122847][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.149331][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.228839][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   77.239919][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   77.250515][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.257794][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.265443][ T5826] bridge_slave_0: entered allmulticast mode
[   77.272436][ T5826] bridge_slave_0: entered promiscuous mode
[   77.281681][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.288907][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.296158][ T5826] bridge_slave_1: entered allmulticast mode
[   77.303888][ T5826] bridge_slave_1: entered promiscuous mode
[   77.374666][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.381825][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.389232][ T5824] bridge_slave_0: entered allmulticast mode
[   77.396526][ T5824] bridge_slave_0: entered promiscuous mode
[   77.404750][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.411851][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.419278][ T5824] bridge_slave_1: entered allmulticast mode
[   77.426434][ T5824] bridge_slave_1: entered promiscuous mode
[   77.532499][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.550804][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.570733][ T5820] hsr_slave_0: entered promiscuous mode
[   77.577408][ T5820] hsr_slave_1: entered promiscuous mode
[   77.586367][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.602273][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.679273][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.686556][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.694087][ T5831] bridge_slave_0: entered allmulticast mode
[   77.701082][ T5831] bridge_slave_0: entered promiscuous mode
[   77.744664][ T5824] team0: Port device team_slave_0 added
[   77.750641][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.757970][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.765820][ T5831] bridge_slave_1: entered allmulticast mode
[   77.773027][ T5831] bridge_slave_1: entered promiscuous mode
[   77.782537][ T5826] team0: Port device team_slave_0 added
[   77.807618][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.814838][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.822026][ T5825] bridge_slave_0: entered allmulticast mode
[   77.829801][ T5825] bridge_slave_0: entered promiscuous mode
[   77.840292][ T5824] team0: Port device team_slave_1 added
[   77.871529][ T5826] team0: Port device team_slave_1 added
[   77.874403][ T5840] Bluetooth: hci0: command tx timeout
[   77.889698][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.896933][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.905175][ T5825] bridge_slave_1: entered allmulticast mode
[   77.912221][ T5825] bridge_slave_1: entered promiscuous mode
[   77.988407][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.995522][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.022935][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.036967][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.066690][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.077669][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.084770][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.111152][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.114037][ T5840] Bluetooth: hci1: command tx timeout
[   78.121892][ T5143] Bluetooth: hci2: command tx timeout
[   78.127515][ T5823] Bluetooth: hci3: command tx timeout
[   78.132675][ T5143] Bluetooth: hci4: command tx timeout
[   78.147523][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.157584][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.164688][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.190617][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.210316][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.217326][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.243327][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.257183][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.325217][ T5825] team0: Port device team_slave_0 added
[   78.376507][ T5825] team0: Port device team_slave_1 added
[   78.389336][ T5831] team0: Port device team_slave_0 added
[   78.447478][ T5831] team0: Port device team_slave_1 added
[   78.497806][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.504926][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.531231][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.569827][ T5824] hsr_slave_0: entered promiscuous mode
[   78.576436][ T5824] hsr_slave_1: entered promiscuous mode
[   78.582583][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   78.588455][ T5824] Cannot create hsr debugfs directory
[   78.597666][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.605050][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.632265][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.660346][ T5826] hsr_slave_0: entered promiscuous mode
[   78.666961][ T5826] hsr_slave_1: entered promiscuous mode
[   78.673091][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   78.678943][ T5826] Cannot create hsr debugfs directory
[   78.727642][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.734836][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.761054][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.774682][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.781624][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.808641][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.940189][ T5825] hsr_slave_0: entered promiscuous mode
[   78.947272][ T5825] hsr_slave_1: entered promiscuous mode
[   78.953508][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   78.959240][ T5825] Cannot create hsr debugfs directory
[   79.075996][ T5831] hsr_slave_0: entered promiscuous mode
[   79.082290][ T5831] hsr_slave_1: entered promiscuous mode
[   79.088610][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   79.094367][ T5831] Cannot create hsr debugfs directory
[   79.195006][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.210891][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.259848][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.289868][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.456190][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.468285][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.482378][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.510753][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.604508][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.617804][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.637185][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.660454][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.757461][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.772917][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.785457][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.797220][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.926556][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.939174][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.950061][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.962239][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.964528][ T5143] Bluetooth: hci0: command tx timeout
[   79.999058][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.028029][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.119576][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   80.137452][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.148161][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   80.165934][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.173262][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.193926][ T5823] Bluetooth: hci3: command tx timeout
[   80.203463][ T5840] Bluetooth: hci1: command tx timeout
[   80.203486][   T52] Bluetooth: hci2: command tx timeout
[   80.208928][ T5143] Bluetooth: hci4: command tx timeout
[   80.230125][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.237352][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.247542][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.254797][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.267209][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.274427][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.298267][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   80.367003][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.374141][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.384516][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.391637][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.412304][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.433128][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.479749][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.528457][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   80.577298][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.584549][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.612939][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   80.639532][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.646729][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.712684][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.719937][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.797505][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.804745][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.937921][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.049021][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.170623][ T5824] veth0_vlan: entered promiscuous mode
[   81.228306][ T5824] veth1_vlan: entered promiscuous mode
[   81.252506][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.339748][ T5820] veth0_vlan: entered promiscuous mode
[   81.391372][ T5820] veth1_vlan: entered promiscuous mode
[   81.420306][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.438697][ T5825] veth0_vlan: entered promiscuous mode
[   81.462042][ T5824] veth0_macvtap: entered promiscuous mode
[   81.488828][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.516429][ T5824] veth1_macvtap: entered promiscuous mode
[   81.529449][ T5825] veth1_vlan: entered promiscuous mode
[   81.596887][ T5820] veth0_macvtap: entered promiscuous mode
[   81.622218][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.655628][ T5820] veth1_macvtap: entered promiscuous mode
[   81.676219][ T5825] veth0_macvtap: entered promiscuous mode
[   81.711549][ T5825] veth1_macvtap: entered promiscuous mode
[   81.728434][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.840104][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.857634][ T5826] veth0_vlan: entered promiscuous mode
[   81.864471][   T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.915637][   T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.937972][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.967129][ T5826] veth1_vlan: entered promiscuous mode
[   81.979567][   T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.990672][   T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.026346][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.038444][ T5143] Bluetooth: hci0: command tx timeout
[   82.068281][   T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.095392][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.126431][   T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.146828][   T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.156862][   T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.204103][   T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.232600][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.232789][ T5831] veth0_vlan: entered promiscuous mode
[   82.246207][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.262794][   T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.277808][ T5143] Bluetooth: hci4: command tx timeout
[   82.278227][   T52] Bluetooth: hci1: command tx timeout
[   82.283776][ T5143] Bluetooth: hci2: command tx timeout
[   82.288809][ T5823] Bluetooth: hci3: command tx timeout
[   82.315693][   T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.324480][   T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.348194][ T5831] veth1_vlan: entered promiscuous mode
[   82.377144][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.377226][ T5826] veth0_macvtap: entered promiscuous mode
[   82.391008][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.418695][ T5826] veth1_macvtap: entered promiscuous mode
[   82.494255][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.504488][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.553702][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.570358][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.587896][ T5831] veth0_macvtap: entered promiscuous mode
[   82.636712][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.647261][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.656163][ T5831] veth1_macvtap: entered promiscuous mode
[   82.662368][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.685485][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.701896][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.777612][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.799023][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.808925][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.811712][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.825085][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.852444][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.905455][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.934495][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.948144][  T151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.989564][  T151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.033880][  T151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.043452][   T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.082110][ T5948] Zero length message leads to an empty skb
[   83.133963][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.147006][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.633408][ T5953] loop2: detected capacity change from 0 to 65536
[   83.655479][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.677983][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.711303][ T5953] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   83.861029][ T5953] XFS (loop2): Ending clean mount
[   83.909597][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   83.928162][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.941061][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   83.960168][ T5953] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure
[   83.971517][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   83.981135][   T30] audit: type=1804 audit(1762619780.962:2): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3" name="/newroot/0/file0/bus" dev="loop2" ino=73 res=1 errno=0
[   84.012114][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.119658][ T5823] Bluetooth: hci0: command tx timeout
[   84.132924][ T5825] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   84.153609][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.164076][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.199192][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.209870][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   84.220349][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   84.323642][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.353857][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   84.354445][ T5823] Bluetooth: hci2: command tx timeout
[   84.367588][   T52] Bluetooth: hci4: command tx timeout
[   84.367607][ T5840] Bluetooth: hci3: command tx timeout
[   84.372984][   T52] Bluetooth: hci1: command tx timeout
[   84.544315][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.688452][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   85.748092][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.927842][    T9] usb 1-1: Using ep0 maxpacket: 8
[   85.958763][    T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21
[   85.983510][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.003333][    T9] usb 1-1: Product: syz
[   86.008822][    T9] usb 1-1: Manufacturer: syz
[   86.038123][    T9] usb 1-1: SerialNumber: syz
[   86.095606][    T9] usb 1-1: config 0 descriptor??
[   86.155799][    T9] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32
[   86.763883][ T5983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11'.
[   86.837143][   T43] cfg80211: failed to load regulatory.db
[   86.987640][ T5989] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7'.
[   87.207968][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.575746][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.625693][ T5983] syz.3.11 (5983) used greatest stack depth: 17864 bytes left
[   90.968919][ T6016] wireguard0: entered promiscuous mode
[   90.974521][ T6016] wireguard0: entered allmulticast mode
[   91.490522][ T5989] syz.0.7 (5989): drop_caches: 2
[   92.373499][ T5914] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   93.473366][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.598657][   T43] usb 1-1: USB disconnect, device number 2
[   93.617676][ T5914] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[   93.653344][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.682634][ T5914] usb 3-1: Product: syz
[   93.710275][ T5914] usb 3-1: Manufacturer: syz
[   93.741212][ T5914] usb 3-1: SerialNumber: syz
[   93.766338][ T5914] usb 3-1: config 0 descriptor??
[   93.778652][ T5914] ums-alauda 3-1:0.0: USB Mass Storage device detected
[   94.111028][ T5914] usb 3-1: USB disconnect, device number 2
[   94.494961][ T6057] loop0: detected capacity change from 0 to 65536
[   94.981932][ T6059] wireguard0: entered promiscuous mode
[   94.987513][ T6059] wireguard0: entered allmulticast mode
[   95.139624][ T6057] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   95.179588][ T6057] XFS (loop0): Ending clean mount
[   95.214208][   T30] audit: type=1804 audit(1762619792.242:3): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.31" name="/newroot/3/file0/bus" dev="loop0" ino=73 res=1 errno=0
[   95.261891][ T5824] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   97.113358][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   97.440761][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.456449][ T5914] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   97.551856][ T6096] loop6: detected capacity change from 0 to 524287999
[   97.565303][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.574119][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.582622][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.592233][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.601608][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.618029][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.626992][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.641143][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.682340][ T6096] ldm_validate_partition_table(): Disk read failed.
[   97.689419][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.699632][ T6096] Buffer I/O error on dev loop6, logical block 0, async page read
[   97.709971][ T6096] Dev loop6: unable to read RDB block 0
[   97.717872][ T6096]  loop6: unable to read partition table
[   97.724633][ T6096] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   98.450835][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   98.463484][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   99.035483][ T5914] usb 3-1: Product: syz
[   99.050384][ T5914] usb 3-1: Manufacturer: syz
[   99.070205][ T5914] usb 3-1: SerialNumber: syz
[   99.988810][ T6107] wireguard0: entered promiscuous mode
[   99.994458][ T6107] wireguard0: entered allmulticast mode
[  101.691034][ T6118] loop4: detected capacity change from 0 to 65536
[  101.740620][ T6118] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  101.794308][ T6118] XFS (loop4): Ending clean mount
[  101.835229][   T30] audit: type=1804 audit(1762619798.872:4): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.44" name="/newroot/9/file0/bus" dev="loop4" ino=73 res=1 errno=0
[  101.869279][ T6118] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  101.880425][ T6118] XFS (loop4): Unmount and run xfs_repair
[  101.886185][ T6118] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  101.894837][ T6118] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  101.903728][ T6118] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  101.912576][ T6118] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  101.921438][ T6118] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  101.930444][ T6118] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  101.939358][ T6118] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  101.948220][ T6118] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  101.957086][ T6118] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  101.966179][ T6118] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  101.977778][ T6118] XFS (loop4): page discard on page ffffea0001b436c0, inode 0x49, pos 0.
[  102.313448][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.352863][ T5831] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  102.507642][ T5831] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  102.713306][   T24] usb 2-1: Using ep0 maxpacket: 32
[  102.724937][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.737177][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.747497][   T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  102.757127][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.767666][   T24] usb 2-1: config 0 descriptor??
[  103.260943][   T24] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  103.281229][   T24] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  103.296195][   T24] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  103.311990][   T24] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  103.323283][   T24] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  103.347754][   T24] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  103.383326][   T24] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  103.403337][   T24] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  103.468574][ T1208] usb 3-1: USB disconnect, device number 3
[  103.468654][   T24] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  103.554397][   T24] usb 2-1: USB disconnect, device number 2
[  103.748807][ T6140] fido_id[6140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  105.283612][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  105.686608][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.732621][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.817556][   T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  105.825058][ T6164] netlink: 'syz.2.57': attribute type 4 has an invalid length.
[  105.835045][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  105.845764][   T24] usb 5-1: SerialNumber: syz
[  106.630303][ T5943] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  106.776849][ T6170] netlink: 'syz.3.49': attribute type 7 has an invalid length.
[  106.957911][   T24] usb 5-1: 0:2 : does not exist
[  107.013097][ T5943] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  107.032865][   T24] usb 5-1: USB disconnect, device number 2
[  107.049275][ T5943] usb 1-1: config 0 has no interface number 0
[  107.212123][ T5943] usb 1-1: too many endpoints for config 0 interface 12 altsetting 202: 230, using maximum allowed: 30
[  107.213775][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.270730][ T6175] fuse: Unknown parameter 'use00000000000000000000'
[  107.305961][ T5943] usb 1-1: config 0 interface 12 altsetting 202 has 0 endpoint descriptors, different from the interface descriptor's value: 230
[  107.363328][ T5943] usb 1-1: config 0 interface 12 has no altsetting 0
[  107.379236][ T5943] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  107.419614][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.458095][ T5943] usb 1-1: Product: syz
[  107.462300][ T5943] usb 1-1: Manufacturer: syz
[  107.483331][ T5943] usb 1-1: SerialNumber: syz
[  107.494748][ T5943] usb 1-1: config 0 descriptor??
[  107.597439][ T6179] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.715586][ T5943] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  107.815501][ T5943] gspca_ov534_9: reg_w failed -71
[  107.834084][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  108.273629][ T5943] gspca_ov534_9: Unknown sensor 0000
[  108.274195][ T5943] ov534_9 1-1:0.12: probe with driver ov534_9 failed with error -22
[  108.500517][ T5943] usb 1-1: USB disconnect, device number 3
[  108.623349][    T9] usb 5-1: Using ep0 maxpacket: 32
[  108.630931][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.643033][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.656338][    T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  108.670960][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.286842][ T6189] loop2: detected capacity change from 0 to 65536
[  109.315171][ T6199] lo speed is unknown, defaulting to 1000
[  109.321807][ T6199] lo speed is unknown, defaulting to 1000
[  109.340599][ T6199] lo speed is unknown, defaulting to 1000
[  109.383896][ T6199] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  109.469318][ T6199] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  109.757719][ T6199] lo speed is unknown, defaulting to 1000
[  109.777023][    T9] usb 5-1: config 0 descriptor??
[  109.838833][ T6199] lo speed is unknown, defaulting to 1000
[  109.850065][ T6199] lo speed is unknown, defaulting to 1000
[  109.868574][ T6199] lo speed is unknown, defaulting to 1000
[  109.876592][ T6199] lo speed is unknown, defaulting to 1000
[  109.963877][ T6189] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  109.966962][   T50] wlan1: Trigger new scan to find an IBSS to join
[  109.996294][ T6189] XFS (loop2): Ending clean mount
[  110.009731][   T30] audit: type=1804 audit(1762619807.042:5): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.66" name="/newroot/14/file0/bus" dev="loop2" ino=73 res=1 errno=0
[  110.077698][ T6189] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  110.090880][ T6189] XFS (loop2): Unmount and run xfs_repair
[  110.097042][ T6189] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  110.104794][ T6189] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  110.114086][ T6189] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  110.123122][ T6189] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  110.132385][ T6189] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  110.141367][ T6189] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.150865][ T6189] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.159996][ T6189] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.169081][ T6189] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.178197][ T6189] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  110.190257][ T6189] XFS (loop2): page discard on page ffffea0001b1fe40, inode 0x49, pos 0.
[  110.615221][    T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[  110.715586][    T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[  110.722426][    T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[  110.796254][    T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[  110.932291][ T5825] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  110.956438][    T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[  111.022629][ T6229] Bluetooth: MGMT ver 1.23
[  111.533047][ T5825] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  111.546026][    T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[  111.604641][    T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[  111.611654][    T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[  111.681221][    T9] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  111.797423][    T9] usb 5-1: USB disconnect, device number 3
[  112.750995][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[  112.811585][ T6240] fido_id[6240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  115.373331][ T5914] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  115.583821][ T5914] usb 3-1: Using ep0 maxpacket: 32
[  115.662836][ T6278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  115.875264][   T60] wlan1: Trigger new scan to find an IBSS to join
[  116.143058][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.160042][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.172316][ T5914] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  116.181762][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.202636][ T5914] usb 3-1: config 0 descriptor??
[  116.387264][ T6285] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  116.399143][ T6285] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  116.413329][ T6285] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  116.422879][ T6283] syzkaller0: entered promiscuous mode
[  116.428473][ T6285] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  116.440587][ T6283] syzkaller0: entered allmulticast mode
[  116.808770][ T5914] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[  116.850680][ T5914] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[  116.965786][ T5914] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[  117.014948][ T5914] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[  117.060159][ T5914] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[  117.119353][ T5914] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[  117.139099][ T5914] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[  117.165434][   T60] wlan1: Creating new IBSS network, BSSID aa:7c:de:08:ee:2d
[  117.174032][ T5914] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[  117.193527][ T5914] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  117.252802][ T5914] usb 3-1: USB disconnect, device number 4
[  117.331345][ T6297] fido_id[6297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  117.950413][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[  118.419261][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'.
[  118.998751][ T6325] sctp: [Deprecated]: syz.0.106 (pid 6325) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.998751][ T6325] Use struct sctp_sack_info instead
[  122.070257][ T5893] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  122.256329][ T5893] usb 4-1: Using ep0 maxpacket: 32
[  122.271934][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.283687][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.294292][ T5893] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  122.377087][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.395430][ T5893] usb 4-1: config 0 descriptor??
[  122.931461][ T5893] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  122.954493][ T5893] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  122.961435][ T5893] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  123.003421][ T5893] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  123.010275][ T5893] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0
[  123.053424][ T5893] savu 0003:1E7D:2D5A.0004: unbalanced collection at end of report description
[  123.062827][ T5893] savu 0003:1E7D:2D5A.0004: parse failed
[  123.091459][ T5893] savu 0003:1E7D:2D5A.0004: probe with driver savu failed with error -22
[  123.149658][ T5893] usb 4-1: USB disconnect, device number 2
[  123.195866][ T6344] Bluetooth: MGMT ver 1.23
[  123.355158][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'.
[  127.838508][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  128.483316][ T5892] usb 5-1: Using ep0 maxpacket: 32
[  128.498943][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.538191][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.816549][ T5892] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  129.028353][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.091964][ T5892] usb 5-1: config 0 descriptor??
[  129.383475][ T5936] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  129.582797][ T6413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.137'.
[  129.603932][ T5892] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0
[  129.762403][ T5892] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0
[  129.852657][ T5936] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  129.857049][ T5892] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0
[  129.903012][ T5892] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0
[  129.933357][ T5936] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  129.943419][ T5892] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0
[  129.963689][ T5892] savu 0003:1E7D:2D5A.0005: unbalanced collection at end of report description
[  129.983340][ T5936] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  129.992402][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.020822][ T5892] savu 0003:1E7D:2D5A.0005: parse failed
[  130.039356][ T5892] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22
[  130.050447][ T6406] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  130.073908][ T5892] usb 5-1: USB disconnect, device number 4
[  130.230638][ T5936] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  130.439566][ T6423] tipc: Started in network mode
[  130.444853][ T6423] tipc: Node identity ac14141b, cluster identity 4711
[  130.456460][ T6423] tipc: New replicast peer: 255.255.255.255
[  130.466087][ T6423] tipc: Enabled bearer <udp:syz2>, priority 10
[  130.956559][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'.
[  130.965767][ T6421] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'.
[  130.980029][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'.
[  130.993998][ T6421] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'.
[  131.002942][ T6421] netlink: 104 bytes leftover after parsing attributes in process `syz.3.140'.
[  131.590963][ T5936] tipc: Node number set to 2886997019
[  132.289824][ T6445] trusted_key: encrypted_key: insufficient parameters specified
[  132.854521][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.864441][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.985580][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'.
[  133.026058][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'.
[  133.942266][ T6465] xt_CT: You must specify a L4 protocol and not use inversions on it
[  134.800133][ T6466] tipc: Started in network mode
[  134.805211][ T6466] tipc: Node identity ac14141b, cluster identity 4711
[  134.813403][ T6466] tipc: New replicast peer: 255.255.255.255
[  134.821369][ T6466] tipc: Enabled bearer <udp:syz2>, priority 10
[  135.597854][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  135.805471][ T5892] usb 4-1: Using ep0 maxpacket: 32
[  135.847444][ T5892] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  135.859895][ T5834] tipc: Node number set to 2886997019
[  135.877821][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0
[  135.886165][ T5892] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  136.320468][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.358365][ T5892] usb 4-1: config 0 descriptor??
[  136.453394][ T5834] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  136.510149][ T5936] usb 2-1: USB disconnect, device number 3
[  136.542269][ T5892] usbhid 4-1:0.0: can't add hid device: -71
[  136.550649][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  136.623375][ T5834] usb 3-1: Using ep0 maxpacket: 32
[  136.637464][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.658635][ T5892] usb 4-1: USB disconnect, device number 3
[  136.821088][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.915899][ T6477] bridge0: port 3(gretap0) entered blocking state
[  136.923393][ T6477] bridge0: port 3(gretap0) entered disabled state
[  136.932808][ T6477] gretap0: entered allmulticast mode
[  136.952092][ T6477] gretap0: entered promiscuous mode
[  136.960943][ T6477] bridge0: port 3(gretap0) entered blocking state
[  136.967703][ T6477] bridge0: port 3(gretap0) entered forwarding state
[  137.348535][ T5834] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  137.360415][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.370130][ T5834] usb 3-1: config 0 descriptor??
[  137.784672][ T5834] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0
[  137.805293][ T5834] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0
[  137.832095][ T5834] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0
[  137.863343][ T5834] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0
[  137.883326][ T5834] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0
[  137.890340][ T5834] savu 0003:1E7D:2D5A.0006: unbalanced collection at end of report description
[  137.934885][ T5834] savu 0003:1E7D:2D5A.0006: parse failed
[  137.953857][ T5834] savu 0003:1E7D:2D5A.0006: probe with driver savu failed with error -22
[  137.989737][ T5834] usb 3-1: USB disconnect, device number 5
[  138.464808][ T6503] tipc: Started in network mode
[  138.469867][ T6503] tipc: Node identity ac14141b, cluster identity 4711
[  138.478992][ T6503] tipc: New replicast peer: 255.255.255.255
[  138.487516][ T6503] tipc: Enabled bearer <udp:syz2>, priority 10
[  138.584343][ T5840] Bluetooth: hci5: command 0x1003 tx timeout
[  138.613593][   T52] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  139.446471][ T5936] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  139.603399][ T5834] tipc: Node number set to 2886997019
[  139.669481][ T5936] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  139.724405][   T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  139.991010][ T6518] loop0: detected capacity change from 0 to 65536
[  140.027920][ T5936] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  140.053067][ T6518] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  140.094723][ T5936] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  140.125808][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.140171][ T6518] XFS (loop0): Ending clean mount
[  140.140312][ T6508] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  140.191724][ T6518] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  140.202660][ T6518] XFS (loop0): Unmount and run xfs_repair
[  140.208506][ T6518] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  140.216066][ T6518] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  140.224983][ T6518] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  140.233860][ T6518] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  140.242748][ T6518] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  140.251737][ T6518] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.260648][ T6518] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.269545][ T6518] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.278484][ T6518] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.287378][ T6518] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  140.299750][ T6518] XFS (loop0): page discard on page ffffea0001af77c0, inode 0x49, pos 0.
[  140.319511][   T43] usb 2-1: Using ep0 maxpacket: 32
[  140.358438][   T30] audit: type=1804 audit(1762619837.192:6): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.172" name="/newroot/43/file0/bus" dev="loop0" ino=73 res=1 errno=0
[  140.386327][ T5936] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  140.406549][   T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  140.416707][ T5824] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  140.423270][   T43] usb 2-1: config 0 has no interface number 0
[  140.470960][   T43] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  140.476952][ T5824] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  140.490219][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.659768][   T43] usb 2-1: Product: syz
[  140.726523][   T43] usb 2-1: Manufacturer: syz
[  140.731166][   T43] usb 2-1: SerialNumber: syz
[  140.977197][   T43] usb 2-1: config 0 descriptor??
[  141.227633][   T43] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  141.268106][   T43] usb 2-1: selecting invalid altsetting 1
[  141.277644][   T43] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  141.296652][   T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  141.335416][    T9] usb 4-1: USB disconnect, device number 4
[  141.364754][   T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  141.381749][   T43] usb 2-1: media controller created
[  141.499976][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  141.634673][   T43] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  141.683425][   T43] zl10353_read_register: readreg error (reg=127, ret==-71)
[  141.704751][   T43] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  142.144822][   T43] usb 2-1: USB disconnect, device number 4
[  144.018939][ T6552] tipc: Started in network mode
[  144.023957][ T6552] tipc: Node identity ac14141b, cluster identity 4711
[  144.030979][ T6552] tipc: New replicast peer: 255.255.255.255
[  144.038211][ T6552] tipc: Enabled bearer <udp:syz2>, priority 10
[  145.214213][ T6568] loop3: detected capacity change from 0 to 65536
[  145.223656][    T9] tipc: Node number set to 2886997019
[  145.291742][ T6568] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  145.464257][ T6568] XFS (loop3): Ending clean mount
[  145.517288][ T6568] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  145.528267][ T6568] XFS (loop3): Unmount and run xfs_repair
[  145.534056][ T6568] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  145.541670][ T6568] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  145.550590][ T6568] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  145.559513][ T6568] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  145.568947][ T6568] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  145.578133][ T6568] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  145.587153][ T6568] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  145.596126][ T6568] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  145.605082][ T6568] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  145.614103][ T6568] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  145.626058][ T6568] XFS (loop3): page discard on page ffffea0001b22bc0, inode 0x49, pos 0.
[  145.646540][   T30] audit: type=1804 audit(1762619842.542:7): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.184" name="/newroot/41/file0/bus" dev="loop3" ino=73 res=1 errno=0
[  145.834598][ T6581] syz.4.186 uses obsolete (PF_INET,SOCK_PACKET)
[  145.904733][ T5826] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  146.047193][ T5826] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  146.428990][ T6590] bridge1: entered promiscuous mode
[  146.434401][ T6590] bridge1: entered allmulticast mode
[  147.278029][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  148.023600][ T6614] loop0: detected capacity change from 0 to 65536
[  148.087499][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'.
[  148.098230][ T6614] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  148.219948][ T6614] XFS (loop0): Ending clean mount
[  148.289562][ T6614] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  148.295485][   T30] audit: type=1804 audit(1762619845.322:8): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.197" name="/newroot/50/file0/bus" dev="loop0" ino=73 res=1 errno=0
[  148.300599][ T6614] XFS (loop0): Unmount and run xfs_repair
[  148.327130][ T6614] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  148.334801][ T6614] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  148.343934][ T6614] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  148.352798][ T6614] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  148.361795][ T6614] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  148.370777][ T6614] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.379806][ T6614] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.391498][ T6614] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.400458][ T6614] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  148.409381][ T6614] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  148.420307][ T6614] XFS (loop0): page discard on page ffffea00013de180, inode 0x49, pos 0.
[  148.726808][ T5824] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  148.830293][ T5824] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  148.891084][ T6640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  149.328959][ T6638] wireguard1: entered promiscuous mode
[  149.334505][ T6638] wireguard1: entered allmulticast mode
[  150.229396][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'.
[  152.462556][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'.
[  152.500701][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'.
[  152.642132][   T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.794979][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.630889][   T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.769104][ T5985] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.112743][ T6673] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  154.125506][ T6673] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  154.137278][ T6673] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  154.145210][ T6673] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  154.521876][ T6660] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  154.613614][ T6660] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  154.901649][ T6660] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  155.246102][ T6684] loop3: detected capacity change from 0 to 65536
[  155.328249][ T6660] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  155.454490][ T6684] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  155.503872][ T6684] XFS (loop3): Ending clean mount
[  155.538539][ T6660] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  155.551072][   T30] audit: type=1804 audit(1762619852.582:9): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.210" name="/newroot/46/file0/bus" dev="loop3" ino=73 res=1 errno=0
[  155.633351][ T5840] Bluetooth: hci4: command 0x0405 tx timeout
[  155.678834][ T6684] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  155.689735][ T6684] XFS (loop3): Unmount and run xfs_repair
[  155.695551][ T6684] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  155.703000][ T6684] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  155.713438][ T6684] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  155.722416][ T6684] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  155.731870][ T6684] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  155.740750][ T6684] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  155.749603][ T6684] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  155.760323][ T6684] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  155.769234][ T6684] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  155.778326][ T6684] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  155.790370][ T6684] XFS (loop3): page discard on page ffffea0001b3c880, inode 0x49, pos 0.
[  156.289694][ T6660] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  156.302515][ T6660] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  156.420935][ T6660] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  156.520914][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  156.566830][ T5826] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  156.991490][ T6660] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  157.021426][ T6660] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  157.028601][ T6660] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  157.039313][ T5826] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  157.051013][ T6660] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  157.061682][ T6660] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  157.082239][ T6660] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  157.098416][ T6707] block nbd2: shutting down sockets
[  157.262418][ T6660] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  157.393842][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  157.773587][ T5943] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  158.403305][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  158.515570][ T5943] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.622243][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  158.695261][ T5943] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  158.830512][ T5943] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  158.844724][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  159.007945][ T5943] usb 3-1: SerialNumber: syz
[  159.083835][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout
[  159.092663][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  159.361257][ T6739] dlm: no local IP address has been set
[  159.367233][ T6739] dlm: cannot start dlm midcomms -107
[  159.394175][ T6739] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  159.470583][   T50] Bluetooth: hci5: Frame reassembly failed (-84)
[  159.477644][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout
[  159.948300][ T6734] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  160.267936][ T5943] usb 3-1: 0:2 : does not exist
[  160.351669][ T5943] usb 3-1: USB disconnect, device number 6
[  160.605943][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout
[  160.782373][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout
[  160.834776][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.918565][ T6741] mmap: syz.0.217 (6741) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  161.059147][ T6734] binder: 6714:6734 ioctl c0306201 200000000540 returned -22
[  161.153474][ T5840] Bluetooth: hci4: command 0x0405 tx timeout
[  161.159592][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout
[  161.473559][   T52] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  161.553333][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  161.918667][ T6757] loop2: detected capacity change from 0 to 65536
[  161.968333][ T6757] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  162.060970][ T6757] XFS (loop2): Ending clean mount
[  162.081129][   T30] audit: type=1804 audit(1762619859.112:10): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.223" name="/newroot/37/file0/bus" dev="loop2" ino=73 res=1 errno=0
[  162.104583][ T6757] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  162.116191][ T6757] XFS (loop2): Unmount and run xfs_repair
[  162.121964][ T6757] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  162.129831][ T6757] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  162.138722][ T6757] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  162.147792][ T6757] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  162.156680][ T6757] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  162.165720][ T6757] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  162.174610][ T6757] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  162.183517][ T6757] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  162.192382][ T6757] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  162.201268][ T6757] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  162.212942][ T6757] XFS (loop2): page discard on page ffffea0001b11000, inode 0x49, pos 0.
[  163.375440][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  163.384677][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  163.391078][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  163.683906][ T5825] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  163.762931][ T5825] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  163.881705][ T6778] Invalid source name
[  163.887426][ T6778] UBIFS error (pid: 6778): cannot open "./file0", error -22
[  165.620599][ T6787] wireguard1: entered promiscuous mode
[  165.633496][ T6787] wireguard1: entered allmulticast mode
[  166.423333][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  166.620997][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.102017][ T5892] usb 5-1: config 0 has no interfaces?
[  167.121628][ T5892] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  167.226992][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.290342][ T5892] usb 5-1: config 0 descriptor??
[  167.604936][ T5943] usb 5-1: USB disconnect, device number 5
[  168.438452][ T6819] netlink: 'syz.2.227': attribute type 11 has an invalid length.
[  168.473420][ T6819] netlink: 56 bytes leftover after parsing attributes in process `syz.2.227'.
[  168.482473][ T6819] netlink: 'syz.2.227': attribute type 11 has an invalid length.
[  168.503270][ T6819] netlink: 56 bytes leftover after parsing attributes in process `syz.2.227'.
[  169.028882][ T6832] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  169.035757][ T6832] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  169.221341][ T6832] vhci_hcd vhci_hcd.0: Device attached
[  170.327454][ T5892] usb 34-1: SetAddress Request (2) to port 0
[  170.333845][ T5943] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  170.364001][ T5892] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  170.765445][ T6834] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1
[  171.014093][ T5985] vhci_hcd vhci_hcd.0: stop threads
[  171.039745][ T5985] vhci_hcd vhci_hcd.0: release socket
[  171.055044][ T5985] vhci_hcd vhci_hcd.0: disconnect device
[  171.223366][ T5943] usb 1-1: unable to get BOS descriptor or descriptor too short
[  171.282136][ T5943] usb 1-1: unable to read config index 0 descriptor/start: -71
[  171.301745][ T5943] usb 1-1: can't read configurations, error -71
[  171.577194][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  171.893928][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  172.096654][   T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  172.114060][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.132411][   T10] usb 5-1: Product: syz
[  172.140995][   T10] usb 5-1: Manufacturer: syz
[  172.151335][   T10] usb 5-1: SerialNumber: syz
[  172.167944][   T10] usb 5-1: config 0 descriptor??
[  172.263375][   T24] usb 2-1: Using ep0 maxpacket: 32
[  172.281124][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  172.323889][   T24] usb 2-1: config 0 has no interface number 0
[  172.355652][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  172.382449][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.411359][   T24] usb 2-1: Product: syz
[  172.425794][   T24] usb 2-1: Manufacturer: syz
[  172.430487][   T24] usb 2-1: SerialNumber: syz
[  172.476196][   T24] usb 2-1: config 0 descriptor??
[  172.675679][   T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  172.718910][   T10] usb 5-1: Firmware: major: 9, minor: 0, hardware type: ATUSB (0)
[  172.776013][   T24] usb 2-1: selecting invalid altsetting 1
[  172.782325][   T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  172.853633][   T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  172.952508][   T10] usb 5-1: failed to fetch extended address, random address set
[  173.020939][   T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  173.073650][   T24] usb 2-1: media controller created
[  173.091490][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  173.180845][   T10] usb 5-1: USB disconnect, device number 6
[  173.253670][   T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  173.260867][   T24] zl10353_read_register: readreg error (reg=127, ret==-71)
[  173.278852][   T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  173.341538][   T24] usb 2-1: USB disconnect, device number 5
[  173.537606][ T6907] xt_cgroup: invalid path, errno=-2
[  173.552597][ T6907] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[  173.799790][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[  174.243285][ T6903] netlink: 'syz.0.259': attribute type 30 has an invalid length.
[  174.284957][ T6110] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.330628][ T6110] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.347064][   T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.471175][   T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.373917][ T6922] fuse: Unknown parameter '0x0000000000000004'
[  175.397068][ T5892] usb 34-1: device descriptor read/8, error -110
[  175.834993][ T5892] usb usb34-port1: attempt power cycle
[  175.858409][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'.
[  175.867408][ T6929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.266'.
[  175.877278][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'.
[  175.886258][ T6929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.266'.
[  176.473386][ T6929] netlink: 104 bytes leftover after parsing attributes in process `syz.4.266'.
[  176.967255][ T5892] usb usb34-port1: unable to enumerate USB device
[  177.623365][ T5892] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  177.810903][ T6968] fuse: Unknown parameter 'fd0x0000000000000004'
[  177.855070][ T5892] usb 5-1: Using ep0 maxpacket: 32
[  177.889151][ T5892] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  177.897853][ T5892] usb 5-1: config 0 has no interface number 0
[  177.928417][ T5892] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  177.949666][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.976822][ T5892] usb 5-1: Product: syz
[  178.005797][ T5892] usb 5-1: Manufacturer: syz
[  178.037826][ T5892] usb 5-1: SerialNumber: syz
[  178.081231][ T5892] usb 5-1: config 0 descriptor??
[  178.108781][ T5892] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  178.140003][ T5892] usb 5-1: selecting invalid altsetting 1
[  178.151460][ T5892] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  178.287792][ T5892] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  178.299216][ T5892] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  178.308019][ T5892] usb 5-1: media controller created
[  178.338858][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.115479][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  179.204696][ T5892] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  179.211670][ T5892] zl10353_read_register: readreg error (reg=127, ret==-71)
[  179.252437][ T5892] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  179.479478][ T5892] usb 5-1: USB disconnect, device number 7
[  181.206279][ T5840] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  181.793565][   T30] audit: type=1326 audit(1762619878.822:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  181.984166][   T30] audit: type=1326 audit(1762619878.822:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  182.381483][   T30] audit: type=1326 audit(1762619878.862:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  182.550043][   T30] audit: type=1326 audit(1762619878.862:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  182.580533][   T30] audit: type=1326 audit(1762619878.862:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  183.155401][   T30] audit: type=1326 audit(1762619878.862:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64b0b8df10 code=0x7ffc0000
[  183.177643][   T30] audit: type=1326 audit(1762619878.862:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  183.244583][   T30] audit: type=1326 audit(1762619878.862:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  183.404064][   T30] audit: type=1326 audit(1762619878.862:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  183.504517][ T5892] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  183.949068][   T30] audit: type=1326 audit(1762619878.862:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b0b8f6c9 code=0x7ffc0000
[  183.975167][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  184.020736][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.031111][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  184.050411][ T5892] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  184.093566][ T5892] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[  184.125696][ T5892] usb 3-1: Product: syz
[  184.137803][ T5892] usb 3-1: Manufacturer: syz
[  184.153047][ T5892] usb 3-1: SerialNumber: syz
[  184.172142][ T5892] usb 3-1: config 0 descriptor??
[  184.513308][ T5892] snd-usb-6fire 3-1:0.0: unable to receive device firmware state.
[  184.690249][ T5892] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -71
[  184.736822][ T5892] usb 3-1: USB disconnect, device number 7
[  185.682446][ T7050] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  186.841698][ T5840] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  187.609884][ T7075] binder: 7073:7075 ioctl 4018620d 0 returned -22
[  190.839222][ T7110] netlink: 'syz.2.319': attribute type 6 has an invalid length.
[  190.847461][ T7110] netlink: 'syz.2.319': attribute type 7 has an invalid length.
[  190.855551][ T7110] netlink: 'syz.2.319': attribute type 8 has an invalid length.
[  190.863897][ T7110] netlink: 'syz.2.319': attribute type 4 has an invalid length.
[  190.871662][ T7110] netlink: 'syz.2.319': attribute type 9 has an invalid length.
[  193.022896][ T5840] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  194.292736][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.315330][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.600200][ T7141] fuse: Unknown parameter 'user_i00000000000000000000'
[  198.024633][ T7171] binder: binder_mmap: 7169 200000ffc000-200001000000 bad vm_flags failed -1
[  198.070024][ T7171] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  198.133352][ T5840] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  199.691657][ T7188] evm: overlay not supported
[  199.705935][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  200.594944][   T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  200.607168][   T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  200.617448][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  200.820652][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.871279][ T7185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  200.903119][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  201.712075][ T7202] loop1: detected capacity change from 0 to 65536
[  201.831738][ T7202] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  201.945739][ T7202] XFS (loop1): Ending clean mount
[  201.962151][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  201.962168][   T30] audit: type=1804 audit(1762619898.992:25): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.348" name="/newroot/66/file0/bus" dev="loop1" ino=73 res=1 errno=0
[  202.005422][ T7202] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  202.016298][ T7202] XFS (loop1): Unmount and run xfs_repair
[  202.022091][ T7202] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  202.029783][ T7202] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  202.040086][ T7202] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  202.049085][ T7202] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  202.058023][ T7202] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  202.066915][ T7202] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  202.075792][ T7202] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  202.084690][ T7202] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  202.093593][ T7202] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  202.102461][ T7202] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  202.113480][ T7202] XFS (loop1): page discard on page ffffea000135ce80, inode 0x49, pos 0.
[  202.179249][ T5820] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  202.283766][ T5820] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  208.152706][ T7247] fuse: Unknown parameter '0x000000000000000a0x000000000000000000000000000000000000'
[  208.423527][   T43] usb 1-1: USB disconnect, device number 6
[  208.653164][ T7252] netlink: 'syz.0.360': attribute type 12 has an invalid length.
[  210.072114][ T5840] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  210.499352][ T7258] netlink: 40 bytes leftover after parsing attributes in process `syz.4.363'.
[  211.333166][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  211.811846][ T7277] loop0: detected capacity change from 0 to 65536
[  211.931343][ T7277] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  211.949178][ T7274] block nbd3: shutting down sockets
[  211.983096][ T7277] XFS (loop0): Ending clean mount
[  212.202726][   T30] audit: type=1804 audit(1762619909.202:26): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.367" name="/newroot/70/file0/bus" dev="loop0" ino=73 res=1 errno=0
[  212.793075][ T5824] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  213.672249][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'.
[  213.683410][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  213.882437][ T5892] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  213.895954][ T5892] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  213.906189][ T5892] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  213.915594][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.936478][ T7301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  214.053926][ T5892] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  215.817923][ T5892] usb 4-1: USB disconnect, device number 5
[  216.037807][ T7332] dlm: no local IP address has been set
[  216.058470][ T7332] dlm: cannot start dlm midcomms -107
[  216.113332][ T7334] macvtap1: entered promiscuous mode
[  216.133463][ T7334] macvtap1: entered allmulticast mode
[  216.140221][ T7334] dummy0: entered promiscuous mode
[  216.146504][ T7334] dummy0: entered allmulticast mode
[  216.168574][ T7334] team0: Device macvtap1 failed to register rx_handler
[  216.236772][ T7334] dummy0: left allmulticast mode
[  216.378750][ T7334] dummy0: left promiscuous mode
[  217.680645][ T5914] libceph: connect (1)[c::]:6789 error -101
[  217.852405][ T5914] libceph: mon0 (1)[c::]:6789 connect error
[  218.025852][ T7351] ceph: No mds server is up or the cluster is laggy
[  218.310311][ T5943] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  218.341495][ T5914] libceph: connect (1)[c::]:6789 error -101
[  218.353621][ T5914] libceph: mon0 (1)[c::]:6789 connect error
[  218.594527][ T5943] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  218.602818][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  218.659118][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  218.697759][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  218.731316][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  218.773327][ T5943] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  218.824133][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.851270][ T5943] usb 4-1: config 0 descriptor??
[  218.858366][ T7358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  220.036514][ T5943] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd
[  220.079886][ T5943] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  220.389298][ T5943] usb 4-1: USB disconnect, device number 6
[  221.311848][ T7386] fido_id[7386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  223.995526][ T7421] ------------[ cut here ]------------
[  224.001807][ T7421] WARNING: arch/x86/kvm/x86.c:13965 at kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0, CPU#1: syz.2.408/7421
[  224.013957][ T7421] Modules linked in:
[  224.018865][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(full) 
[  224.028256][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  224.038761][ T7421] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  224.046718][ T7421] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00
[  224.066958][ T7421] RSP: 0018:ffffc90019fff460 EFLAGS: 00010283
[  224.073027][ T7421] RAX: ffffffff81479ee8 RBX: ffff8880227ba940 RCX: 0000000000080000
[  224.081591][ T7421] RDX: ffffc9000bb29000 RSI: 0000000000001d03 RDI: 0000000000001d04
[  224.089631][ T7421] RBP: ffffc90019fff4e8 R08: ffff8880227ba97f R09: 1ffff110044f752f
[  224.097672][ T7421] R10: dffffc0000000000 R11: ffffed10044f7530 R12: 1ffff920033ffe8c
[  224.105782][ T7421] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[  224.114048][ T7421] FS:  00007f3b85e7c6c0(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000
[  224.122997][ T7421] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  224.130143][ T7421] CR2: 00005555751b55c8 CR3: 0000000027b32000 CR4: 00000000003526f0
[  224.138204][ T7421] Call Trace:
[  224.141514][ T7421]  <TASK>
[  224.144523][ T7421]  ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10
[  224.151931][ T7421]  ? __pfx_handle_ept_violation+0x10/0x10
[  224.158273][ T7421]  kvm_check_async_pf_completion+0x102/0x3c0
[  224.164892][ T7421]  ? kvm_service_local_tlb_flush_requests+0xed/0x130
[  224.171596][ T7421]  vcpu_run+0x26be/0x7760
[  224.175997][ T7421]  ? vcpu_run+0x364e/0x7760
[  224.180544][ T7421]  ? __pfx_vcpu_run+0x10/0x10
[  224.185271][ T7421]  ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0
[  224.191010][ T7421]  ? rcu_is_watching+0x15/0xb0
[  224.195958][ T7421]  kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0
[  224.201592][ T7421]  ? __mutex_trylock_common+0x153/0x260
[  224.207664][ T7421]  ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0
[  224.213493][ T7421]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  224.219498][ T7421]  ? rcu_is_watching+0x15/0xb0
[  224.224391][ T7421]  ? trace_contention_end+0x39/0x120
[  224.229815][ T7421]  ? look_up_lock_class+0x74/0x170
[  224.235023][ T7421]  ? register_lock_class+0x51/0x320
[  224.240254][ T7421]  ? __lock_acquire+0xab9/0xd20
[  224.245219][ T7421]  kvm_vcpu_ioctl+0x99a/0xed0
[  224.249919][ T7421]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  224.255189][ T7421]  ? __fget_files+0x2a/0x420
[  224.260389][ T7421]  ? __fget_files+0x3a0/0x420
[  224.265533][ T7421]  ? __fget_files+0x2a/0x420
[  224.270138][ T7421]  ? bpf_lsm_file_ioctl+0x9/0x20
[  224.275214][ T7421]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  224.280420][ T7421]  __se_sys_ioctl+0xfc/0x170
[  224.285214][ T7421]  do_syscall_64+0xfa/0xfa0
[  224.289728][ T7421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.295857][ T7421]  ? clear_bhb_loop+0x60/0xb0
[  224.300562][ T7421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.306537][ T7421] RIP: 0033:0x7f3b84f8f6c9
[  224.310994][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.330745][ T7421] RSP: 002b:00007f3b85e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  224.339338][ T7421] RAX: ffffffffffffffda RBX: 00007f3b851e5fa0 RCX: 00007f3b84f8f6c9
[  224.347388][ T7421] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  224.355718][ T7421] RBP: 00007f3b85011f91 R08: 0000000000000000 R09: 0000000000000000
[  224.364634][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.372637][ T7421] R13: 00007f3b851e6038 R14: 00007f3b851e5fa0 R15: 00007ffc2acce2b8
[  224.381362][ T7421]  </TASK>
[  224.384475][ T7421] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  224.391762][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(full) 
[  224.400967][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  224.411039][ T7421] Call Trace:
[  224.414422][ T7421]  <TASK>
[  224.417367][ T7421]  dump_stack_lvl+0x99/0x250
[  224.421989][ T7421]  ? __asan_memcpy+0x40/0x70
[  224.426614][ T7421]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.431830][ T7421]  ? __pfx__printk+0x10/0x10
[  224.436446][ T7421]  vpanic+0x237/0x6d0
[  224.440439][ T7421]  ? __pfx_vpanic+0x10/0x10
[  224.444943][ T7421]  ? is_bpf_text_address+0x292/0x2b0
[  224.450234][ T7421]  ? is_bpf_text_address+0x26/0x2b0
[  224.455453][ T7421]  panic+0xb9/0xc0
[  224.459182][ T7421]  ? __pfx_panic+0x10/0x10
[  224.463637][ T7421]  __warn+0x334/0x4c0
[  224.467646][ T7421]  ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  224.474785][ T7421]  ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  224.481828][ T7421]  report_bug+0x2be/0x4f0
[  224.486172][ T7421]  ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  224.493225][ T7421]  ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  224.500353][ T7421]  ? kvm_arch_can_dequeue_async_page_present+0x1ab/0x2f0
[  224.507407][ T7421]  handle_bug+0x84/0x160
[  224.511694][ T7421]  exc_invalid_op+0x1a/0x50
[  224.516220][ T7421]  asm_exc_invalid_op+0x1a/0x20
[  224.521086][ T7421] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0
[  224.528750][ T7421] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00
[  224.548460][ T7421] RSP: 0018:ffffc90019fff460 EFLAGS: 00010283
[  224.554533][ T7421] RAX: ffffffff81479ee8 RBX: ffff8880227ba940 RCX: 0000000000080000
[  224.562498][ T7421] RDX: ffffc9000bb29000 RSI: 0000000000001d03 RDI: 0000000000001d04
[  224.570469][ T7421] RBP: ffffc90019fff4e8 R08: ffff8880227ba97f R09: 1ffff110044f752f
[  224.578440][ T7421] R10: dffffc0000000000 R11: ffffed10044f7530 R12: 1ffff920033ffe8c
[  224.586411][ T7421] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[  224.594385][ T7421]  ? kvm_arch_can_dequeue_async_page_present+0x1a8/0x2f0
[  224.601410][ T7421]  ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10
[  224.608769][ T7421]  ? __pfx_handle_ept_violation+0x10/0x10
[  224.614518][ T7421]  kvm_check_async_pf_completion+0x102/0x3c0
[  224.620493][ T7421]  ? kvm_service_local_tlb_flush_requests+0xed/0x130
[  224.627170][ T7421]  vcpu_run+0x26be/0x7760
[  224.631497][ T7421]  ? vcpu_run+0x364e/0x7760
[  224.636032][ T7421]  ? __pfx_vcpu_run+0x10/0x10
[  224.640787][ T7421]  ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0
[  224.646495][ T7421]  ? rcu_is_watching+0x15/0xb0
[  224.651257][ T7421]  kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0
[  224.656990][ T7421]  ? __mutex_trylock_common+0x153/0x260
[  224.662551][ T7421]  ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0
[  224.668272][ T7421]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  224.674254][ T7421]  ? rcu_is_watching+0x15/0xb0
[  224.679033][ T7421]  ? trace_contention_end+0x39/0x120
[  224.684318][ T7421]  ? look_up_lock_class+0x74/0x170
[  224.689430][ T7421]  ? register_lock_class+0x51/0x320
[  224.694641][ T7421]  ? __lock_acquire+0xab9/0xd20
[  224.699509][ T7421]  kvm_vcpu_ioctl+0x99a/0xed0
[  224.704187][ T7421]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  224.709396][ T7421]  ? __fget_files+0x2a/0x420
[  224.713983][ T7421]  ? __fget_files+0x3a0/0x420
[  224.719556][ T7421]  ? __fget_files+0x2a/0x420
[  224.724147][ T7421]  ? bpf_lsm_file_ioctl+0x9/0x20
[  224.729076][ T7421]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  224.734356][ T7421]  __se_sys_ioctl+0xfc/0x170
[  224.738934][ T7421]  do_syscall_64+0xfa/0xfa0
[  224.743427][ T7421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.749489][ T7421]  ? clear_bhb_loop+0x60/0xb0
[  224.754153][ T7421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.760031][ T7421] RIP: 0033:0x7f3b84f8f6c9
[  224.764432][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.784025][ T7421] RSP: 002b:00007f3b85e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  224.792451][ T7421] RAX: ffffffffffffffda RBX: 00007f3b851e5fa0 RCX: 00007f3b84f8f6c9
[  224.800426][ T7421] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  224.808395][ T7421] RBP: 00007f3b85011f91 R08: 0000000000000000 R09: 0000000000000000
[  224.816353][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.824330][ T7421] R13: 00007f3b851e6038 R14: 00007f3b851e5fa0 R15: 00007ffc2acce2b8
[  224.832305][ T7421]  </TASK>
[  224.835636][ T7421] Kernel Offset: disabled
[  224.839944][ T7421] Rebooting in 86400 seconds..