last executing test programs:

1.639220473s ago: executing program 0 (id=28176):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x2, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101, 0x4)
openat(r2, &(0x7f0000000100)='./file0\x00', 0x40, 0x103)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0)

1.567469372s ago: executing program 2 (id=28178):
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x7ffc, 0x259}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000005200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x627, 0xc104effa, 0x41, 0x0, 0x0) (async)
io_uring_enter(r0, 0x206f, 0x19e4, 0x20, &(0x7f0000000040)={[0x8]}, 0x8)

1.490218276s ago: executing program 0 (id=28179):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x20010010, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x2, @remote, 0xa}], 0xa0)

1.236237964s ago: executing program 1 (id=28180):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r1 = syz_io_uring_setup(0x1ca9, &(0x7f0000000380)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1})
r4 = syz_io_uring_setup(0x9a0, &(0x7f0000000040)={0x0, 0x4f58, 0x20, 0x0, 0x2c3, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000180)={0x4, r0, 0x24, {0x9, 0x2}, 0x2}, 0x1)
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)

1.235779631s ago: executing program 1 (id=28181):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x440, 0x1, 0x40000333}, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r2, 0x100000000)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x38, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x3, 0x6}, 0x10)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
close(0x3)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r6, 0x0, &(0x7f0000000240)="e5cec570fa4689b97deccc270bd75cda2957a80d24", 0x15})
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = syz_io_uring_setup(0x97, &(0x7f00000002c0)={0x0, 0x89b8, 0x2000, 0xfffffffe, 0x207, 0x0, r3}, &(0x7f0000000040)=<r10=>0x0, &(0x7f00000000c0)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r12 = open(&(0x7f0000000300)='./file2\x00', 0x101042, 0xa3)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r12, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x6}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000003c0)={0x7, 0x0, &(0x7f0000000380)=[r6, r6, r6, r2, 0xffffffffffffffff, r0, r8, r9]}, 0x8)
syz_io_uring_submit(r10, r11, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1c})
io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110)
mprotect(&(0x7f000024e000/0x1000)=nil, 0x1000, 0x2000001)
close(0x3)

1.232594448s ago: executing program 0 (id=28182):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r0 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x2, 0xc000003, &(0x7f0000001300)=[{&(0x7f0000000280)=""/4096, 0x5b0}, {0x0}, {&(0x7f0000001340)=""/73, 0x49}, {&(0x7f0000001280)=""/101, 0x65}], 0x4, 0x1d, 0x0, {0x0, r3}})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.162413737s ago: executing program 2 (id=28183):
r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0xf79a, 0x0, 0x2000004, 0x3ce}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$kcm(0xa, 0x2, 0x73)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1})
io_uring_enter(r0, 0x3516, 0xf864, 0x69, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket(0x9, 0xa, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x9f21, r4, 0x1f, {0x2, 0x79b}, 0x6}, 0x1)
r6 = io_uring_setup(0x1de3, &(0x7f0000000440))
io_uring_register$IORING_REGISTER_FILES2(r6, 0x8, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x19}, @local}, 0xc)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000200)=0xffffffff, 0x4)
setsockopt$inet_buf(r5, 0x0, 0x2a, &(0x7f0000000200)="ee7d12c37457e0ac0ea5cfa588d980907671b268b566fb2b642bb312a23d9f29f66aca3048b81f7d802efb61c45966c4171a074a307264ecab90c5fb8db5c2bb0275019f854f6714dfcc63a2089c80d1fd9430cc2072d61dd50c0c2d6faefd712ce55ea290557ed0e73aad66e44df66b86160a09d3e4b125b472b48f98f12c4037ba69591c160e11ab59174fe06783931dfbf4b6f610b80ba3e7a178cc0b40bc6d4db5edc802a8ac9ddf75d760e1e0732a031c3d13b9ab09ed21d409a589d90e765edc64871da821f0c4a57ae07290ebde3b194041477e8a15a3db2a08d40f7f7f0f0a9457804d4bea52319da1e269968bc1b7bfd62933e13f", 0xf9)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x80)
r9 = syz_io_uring_setup(0x5169, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r8}, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
socket$xdp(0x2c, 0x3, 0x0)
r12 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r12, 0x11, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
io_uring_enter(r9, 0x7368, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000300)=@req={0x7, 0xf00, 0x5, 0xfffffffe}, 0x10)
r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r13, 0x2000)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16)
socket$vsock_stream(0x28, 0x1, 0x0)

1.008210279s ago: executing program 1 (id=28184):
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
r0 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134, 0x0, r0}, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r0, 0x8184c, 0x10000000, 0x9, 0x0, 0x0)

917.542244ms ago: executing program 1 (id=28185):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2ce}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socket$key(0xf, 0x3, 0x2)
r3 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0xab567000)
r11 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000000480), 0x4)
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

917.12882ms ago: executing program 2 (id=28186):
r0 = syz_io_uring_setup(0x3db5, &(0x7f0000000480)={0x0, 0xb575, 0x100, 0x22, 0x31a}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)={0x6c040, 0xb2, 0x1}, 0x0, 0x18, 0x0, 0x23456})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x12)
socket$inet(0x2, 0x3, 0x5)
io_uring_enter(r0, 0x47bd, 0xffffff7f, 0x22, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x88)
madvise(&(0x7f0000a1d000/0x2000)=nil, 0x2000, 0x9)

780.265608ms ago: executing program 2 (id=28187):
socket$unix(0x1, 0x2, 0x0)
r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x4})
io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0)

779.665314ms ago: executing program 0 (id=28188):
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x7a6f938d2aadffed, 0x300)
socket$kcm(0x10, 0x2, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20)
r1 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0xa206, 0x400, 0x43, 0x26}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f00000000c0)=0x5, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000014c0)={&(0x7f0000002000)={[{&(0x7f0000000200)="65fb5b7319e7972b5f591fab2a732971ad0ec7462354edfcfd2b078e41f0f923a2d05e4e77b0fa8870d84c7a20b63bc3ec2b04545c65b377f1750a519f5d0728b496b5a24fe54e852b436da5edad35eef4e57205ae0427533fe1d5c990941ed00ddc25b009c9887060ef6f199ae75a73839cc95b9058c71f1a31763e510858d78dc3543176df619ed4facb0e2b9256f05858a66104b6534d776802096bb032d38664531be5b36436309f0d", 0xab, 0x3}, {&(0x7f0000000380)="3d70eed0513c52b8e279c7710478e91895f5505e842fa15949f33ad9fd5e3136e0ca99f3c76e53c9a41a452148296d4936ba2d00ea78a75269906177dbc7f3da64d2ae273ad4f5355a948d6285b5a04d073b5650f6d104a0e4bc315274990eea910051aaebc9f56c0f27a6e02f63a8d23af0f5cecacd029f5dca476a6e2b134f11cfdf6f472dfb50ea8af6a1cc5916052dfff19dd9d88f66117bd471adc78e420b0475e9b7ec7fc62fae8ad27ef5006c054126bb67972a5010f96bac968bdbd584bcc81b4efcdc09e8f409841124", 0xce}, {&(0x7f00000004c0)="bc317ed869816b8e16a8a1028a89b329b0ca10f6940068773893e641a595e1491f26fecbeb455ad0e903aec2cc8e6b325d0da523b0e763dc98ec7a65422f077341e91d94b157b90cbf579536fa200bb9976b1df83ca98fc50fabc6f3c006544abd320b68cc5cd2e10ca7edab37898dc9e2bfc6adc31879e2a8dbf36343b2bada95db1abc062d25c9ba3a6e08098fe0896ef86435b139633124686042d58960d94937871579f3204d12cf7b81332c9c571d299b41a196a045cc6fb2d768a702948df767e4f420510a9920a5d5c35661ec3bcc0dd7488a955eb9a2652320132b15f0743e76d0f6d3e2fd693148b5fd57904ef2e057b924478564455c08423b0537a0f514f85ee176d895cfceed101bbceb7c70c8347bb967ba1441eb0fa77737e818a5af83fc430590cb7875bc0b362aff192d02247bf50ee24149f21ddc6675c6a6e1aa6e7f41402afcb21df1a39337604bcfad71c528361bab9452604425b261aaefc4c35a415fe2138614c9fc2cb7871e44965f84b21036183d47fa9219d703b70849d851b6a2472018c9c3b47f0472bc0fa38bc07f163d5eb08acc8c39313ad362333d33106a9a11ef01540a43dd297d647da95da2606983cdfc7b6cacd4eec0ad8a121d688a7aaa9f1dd9113c9d37ef2185ca69aac19e12d476f5cc945b02d0f7fd604be2997fefbaf3100fea099724181a1ea5339ea61ded5fff1282fff7ed193a4bc5e43796973325cc4f703655222aecb5c4b7f77c0695c16bc7e9aa23fdf74539e24247a9c518b7d5c693f6fe18c62f8202f14472950c9e3023a2607a0f1299aeba07d1e466fd110d6cd9437eaf9aea2f7fa3601e83df71995087e7f491caa716f330b64cc34d96dceaf74e632bbbe658c4c3b99776fac8ba5edd75d7ae1d0f82a4de82f93ac6001489fe4b35115c2cf9c0b4923a339a7e0cf3bcf3465cdaa355e27a8cd695f4e684ec98f2c9a6f15a6fe7c3d67a46d7e2c25a5f8e9b5b89cd4a052f846d1170783305f975b7ae865b4e2a964b32559d02608bcc1632130add8bf78f747bd980dd8085ad1ecafa352daf99af13bee84ffdc99a6fc353cfac2d9411c680b175986f922caeda1c20895bdce1662a0405490a8d745205c44d890ee1d616c2909cab6b84c228d5e5ef0bce8dc377a0014b2b3bd8e8f1a9e773573dff78d5d441dcc755542e7b32af6df06a52d2028d3529c30554487111e374c3924810f67cf5ed51cd81b40c73636459fe22cf5aeaca8eaf5c3e5322df6608db3fe29cca53840fecb6d4f088dc8e04b0418b78b3c1c3422ce4dc7afec4f116bccaac3b00df8fec518b21a02b1c3e15094c687d1995386ae7552aaa9ffa9db86ab5b4b147a6ea015aa1dfee11e7acdff2e952fc16669cab596b0b4cdcfd2cbff85fad04ccdd6b4b1f61b6df903ed341b7969e0b0dcdd22b644d6ab9b6e8f12c2d7360c0044924ade9a4070c779841b74d568b367230037e7214db3f019d9acaab9b78456ce0d4a323231cca118af4e5d253788b97b5d46513a138181d2aa5dded6c1a6f5df690bc3f3c4ac2f289ceff8e75e333177bf12f3bc667d72d7220c8a83b2f370a9824684f9055c47fc7330d617957000872828baebd946a5f2f705baa93e0651703b0e2468423d24a21f82d375e41d3e03de991ae1dd9765102eca19d5ffc92499727c0543a50b6be7d738c01eb4a4f9b1e636e5eeadca98720ae08bd203f993366598501c43f21f90226599fc37a786bdf1ce4ca14ffbc64e895c9ef758d307e0fa062ab6df40a98110f88ecf11f6296061005ca2c5472d3d69bade50c791998e362c611e83a02ac7f8ee2869d5a23967f8ffc90acfe679a13f4cb85975bbbbae04174f7a519d5b4b84c2126f9c50e909f3672a583aee8e1449efec35e4a0700128e55429326e536e825db0a9c05c9821bdee0b908d6b98646597a2d2287a9b3c8f18a9fcef216b14a93a923841d96620f9e6e72dd05a8c94314bd1c424f6ec3990f2df63280bd40441f7c2a37565805184fdc1e1e6d147b31944f6a37d717a82219b0e6034b55a90070dc0bf032fe207ec1ebc5a883c2c7a1f2371f4afc40cc910cb43ce09fe81ceb850707e0f09984fdf409e23f176201600b0298816044cbf0ee089b9e058799f3ed450b7bed41f24152cd4687e7f3ce8a28cb53982d204126f36191eccc808f11eca5f94e8992afd04e4a1b3c93d9fd4a38f8973b4fa1c98180ea9d709b104e47f2e6b4d7937221578b9adf03f2f6d3e1784481d3fd92ecfbeb56d35c633f27b4865694626a58d4d23ef2a2ad4cddcd2714524e6a5c0a12a7c9c884c1154e51c8fea6d0b959fad9b747639f7a0df4b44c153e459bc9897637b2c1918fa81632be29e71094cee62397fe22cf2e4b9de8e6210ce844a6b34f96d58e1868e1609e493123c54d6aee939a5154764eda79c8cac818183b283d9745e6117b1b6d0289faaf53b1774b04b24e1cba72d14bfe188c462f9be845089d35e03a8d05116283fa8d4360da554081b4819d257414568a86948ba5070e36d81a02a607973da57042162ab79de8c93fa495514c6d9554a03d1aaac539e7bdf808564f0e5b5e8cdc23a3d8bc11b3ba80e6664aff9c2dfff9e311e25b42081281c2b93607d40d8a08e3696436a1359498fc01b58228cf3616c2626c620d7b023c37994fdbddaff85d5c0a9befa88df389a2a459758229b0614594833d2c7414da1a2b3f08b950c1ac016e3b370aaa5928aca958454078895bd1bcec465b9ccef9b1ed41b5f51481850dc12ca8ee0d29cf2e768f97ef2168a6f7c35f454cf71eb78424f02269658bc35b74ec9c35d18a4c36b359ee80c337459eb8cb9600e50e9dc17c12edf28e8b4337097066f2404b21ec11fe59fb198d931849f87a37f1fe629b6568a071cabe56fa63a07cd7052eb49905c84f8a590547637a3575b3ddb45a4b59d132eb56b13f2545228ab6d26cbbed11388f26bd5fece7263c5a1c567faa6fef01e90424c7f2e6291c5d4883fa54d38f00beefc7dc1531afbdfd64c277ba8c5e93a14ea95e4802675cbaec9f2ad38b82b58b6eb6ad439554a2d63e4a5775098d41ca119377f7542c485ad09e966b65b50b42fbaf24a22446ef0e359c965514037db4a9809f3de227514fb0b471a137a390ee02d2e2a99a5f0f9605f820d198f6fb50ac3d7331a49d94189f47d0d5fee7c46b305e1ad8d89ab98766be48c1fff745e99697f5f56e86c96064e708a69ce34b41389077716543f1b50da590e1f67b2a673a5bb8d6c53b0e46e5268498b4efdbb67bea92881f137bdca4159d739baa81e3bc8ce300f6b62bacc0b890027706cba27de96e3e8654e00bcfbe70a19b279f3da18941597a2b8616af5dd8332c0d1476fe5aaf4d8772cf236b7f5b14567a9698fb95381f2b5b665ae52e011b4fdeaa0036a2499b63ad2d95a2a9983329db9010e9fb93d1e66d11b48af9cb3ddb548cdef7118c5b0936888b62e21f58259bbde04f86b7070c897d9044c9359356c985a583e09661a04f895fcab3f1a83a867f6d9efb2f3eb4354fb724f981c375f26c7d795c9eb9c527dbc08db321eb013df07dbcf10a1b4614d2c332c0e7f56a573d86611ff3c7b25bcc24fc33e0ba93de994155ba15843291ecdfc23675be5885121989a301af9a24815b3d03dd09bda512451c07adedfc0bb0b0ae2e61d326f59902a6f4d281b8c14c2c91ce56527f8af4bd31082ca647f6bbd24c1adf5cb39a819b572e1c59a373a6be08aebf739894ad8640bcb1aab028eea6299934f51a1ec920f201dc9b9961d019389a894d7521109657e8e26fe18637e3680e648545616ab7ce49e87bf723c72d0b09a43a2cdd3e9103be0473852593d00e5d36f3e72559ada72c9be8b6c986e152bb84c1f1e96bd44ee12899c9fc0976fef5867c2aef12ed244b3ec593570c8e027b6e8b50b7bc7e10f154f2e60e82ab5f231f86a10c80eb2ce0942e6135230760c815fbf8e80be606005dd6ee04aa7dd96dd4185d23cc9b143864afe44127f2d8e3070db553d6bf56fcd4a64d2f3d20a20dd9dcf0811043a336df8688b593166ff6ef60cb6cde309a9cea41078121b1139a75f236cacb2d4da87a92ea39abc878dcfcd6d8dd01bbf60f05e294b1b98be48d467463744b2970d245d0bd2b0492bcc70dcf9f9b0186add501d352c40d91d2c89d005440c38d80c62668c3c19106a2d9b000ade49f0c400fa363a67d39778ae33dd04741543cecb20b8be55449ff506a728d6e7dbe5543e04bc6441d246c0f54d7d49f9ceaa177987d8c46f692ab1f9728af57bb00fce9b71c2533a40b9688cdb94ae0dd96b38f9d4d5d296e99e58e7f7b44225eeccf72e4e7a1b8dec667d1955b6cc57e8d8ec69c62fe2578637530ca160f9edd916b97437618e534f94ceb5aa77dff21d1501bf5b699ce28f0cbd4c4f9da1ae1fecc34ae51259a5a79c5d657eb5ab708f23f508d639c9dd4a61ee5f45408d0cf0c21e7632dac23d7196efeed9a545bebf78a5ef8bfa007150df78fc196031976ba67301ec041dc6ddcb2c11d9a33c4399ea87a7f57ba949ff09f60281a1c8a49fef596ad6c6e5f7e94dd218235639a2e80f73a5d6946d64c3c42254a57d664f5c794f89d5dbcb4d4fb7399845f8cab379eb0571f7ce42815375c0698a24cf5b032428959075e127ddafbba831c6e11c273cf46d1331348fbd216a02c07e5281e6f99729310d283bd3fa842c572626a7c0c94fc0dcc9e6a3ec0192256574d563052dc6fef352cfa2eee626bb64741ffb1cbb5b6d509096ff1c2fbc85ae6f834bc9fe24170e89da850d44feef34b9ae79acd2aadc9ddb35bbe62da8eec53e443c2eef83fad6452a14751808bb90cb22c9d6b20594c1311ee4bc9f15206fb4fa731aa4e87339f0ccf4536b005689e87842ab95e9d0fa448f76f844ca9b17e66a0a369384465c15e3bb650043ad51a50e756764c9e103f57a70a470cb91e580e419bea77074040fdf890d820cf6cbfbb4bb01f37673e6e1ae8b866b73ba653ff28adbe4b8558f3cea935a60925a399f68db93db208b0c1cb20a3847dd46a83ca53b1ceb3dfe935d99182725dfadefc4f267c5b5c4c7e1ff527cdbc8f13b552e1e028d24f7547d411bb8faad06df92af7e941d1c975ec7b7c228dda0df994669efd00aeb46dd3fa3cae7b874ac881a5c6d6ca6f2f7f8fcd110b423662ce6a386df9d46a3f0e956b959221253470ea591862d151b494a2ab89cb04bd824aa2c9ab8fbe080264d064f845e797b54bf984fa707981c6433ecd6d34bf100a74fe43b86882f6ee0def343fa371355aa3940c356e92e2b9c5a8025e33e2d435f88edeeb20f3785eb0cbbd622ec07945fa5372b3f939264970c6e04713068767e2666fd83206184f55287f4a88c46b28d5d5da1839c75639cbdc13876e99d506313fc0243f8caed460751e204ab480a6ff0ace1df9d3a8091148300b26cdc498a852b56145ee1154f9a93ad3c9224055137341fe187ed8296ff12bfc26f2ebb1690f451fa71c835b237c4b8df9fd8895911602786070cff486a0e7423781922876d066cee54564e2c28f6251ce4bea792841cca2ea0569664cdb33d6d3523a488ac737b048b5adc0a3cacea6b8b966283992e3c95c5a73bfd86ddad4ea08e35f1031f1b8b7105bc3362cdb75be090efffebf982b5235ada4b8eaa390fd054bc347f7794ff85d8a22672afba3a6856260ef04400a898b13d1aac4ddabadf8b1cc4cf5a21ae5a487ad7c0fd3af8c49b68cd080edf402eb65b65efa7177b90c", 0x1000, 0x2}, {&(0x7f00000002c0), 0x0, 0x2}]}, 0x4, 0x1}, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

660.318296ms ago: executing program 2 (id=28189):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x70, 0x4)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000400)={0x2b, @private=0xa010101, 0x4e21, 0x1, 'fo\x00', 0x33, 0xa, 0x77}, 0x2c)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cb1, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1)
syz_io_uring_setup(0x6db1, &(0x7f0000000140)={0x0, 0x9290, 0x10, 0x0, 0x1b2}, &(0x7f0000000040), &(0x7f00000001c0))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

659.598431ms ago: executing program 1 (id=28190):
r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x200000, 0x10000}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r3, 0x2000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x0, {0x8001, 0x1}, 0x6}, 0x1)

510.82685ms ago: executing program 1 (id=28191):
syz_io_uring_setup(0x273e, &(0x7f0000000340)={0x0, 0x1aee0, 0x40, 0x2, 0x125}, &(0x7f0000000000), &(0x7f0000000180))
openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
io_uring_setup(0x5217, &(0x7f0000000200)={0x0, 0xb8e9, 0x1000, 0x3, 0x3c9})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r0 = io_uring_setup(0x7e90, &(0x7f0000001300)={0x0, 0xa1f4, 0x1000, 0x0, 0x20000})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000000c0)={0x8, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000007c0)=""/208, 0xd0}, {&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000300)=""/27, 0x1b}], &(0x7f0000000500)=[0xfffffffffffffe00, 0x0, 0x90d]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000380)=""/186, 0xba}], 0x2})
io_uring_enter(0xffffffffffffffff, 0x5aee, 0xbc73, 0x0, 0x0, 0x0)

63.644773ms ago: executing program 2 (id=28192):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x3, 0xc}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcd20, 0x2, 0x3, 0x281}, &(0x7f00000004c0)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0})
io_uring_enter(r5, 0x40f8, 0x217, 0xa5, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r8 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000180)=0x10001, 0x4)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
r10 = syz_io_uring_setup(0x339e, &(0x7f0000000200)={0x0, 0x1, 0x800}, &(0x7f0000002480), &(0x7f00000024c0))
io_uring_register$IORING_REGISTER_BUFFERS2(r10, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, 0x0, 0x33)
r12 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=<r13=>0x0, &(0x7f0000000280)=<r14=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f000019e000/0x2000)=nil, 0x2000, 0x8, 0x100010, r10, 0x8000000)
syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x0, 0x0})
io_uring_enter(r12, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd=r0, 0x1, 0x800, 0x0, 0x10})
io_uring_enter(r1, 0x20061d4, 0xfcc4, 0x64, 0x0, 0x0)

63.353715ms ago: executing program 0 (id=28193):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
ioctl$sock_SIOCGIFINDEX(r0, 0x5101, &(0x7f00000005c0)={'dvmrp1\x00'})

0s ago: executing program 0 (id=28194):
r0 = socket$caif_stream(0x25, 0x1, 0x4)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000080)=0xc, 0x0)
clock_gettime(0xfffffff5, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'})
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket(0xc1acd62b43d46ca9, 0x801, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x34c00, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000140)={{0x32, @loopback, 0x4e22, 0x0, 'wlc\x00', 0x11, 0x4, 0x34}, {@private=0xa010102, 0x4e23, 0x4, 0x79, 0xfffffffe}}, 0x44)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x1)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12)
socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1327000, 0x1000, 0x40000000, 0x4}, 0x20)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
mmap$dsp(&(0x7f00001db000/0x3000)=nil, 0x3000, 0x3000008, 0x100010, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000040)=0x788, 0x0, 0x4)
madvise(&(0x7f0000395000/0x1000)=nil, 0x1000, 0x12)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket(0x26, 0x6, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62914' (ED25519) to the list of known hosts.
syzkaller login: [   57.273757][ T5828] cgroup: Unknown subsys name 'net'
[   57.363163][ T5828] cgroup: Unknown subsys name 'cpuset'
[   57.367547][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.748188][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.696908][ T5869] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.990027][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.994325][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.998168][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.012589][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.016940][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.072885][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.076705][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.081345][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.094893][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.098467][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.126350][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.133056][ T5886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.138024][ T5886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.142562][ T5886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.146686][ T5886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.204857][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.207832][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.501825][ T5883] chnl_net:caif_netlink_parms(): no params data found
[   71.574215][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   71.606779][ T5885] chnl_net:caif_netlink_parms(): no params data found
[   71.751425][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.754923][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.757419][ T5883] bridge_slave_0: entered allmulticast mode
[   71.760409][ T5883] bridge_slave_0: entered promiscuous mode
[   71.781896][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.784585][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.786919][ T5883] bridge_slave_1: entered allmulticast mode
[   71.789954][ T5883] bridge_slave_1: entered promiscuous mode
[   71.839728][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.843925][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.847361][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.850055][ T5885] bridge_slave_0: entered allmulticast mode
[   71.854618][ T5885] bridge_slave_0: entered promiscuous mode
[   71.867563][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.870758][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.873597][ T5879] bridge_slave_0: entered allmulticast mode
[   71.877030][ T5879] bridge_slave_0: entered promiscuous mode
[   71.882686][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.886668][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.889040][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.892540][ T5879] bridge_slave_1: entered allmulticast mode
[   71.896049][ T5879] bridge_slave_1: entered promiscuous mode
[   71.899440][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.901852][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.904096][ T5885] bridge_slave_1: entered allmulticast mode
[   71.906807][ T5885] bridge_slave_1: entered promiscuous mode
[   71.963033][ T5883] team0: Port device team_slave_0 added
[   71.979977][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.985951][ T5883] team0: Port device team_slave_1 added
[   72.000967][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.006514][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.013132][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.033014][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.035896][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.046501][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.081752][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.084341][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.094986][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.112353][ T5885] team0: Port device team_slave_0 added
[   72.125478][ T5879] team0: Port device team_slave_0 added
[   72.129600][ T5879] team0: Port device team_slave_1 added
[   72.144789][ T5885] team0: Port device team_slave_1 added
[   72.179853][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.184594][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.194497][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.215484][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.218508][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.229199][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.244555][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.247052][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.256283][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.266602][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.269109][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.277562][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.287747][ T5883] hsr_slave_0: entered promiscuous mode
[   72.290036][ T5883] hsr_slave_1: entered promiscuous mode
[   72.381383][ T5885] hsr_slave_0: entered promiscuous mode
[   72.384516][ T5885] hsr_slave_1: entered promiscuous mode
[   72.387444][ T5885] debugfs: 'hsr0' already exists in 'hsr'
[   72.389931][ T5885] Cannot create hsr debugfs directory
[   72.401355][ T5879] hsr_slave_0: entered promiscuous mode
[   72.404275][ T5879] hsr_slave_1: entered promiscuous mode
[   72.406676][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   72.408943][ T5879] Cannot create hsr debugfs directory
[   72.713276][ T5883] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.727038][ T5883] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.732472][ T5883] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.738590][ T5883] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.797928][ T5885] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.813728][ T5885] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.835327][ T5885] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.854522][ T5885] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.920739][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.934985][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.947040][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.954440][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.007960][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.036460][ T5883] 8021q: adding VLAN 0 to HW filter on device team0
[   73.041478][ T5886] Bluetooth: hci0: command tx timeout
[   73.057465][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.060692][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.077726][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.080813][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.099897][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.147484][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[   73.174182][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.185526][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.188516][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.202090][ T5886] Bluetooth: hci2: command tx timeout
[   73.204815][ T5880] Bluetooth: hci1: command tx timeout
[   73.212738][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.215792][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.234110][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   73.256943][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.259882][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.280262][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.282931][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.423399][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.489836][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.505052][ T5883] veth0_vlan: entered promiscuous mode
[   73.526133][ T5883] veth1_vlan: entered promiscuous mode
[   73.536603][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.564635][ T5885] veth0_vlan: entered promiscuous mode
[   73.587243][ T5885] veth1_vlan: entered promiscuous mode
[   73.593014][ T5883] veth0_macvtap: entered promiscuous mode
[   73.615354][ T5883] veth1_macvtap: entered promiscuous mode
[   73.652628][ T5879] veth0_vlan: entered promiscuous mode
[   73.659124][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.668633][ T5885] veth0_macvtap: entered promiscuous mode
[   73.679652][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.686526][ T5885] veth1_macvtap: entered promiscuous mode
[   73.692692][ T5879] veth1_vlan: entered promiscuous mode
[   73.703931][ T5891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.716818][ T5891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.723955][ T5891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.735577][ T5891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.746581][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.762237][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.795718][ T5891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.812719][ T5879] veth0_macvtap: entered promiscuous mode
[   73.825625][ T5891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.829231][ T5891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.845682][ T5891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.854583][ T5879] veth1_macvtap: entered promiscuous mode
[   73.891876][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.904666][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.935574][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.943712][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.967844][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.972905][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.976558][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.986347][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.990230][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.003636][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.016815][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.020028][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.066108][ T5883] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.090390][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.099209][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.149617][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.154777][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.238740][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.249359][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.334604][ T5955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.696829][ T5978] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET)
[   74.862787][   T33] audit: type=1800 audit(1756906302.550:2): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.40" name="bus" dev="tmpfs" ino=59 res=0 errno=0
[   74.978725][ T5915] IPVS: starting estimator thread 0...
[   75.109408][ T5989] IPVS: using max 46 ests per chain, 110400 per kthread
[   75.122681][ T5886] Bluetooth: hci0: command tx timeout
[   75.282652][ T5886] Bluetooth: hci2: command tx timeout
[   75.284853][ T5886] Bluetooth: hci1: command tx timeout
[   76.255968][ T6061] dvmrp0: entered allmulticast mode
[   77.201046][ T5880] Bluetooth: hci0: command tx timeout
[   77.370353][ T5880] Bluetooth: hci1: command tx timeout
[   77.373448][ T5880] Bluetooth: hci2: command tx timeout
[   79.280947][ T5886] Bluetooth: hci0: command tx timeout
[   79.386043][ T5929] IPVS: starting estimator thread 0...
[   79.450867][ T5886] Bluetooth: hci2: command tx timeout
[   79.453307][ T5886] Bluetooth: hci1: command tx timeout
[   79.470653][ T6219] IPVS: using max 81 ests per chain, 194400 per kthread
[   85.348496][ T6561] syz.0.313 (6561) used greatest stack depth: 19848 bytes left
[   86.180491][ T6618] dvmrp0: left allmulticast mode
[   86.565630][  T791] cfg80211: failed to load regulatory.db
[   88.529695][ T6759] delete_channel: no stack
[   90.486752][ T5942] IPVS: starting estimator thread 0...
[   90.602594][ T6868] IPVS: using max 43 ests per chain, 103200 per kthread
[   92.287323][ T6983] random: crng reseeded on system resumption
[   93.676138][ T7056] bridge0: entered allmulticast mode
[   93.684777][ T7056] pim6reg: entered allmulticast mode
[   93.693389][ T7056] pim6reg: left allmulticast mode
[   93.696015][ T7056] bridge0: left allmulticast mode
[   95.201952][ T7158] syz_tun: entered allmulticast mode
[   95.205586][ T7157] syz_tun: left allmulticast mode
[   98.179902][ T7379] IPVS: ip_vs_add_dest(): server weight less than zero
[  101.286783][ T7604] dummy0: entered allmulticast mode
[  104.202345][ T7793] syz_tun: entered allmulticast mode
[  104.205542][ T7792] syz_tun: left allmulticast mode
[  104.599013][ T7820] binder: binder_mmap: 7819 200000ffb000-200000ffd000 bad vm_flags failed -1
[  107.678100][ T8010] delete_channel: no stack
[  108.415640][ T8053] dummy0: left allmulticast mode
[  109.060197][ T8092] syz_tun: entered allmulticast mode
[  110.449393][ T8186] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  110.694924][ T8202] random: crng reseeded on system resumption
[  118.437528][ T8759] pimreg: entered allmulticast mode
[  118.443120][ T8759] pimreg: left allmulticast mode
[  121.406873][ T9037] delete_channel: no stack
[  124.735942][ T9294] syz_tun: entered allmulticast mode
[  125.674156][ T9353] IPVS: set_ctl: invalid protocol: 0 172.20.20.31:20000
[  132.440188][ T9702] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0
[  132.491180][ T9708] random: crng reseeded on system resumption
[  132.644168][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.647148][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  135.214798][ T9852] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  142.237809][   T33] audit: type=1800 audit(1756906369.920:3): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2112" name="file1" dev="tmpfs" ino=3636 res=0 errno=0
[  147.788680][T10653] bridge0: entered allmulticast mode
[  148.382416][T10703] misc userio: Invalid payload size
[  150.286100][T10831] pim6reg: entered allmulticast mode
[  154.559496][T11096] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  154.566313][T11096] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  154.574135][T11096] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  154.581882][T11096] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  154.587025][T11096] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  154.594651][T11096] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  154.602375][T11096] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  154.606291][T11096] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  154.614346][T11096] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  155.122801][T11180] syz_tun: left allmulticast mode
[  155.840814][ T5880] Bluetooth: hci0: command 0x0c1a tx timeout
[  156.643795][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout
[  156.644132][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[  157.920354][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[  158.720287][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.722789][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[  160.005987][ T5880] Bluetooth: hci0: command 0x0c1a tx timeout
[  160.800680][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout
[  160.803507][ T5880] Bluetooth: hci1: command 0x0c1a tx timeout
[  161.683603][T11766] veth0: entered promiscuous mode
[  161.686634][T11763] veth0: left promiscuous mode
[  165.532525][T12016] IPVS: stopping backup sync thread 9852 ...
[  177.955184][T12838] delete_channel: no stack
[  180.851048][T13157] pim6reg: left allmulticast mode
[  188.278877][T13771] syz_tun: left allmulticast mode
[  193.846833][T14365] pim6reg: entered allmulticast mode
[  194.093568][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.096630][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  197.516390][T14676] TCP: TCP_TX_DELAY enabled
[  204.143452][T15185] delete_channel: no stack
[  205.078088][T15245] delete_channel: no stack
[  208.156524][T15436] binder_alloc: binder_alloc_mmap_handler: 15434 200000ffd000-200000ffe000 already mapped failed -16
[  212.764656][T15738] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  212.766884][T15738] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  212.769160][T15738] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  214.000249][ T5880] Bluetooth: hci0: command 0x0c1a tx timeout
[  214.800418][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout
[  214.803753][ T5880] Bluetooth: hci1: command 0x0c1a tx timeout
[  216.834834][T16153] syz_tun: entered allmulticast mode
[  216.837784][T16152] syz_tun: left allmulticast mode
[  221.704153][T16449] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  221.707774][T16449] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  221.711234][T16449] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  222.961208][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[  223.764038][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout
[  223.766907][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[  224.763119][   T33] audit: type=1800 audit(1756906452.450:4): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5179" name="file1" dev="tmpfs" ino=8766 res=0 errno=0
[  229.783484][T16978] dvmrp0: entered allmulticast mode
[  234.065943][T17259] veth0: entered promiscuous mode
[  234.186549][T17258] veth0: left promiscuous mode
[  235.100796][T17349] delete_channel: no stack
[  243.369136][T17949] syz_tun: entered allmulticast mode
[  243.451992][T17949] dvmrp1: entered allmulticast mode
[  243.463587][T17948] syz_tun: left allmulticast mode
[  244.745796][T18058] delete_channel: no stack
[  246.653495][T18216] team0: entered promiscuous mode
[  246.661903][T18216] team_slave_0: entered promiscuous mode
[  246.667490][T18216] team_slave_1: entered promiscuous mode
[  246.675190][T18215] team0: left promiscuous mode
[  246.677283][T18215] team_slave_0: left promiscuous mode
[  246.679918][T18215] team_slave_1: left promiscuous mode
[  255.524027][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.526764][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  274.496928][T20499] random: crng reseeded on system resumption
[  287.786868][T21660] delete_channel: no stack
[  292.199860][T22100] pimreg: entered allmulticast mode
[  292.207373][T22100] pimreg: left allmulticast mode
[  297.452187][T22614] dummy0: entered allmulticast mode
[  297.454575][T22613] dummy0: left allmulticast mode
[  308.584612][T23743] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[  316.963465][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.966461][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  345.881260][T26813] random: crng reseeded on system resumption
[  346.537438][T26827] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003
[  348.321461][T26986] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  349.384374][T27082] pim6reg: entered allmulticast mode
[  349.394204][T27082] pim6reg: left allmulticast mode
[  350.840576][    C1] hrtimer: interrupt took 36338 ns
[  353.043805][T27363] random: crng reseeded on system resumption
[  378.403789][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.406582][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  394.702146][T30820] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  394.706188][T30820] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  394.709109][T30820] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  395.930388][ T5880] Bluetooth: hci0: command 0x0c1a tx timeout
[  396.366698][T30995] random: crng reseeded on system resumption
[  396.720548][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout
[  396.723437][ T5880] Bluetooth: hci1: command 0x0c1a tx timeout
[  416.239414][T32476] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  439.844397][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  439.852072][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  440.961740][ T2035] random: crng reseeded on system resumption
[  457.462792][ T3442] IPVS: set_ctl: invalid protocol: 8 172.30.1.3:20000
[  460.448097][ T3721] binder_alloc: binder_alloc_mmap_handler: 3720 200000ffd000-200000ffe000 already mapped failed -16
[  469.157597][ T4335] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  479.225622][ T5268] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  499.137902][   T33] audit: type=1800 audit(1756906726.820:5): pid=7035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16089" name="file1" dev="tmpfs" ino=27148 res=0 errno=0
[  501.283254][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  501.286237][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  520.957904][ T8727] veth0: entered promiscuous mode
[  520.968640][ T8724] veth0: left promiscuous mode
[  540.729871][T10413] binder: binder_mmap: 10412 200000000000-200000b36000 bad vm_flags failed -1
[  547.906783][T11051] IPVS: stopping master sync thread 5268 ...
[  562.396460][T12450] random: crng reseeded on system resumption
[  562.724507][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  562.727623][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  576.756511][T13593] pim6reg: entered allmulticast mode
[  576.763498][T13593] pim6reg: left allmulticast mode
[  584.918533][   T33] audit: type=1800 audit(1756906812.600:6): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19545" name="bus" dev="tmpfs" ino=32834 res=0 errno=0
[  590.715523][T14592] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  593.497279][   T33] audit: type=1800 audit(1756906821.180:7): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19849" name="file1" dev="tmpfs" ino=33526 res=0 errno=0
[  594.596920][T14941] dvmrp0: left allmulticast mode
[  595.344469][T15001] random: crng reseeded on system resumption
[  598.526706][T15270] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  598.529830][T15270] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  598.535333][T15270] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  599.772274][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[  600.560330][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout
[  600.564015][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[  603.477262][T15712] dummy0: entered allmulticast mode
[  603.479524][T15712] dummy0: left allmulticast mode
[  617.740715][T16896] delete_channel: no stack
[  617.797541][T16899] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001
[  619.169767][T16940] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001
[  619.558397][T16949] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  621.240252][ T7502] delete_channel: no stack
[  621.696850][T17017] syz_tun: entered allmulticast mode
[  621.966556][T17028] cgroup: fork rejected by pids controller in /syz1
[  622.054112][T17124] random: crng reseeded on system resumption
[  622.082193][T17016] syz_tun: left allmulticast mode
[  624.114361][T18909] random: crng reseeded on system resumption
[  624.166430][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  624.169147][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  629.948672][T19069] dvmrp0: entered allmulticast mode
[  629.973242][T19070] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  630.995977][T19117] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  631.000946][T19117] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  631.012934][T19117] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  631.164496][T19121] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[  631.273968][T19132] syz.1.20970: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  631.291294][T19132] CPU: 1 UID: 0 PID: 19132 Comm: syz.1.20970 Not tainted syzkaller #0 PREEMPT(full) 
[  631.291314][T19132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  631.291321][T19132] Call Trace:
[  631.291327][T19132]  <TASK>
[  631.291332][T19132]  dump_stack_lvl+0x189/0x250
[  631.291374][T19132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  631.291383][T19132]  ? __pfx__printk+0x10/0x10
[  631.291394][T19132]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  631.291408][T19132]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  631.291422][T19132]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  631.291434][T19132]  warn_alloc+0x214/0x310
[  631.291450][T19132]  ? stack_depot_save_flags+0x40/0x860
[  631.291466][T19132]  ? __pfx_warn_alloc+0x10/0x10
[  631.291485][T19132]  ? kasan_save_track+0x4f/0x80
[  631.291498][T19132]  ? xskq_create+0x56/0x170
[  631.291510][T19132]  ? xsk_init_queue+0xb0/0x110
[  631.291521][T19132]  ? xsk_setsockopt+0x4dc/0x8d0
[  631.291533][T19132]  ? do_sock_setsockopt+0x17c/0x1b0
[  631.291543][T19132]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  631.291554][T19132]  ? do_syscall_64+0xfa/0x3b0
[  631.291565][T19132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.291579][T19132]  __vmalloc_node_range_noprof+0x125/0x12f0
[  631.291600][T19132]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  631.291612][T19132]  ? __kasan_kmalloc+0x93/0xb0
[  631.291623][T19132]  vmalloc_user_noprof+0xad/0xf0
[  631.291632][T19132]  ? xskq_create+0xbf/0x170
[  631.291642][T19132]  xskq_create+0xbf/0x170
[  631.291653][T19132]  xsk_init_queue+0xb0/0x110
[  631.291663][T19132]  xsk_setsockopt+0x4dc/0x8d0
[  631.291673][T19132]  ? __pfx_xsk_setsockopt+0x10/0x10
[  631.291682][T19132]  ? __pfx_aa_sk_perm+0x10/0x10
[  631.291693][T19132]  ? aa_sock_opt_perm+0xff/0x1b0
[  631.291701][T19132]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  631.291709][T19132]  ? __pfx_xsk_setsockopt+0x10/0x10
[  631.291725][T19132]  do_sock_setsockopt+0x17c/0x1b0
[  631.291734][T19132]  __x64_sys_setsockopt+0x13f/0x1b0
[  631.291745][T19132]  do_syscall_64+0xfa/0x3b0
[  631.291752][T19132]  ? lockdep_hardirqs_on+0x9c/0x150
[  631.291764][T19132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.291771][T19132]  ? exc_page_fault+0x9f/0xf0
[  631.291782][T19132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.291790][T19132] RIP: 0033:0x7f024b58ebe9
[  631.291799][T19132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  631.291805][T19132] RSP: 002b:00007f024c3ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  631.291815][T19132] RAX: ffffffffffffffda RBX: 00007f024b7c5fa0 RCX: 00007f024b58ebe9
[  631.291820][T19132] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  631.291824][T19132] RBP: 00007f024b611e19 R08: 0000000000000004 R09: 0000000000000000
[  631.291828][T19132] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  631.291832][T19132] R13: 00007f024b7c6038 R14: 00007f024b7c5fa0 R15: 00007ffe8f3c42a8
[  631.291844][T19132]  </TASK>
[  631.291847][T19132] Mem-Info:
[  631.429046][T19132] active_anon:9134 inactive_anon:0 isolated_anon:0
[  631.429046][T19132]  active_file:1472 inactive_file:38456 isolated_file:0
[  631.429046][T19132]  unevictable:1768 dirty:381 writeback:0
[  631.429046][T19132]  slab_reclaimable:9868 slab_unreclaimable:51955
[  631.429046][T19132]  mapped:22469 shmem:6400 pagetables:983
[  631.429046][T19132]  sec_pagetables:0 bounce:0
[  631.429046][T19132]  kernel_misc_reclaimable:0
[  631.429046][T19132]  free:291500 free_pcp:23445 free_cma:0
[  631.449533][T19132] Node 0 active_anon:29456kB inactive_anon:0kB active_file:4388kB inactive_file:140000kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:64820kB dirty:1364kB writeback:0kB shmem:23064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5196kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  631.463363][T19132] Node 1 active_anon:8712kB inactive_anon:0kB active_file:1500kB inactive_file:13824kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26620kB dirty:160kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6100kB pagetables:1632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  631.476667][T19132] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  631.488830][T19132] lowmem_reserve[]: 0 811 811 811 811
[  631.492529][T19132] Node 0 DMA32 free:254884kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31292kB inactive_anon:0kB active_file:4388kB inactive_file:140000kB unevictable:3536kB writepending:1364kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:37184kB local_pcp:17980kB free_cma:0kB
[  631.506538][T19132] lowmem_reserve[]: 0 0 0 0 0
[  631.509013][T19132] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  631.524619][T19132] lowmem_reserve[]: 0 0 854 854 854
[  631.527588][T19132] Node 1 Normal free:437140kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8712kB inactive_anon:0kB active_file:1500kB inactive_file:13824kB unevictable:3536kB writepending:160kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:52968kB local_pcp:33968kB free_cma:0kB
[  631.541663][T19132] lowmem_reserve[]: 0 0 0 0 0
[  631.543873][T19132] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  631.549498][T19132] Node 0 DMA32: 38*4kB (UME) 8*8kB (UME) 82*16kB (UE) 103*32kB (UME) 163*64kB (UE) 130*128kB (UME) 68*256kB (UE) 34*512kB (UME) 12*1024kB (U) 9*2048kB (UM) 38*4096kB (UM) = 253080kB
[  631.557465][T19132] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  631.564894][T19132] Node 1 Normal: 845*4kB (UME) 384*8kB (UME) 312*16kB (UME) 135*32kB (UME) 130*64kB (UE) 125*128kB (UM) 81*256kB (UM) 45*512kB (UM) 15*1024kB (UME) 5*2048kB (UME) 80*4096kB (UM) = 437140kB
[  631.574024][T19132] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  631.578303][T19132] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  631.582973][T19132] 48096 total pagecache pages
[  631.585116][T19132] 0 pages in swap cache
[  631.587039][T19132] Free swap  = 124996kB
[  631.588894][T19132] Total swap = 124996kB
[  631.590912][T19132] 786301 pages RAM
[  631.592543][T19132] 0 pages HighMem/MovableOnly
[  631.594606][T19132] 241337 pages reserved
[  631.596456][T19132] 0 pages cma reserved
[  632.011479][T19145] dvmrp0: entered allmulticast mode
[  632.676829][T19197] binder_alloc: binder_alloc_mmap_handler: 19196 200000ffc000-200000ffd000 already mapped failed -16
[  632.698872][T19197] binder_alloc: binder_alloc_mmap_handler: 19196 2000000a0000-2000000a2000 already mapped failed -16
[  632.721924][T19198] binder_alloc: binder_alloc_mmap_handler: 19196 200000ffc000-200000ffd000 already mapped failed -16
[  634.424064][T19243] dvmrp0: entered allmulticast mode
[  634.996058][T19265] team0: entered promiscuous mode
[  634.998794][T19265] team_slave_0: entered promiscuous mode
[  635.004025][T19265] team_slave_1: entered promiscuous mode
[  635.745036][T19264] team0: left promiscuous mode
[  635.747620][T19264] team_slave_0: left promiscuous mode
[  635.803712][T19264] team_slave_1: left promiscuous mode
[  638.970240][T19377] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:21
[  640.303060][T19409] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:21
[  641.738401][T19465] team0: entered promiscuous mode
[  641.755145][T19465] team_slave_0: entered promiscuous mode
[  641.757700][T19465] team_slave_1: entered promiscuous mode
[  642.488101][T19464] team0: left promiscuous mode
[  642.502285][T19464] team_slave_0: left promiscuous mode
[  642.505396][T19464] team_slave_1: left promiscuous mode
[  643.343670][T19514] team0: entered promiscuous mode
[  643.345960][T19514] team_slave_0: entered promiscuous mode
[  643.348596][T19514] team_slave_1: entered promiscuous mode
[  643.902288][T19506] team0: left promiscuous mode
[  643.904455][T19506] team_slave_0: left promiscuous mode
[  643.906961][T19506] team_slave_1: left promiscuous mode
[  646.432286][T19635] dvmrp1: entered allmulticast mode
[  646.774528][T19658] dvmrp1: left allmulticast mode
[  649.019077][T19745] veth0_to_bridge: entered promiscuous mode
[  649.026659][T19744] veth0_to_bridge: left promiscuous mode
[  649.227143][T19758] team0: entered promiscuous mode
[  649.229326][T19758] team_slave_0: entered promiscuous mode
[  649.234812][T19758] team_slave_1: entered promiscuous mode
[  649.567293][T19757] team0: left promiscuous mode
[  649.569326][T19757] team_slave_0: left promiscuous mode
[  649.587304][T19757] team_slave_1: left promiscuous mode
[  650.217083][T19778] veth0: entered promiscuous mode
[  650.239282][T19777] veth0: left promiscuous mode
[  650.626038][T19782] team0: entered promiscuous mode
[  650.628213][T19782] team_slave_0: entered promiscuous mode
[  650.631508][T19782] team_slave_1: entered promiscuous mode
[  650.888661][T19779] team0: left promiscuous mode
[  650.891692][T19779] team_slave_0: left promiscuous mode
[  650.894941][T19779] team_slave_1: left promiscuous mode
[  654.531965][T19893] veth0_to_bridge: entered promiscuous mode
[  654.694755][T19888] veth0_to_bridge: left promiscuous mode
[  657.714427][   T33] audit: type=1800 audit(1756906885.400:8): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.21286" name="bus" dev="tmpfs" ino=36021 res=0 errno=0
[  658.858212][T20042] pim6reg: left allmulticast mode
[  658.882879][T20042] bridge0: left allmulticast mode
[  659.061325][T20036] syz_tun: entered allmulticast mode
[  659.065363][T20035] syz_tun: left allmulticast mode
[  659.391640][T20067] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  659.708764][T20091] veth0: entered promiscuous mode
[  659.735655][T20089] veth0: left promiscuous mode
[  661.636898][T20179] dvmrp0: left allmulticast mode
[  661.639109][T20179] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  664.494119][T20298] can: request_module (can-proto-4) failed.
[  664.695350][T20317] dvmrp0: entered allmulticast mode
[  669.656196][T20488] can: request_module (can-proto-4) failed.
[  674.283901][T20651] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  675.818198][T20685] pimreg3: entered allmulticast mode
[  676.601215][T20704] IPVS: stopping backup sync thread 20651 ...
[  680.304603][T20797] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  685.062394][T20940] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  685.603983][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  685.607097][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  689.644751][T21078] pim6reg: entered allmulticast mode
[  694.521623][T21271] dvmrp0: left allmulticast mode
[  695.731137][T21322] dvmrp2: entered allmulticast mode
[  696.813081][T21358] can: request_module (can-proto-0) failed.
[  698.188317][T21388] can: request_module (can-proto-4) failed.
[  702.355432][T21519] binder_alloc: binder_alloc_mmap_handler: 21512 200000ffd000-200000ffe000 already mapped failed -16
[  703.918404][T21549] binder_alloc: binder_alloc_mmap_handler: 21543 200000ffd000-200000ffe000 already mapped failed -16
[  704.486887][T21571] veth0_to_bridge: entered promiscuous mode
[  704.526547][T21570] veth0_to_bridge: left promiscuous mode
[  704.713812][T21582] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  707.783558][T21645] cgroup: fork rejected by pids controller in /syz0
[  709.075274][T22197] dvmrp1: entered allmulticast mode
[  710.202980][T22227] syzkaller0: entered allmulticast mode
[  710.239219][T22225] can: request_module (can-proto-4) failed.
[  710.283642][T22227] syzkaller0 (unregistering): left allmulticast mode
[  710.463636][T22238] dummy0: entered allmulticast mode
[  712.769294][T22278] pim6reg: left allmulticast mode
[  718.973315][T22465] delete_channel: no stack
[  719.710727][T22511] dvmrp0: left allmulticast mode
[  719.712492][T22511] dvmrp1: left allmulticast mode
[  720.666205][T22574] IPVS: stopping master sync thread 9702 ...
[  720.839750][T22576] IPVS: set_ctl: invalid protocol: 53248 230.127.0.0:0
[  720.909683][T22527] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  720.912103][T22527] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  720.927295][T22527] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  722.170601][ T5880] Bluetooth: hci0: command 0x0c1a tx timeout
[  722.962680][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout
[  722.964500][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[  730.662833][T22927] dummy0: left allmulticast mode
[  730.665387][T22927] dvmrp2: left allmulticast mode
[  731.518549][T22963] veth0: entered promiscuous mode
[  731.828774][T22959] veth0: left promiscuous mode
[  732.039394][T22979] syz.1.22137: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  732.054472][T22979] CPU: 0 UID: 0 PID: 22979 Comm: syz.1.22137 Not tainted syzkaller #0 PREEMPT(full) 
[  732.054527][T22979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  732.054537][T22979] Call Trace:
[  732.054544][T22979]  <TASK>
[  732.054551][T22979]  dump_stack_lvl+0x189/0x250
[  732.054579][T22979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  732.054596][T22979]  ? __pfx__printk+0x10/0x10
[  732.054612][T22979]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  732.054629][T22979]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  732.054646][T22979]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  732.054663][T22979]  warn_alloc+0x214/0x310
[  732.054684][T22979]  ? stack_depot_save_flags+0x40/0x860
[  732.054703][T22979]  ? __pfx_warn_alloc+0x10/0x10
[  732.054721][T22979]  ? kasan_save_track+0x4f/0x80
[  732.054737][T22979]  ? xskq_create+0x56/0x170
[  732.054752][T22979]  ? xsk_init_queue+0xb0/0x110
[  732.054766][T22979]  ? xsk_setsockopt+0x4dc/0x8d0
[  732.054777][T22979]  ? do_sock_setsockopt+0x17c/0x1b0
[  732.054788][T22979]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  732.054799][T22979]  ? do_syscall_64+0xfa/0x3b0
[  732.054808][T22979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.054825][T22979]  __vmalloc_node_range_noprof+0x125/0x12f0
[  732.054862][T22979]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  732.054882][T22979]  ? __kasan_kmalloc+0x93/0xb0
[  732.054899][T22979]  vmalloc_user_noprof+0xad/0xf0
[  732.054915][T22979]  ? xskq_create+0xbf/0x170
[  732.054932][T22979]  xskq_create+0xbf/0x170
[  732.054950][T22979]  xsk_init_queue+0xb0/0x110
[  732.054968][T22979]  xsk_setsockopt+0x4dc/0x8d0
[  732.054985][T22979]  ? __pfx_xsk_setsockopt+0x10/0x10
[  732.055000][T22979]  ? __pfx_aa_sk_perm+0x10/0x10
[  732.055028][T22979]  ? aa_sock_opt_perm+0xff/0x1b0
[  732.055042][T22979]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  732.055058][T22979]  ? __pfx_xsk_setsockopt+0x10/0x10
[  732.055074][T22979]  do_sock_setsockopt+0x17c/0x1b0
[  732.055091][T22979]  __x64_sys_setsockopt+0x13f/0x1b0
[  732.055106][T22979]  do_syscall_64+0xfa/0x3b0
[  732.055116][T22979]  ? lockdep_hardirqs_on+0x9c/0x150
[  732.055132][T22979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.055142][T22979]  ? exc_page_fault+0x9f/0xf0
[  732.055160][T22979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.055172][T22979] RIP: 0033:0x7f024b58ebe9
[  732.055184][T22979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  732.055192][T22979] RSP: 002b:00007f024c3ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  732.055206][T22979] RAX: ffffffffffffffda RBX: 00007f024b7c5fa0 RCX: 00007f024b58ebe9
[  732.055214][T22979] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  732.055221][T22979] RBP: 00007f024b611e19 R08: 0000000000000004 R09: 0000000000000000
[  732.055228][T22979] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  732.055235][T22979] R13: 00007f024b7c6038 R14: 00007f024b7c5fa0 R15: 00007ffe8f3c42a8
[  732.055255][T22979]  </TASK>
[  732.055261][T22979] Mem-Info:
[  732.286259][T22979] active_anon:5127 inactive_anon:0 isolated_anon:0
[  732.286259][T22979]  active_file:1771 inactive_file:38498 isolated_file:0
[  732.286259][T22979]  unevictable:1768 dirty:524 writeback:0
[  732.286259][T22979]  slab_reclaimable:9979 slab_unreclaimable:53727
[  732.286259][T22979]  mapped:20266 shmem:2451 pagetables:933
[  732.286259][T22979]  sec_pagetables:0 bounce:0
[  732.286259][T22979]  kernel_misc_reclaimable:0
[  732.286259][T22979]  free:288628 free_pcp:25983 free_cma:0
[  732.353768][T22979] Node 0 active_anon:11880kB inactive_anon:0kB active_file:4496kB inactive_file:140016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50152kB dirty:880kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5600kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  732.367802][T22979] Node 1 active_anon:8628kB inactive_anon:0kB active_file:2588kB inactive_file:13976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30912kB dirty:1216kB writeback:0kB shmem:6172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6580kB pagetables:1656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  732.384419][T22979] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  732.398619][T22979] lowmem_reserve[]: 0 811 811 811 811
[  732.401336][T22979] Node 0 DMA32 free:263476kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11880kB inactive_anon:0kB active_file:4496kB inactive_file:140016kB unevictable:3536kB writepending:880kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:43716kB local_pcp:26720kB free_cma:0kB
[  732.415055][T22979] lowmem_reserve[]: 0 0 0 0 0
[  732.417371][T22979] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  732.446976][T22979] lowmem_reserve[]: 0 0 854 854 854
[  732.455163][T22979] Node 1 Normal free:417060kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8628kB inactive_anon:0kB active_file:2588kB inactive_file:13976kB unevictable:3536kB writepending:1216kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:61128kB local_pcp:18252kB free_cma:0kB
[  732.489699][T22979] lowmem_reserve[]: 0 0 0 0 0
[  732.497652][T22979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  732.512462][T22979] Node 0 DMA32: 918*4kB (UME) 400*8kB (UME) 223*16kB (UME) 399*32kB (UME) 283*64kB (UME) 158*128kB (UME) 105*256kB (UME) 37*512kB (UME) 7*1024kB (UME) 7*2048kB (UM) 33*4096kB (UM) = 264040kB
[  732.533267][T22979] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  732.551373][T22979] Node 1 Normal: 817*4kB (UME) 804*8kB (UME) 512*16kB (UME) 176*32kB (UME) 73*64kB (UME) 162*128kB (UME) 100*256kB (UME) 33*512kB (UM) 14*1024kB (UME) 6*2048kB (UME) 73*4096kB (UM) = 417060kB
[  732.570833][T22979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  732.579433][T22979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  732.592047][T22979] 42720 total pagecache pages
[  732.596032][T22979] 0 pages in swap cache
[  732.603606][T22979] Free swap  = 124996kB
[  732.607756][T22979] Total swap = 124996kB
[  732.612974][T22979] 786301 pages RAM
[  732.615919][T22979] 0 pages HighMem/MovableOnly
[  732.623275][T22979] 241337 pages reserved
[  732.626414][T22979] 0 pages cma reserved
[  733.408257][T23006] Zero length message leads to an empty skb
[  734.305949][T23038] syz_tun: entered allmulticast mode
[  737.037874][T23128] syz_tun: left allmulticast mode
[  738.231941][T23163] team_slave_0: entered promiscuous mode
[  738.234600][T23163] team_slave_1: entered promiscuous mode
[  738.244905][T23162] team_slave_0: left promiscuous mode
[  738.248293][T23162] team_slave_1: left promiscuous mode
[  738.785753][T23181] delete_channel: no stack
[  739.307544][T23206] syz_tun: entered allmulticast mode
[  739.314676][T23205] syz_tun: left allmulticast mode
[  742.180443][T23307] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  742.186490][T23305] pim6reg: entered allmulticast mode
[  742.217991][T23305] pim6reg: left allmulticast mode
[  742.330605][T23311] IPVS: stopping master sync thread 23307 ...
[  743.235061][T23335] can: request_module (can-proto-4) failed.
[  747.043436][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  747.046084][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  750.163466][T25278] dlm: non-version read from control device 4
[  750.801960][T25320] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  750.809643][T25320] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  750.819762][T25320] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  752.890658][T22681] Bluetooth: hci2: command 0x0c1a tx timeout
[  752.893359][T22681] Bluetooth: hci1: command 0x0c1a tx timeout
[  752.895980][T22681] Bluetooth: hci0: command 0x0c1a tx timeout
[  756.749718][T25511] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[  758.381106][T25559] pimreg3: entered allmulticast mode
[  758.644639][T25568] can: request_module (can-proto-0) failed.
[  758.784807][   T33] audit: type=1800 audit(1756906986.470:9): pid=25577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22427" name="bus" dev="tmpfs" ino=37398 res=0 errno=0
[  759.176650][T25587] syz.1.22430: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  759.194798][T25587] CPU: 1 UID: 0 PID: 25587 Comm: syz.1.22430 Not tainted syzkaller #0 PREEMPT(full) 
[  759.194820][T25587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  759.194829][T25587] Call Trace:
[  759.194836][T25587]  <TASK>
[  759.194842][T25587]  dump_stack_lvl+0x189/0x250
[  759.194867][T25587]  ? __pfx_dump_stack_lvl+0x10/0x10
[  759.194883][T25587]  ? __pfx__printk+0x10/0x10
[  759.194902][T25587]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  759.194918][T25587]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  759.194935][T25587]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  759.194951][T25587]  warn_alloc+0x214/0x310
[  759.194970][T25587]  ? stack_depot_save_flags+0x40/0x860
[  759.194988][T25587]  ? __pfx_warn_alloc+0x10/0x10
[  759.195006][T25587]  ? kasan_save_track+0x4f/0x80
[  759.195022][T25587]  ? xskq_create+0x56/0x170
[  759.195037][T25587]  ? xsk_init_queue+0xb0/0x110
[  759.195051][T25587]  ? xsk_setsockopt+0x4dc/0x8d0
[  759.195065][T25587]  ? do_sock_setsockopt+0x17c/0x1b0
[  759.195078][T25587]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  759.195089][T25587]  ? do_syscall_64+0xfa/0x3b0
[  759.195100][T25587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.195116][T25587]  __vmalloc_node_range_noprof+0x125/0x12f0
[  759.195154][T25587]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  759.195175][T25587]  ? __kasan_kmalloc+0x93/0xb0
[  759.195193][T25587]  vmalloc_user_noprof+0xad/0xf0
[  759.195210][T25587]  ? xskq_create+0xbf/0x170
[  759.195227][T25587]  xskq_create+0xbf/0x170
[  759.195244][T25587]  xsk_init_queue+0xb0/0x110
[  759.195288][T25587]  xsk_setsockopt+0x4dc/0x8d0
[  759.195307][T25587]  ? __pfx_xsk_setsockopt+0x10/0x10
[  759.195323][T25587]  ? __pfx_aa_sk_perm+0x10/0x10
[  759.195344][T25587]  ? aa_sock_opt_perm+0xff/0x1b0
[  759.195359][T25587]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  759.195374][T25587]  ? __pfx_xsk_setsockopt+0x10/0x10
[  759.195391][T25587]  do_sock_setsockopt+0x17c/0x1b0
[  759.195406][T25587]  __x64_sys_setsockopt+0x13f/0x1b0
[  759.195423][T25587]  do_syscall_64+0xfa/0x3b0
[  759.195432][T25587]  ? lockdep_hardirqs_on+0x9c/0x150
[  759.195446][T25587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.195457][T25587]  ? exc_page_fault+0x9f/0xf0
[  759.195475][T25587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.195499][T25587] RIP: 0033:0x7f024b58ebe9
[  759.195513][T25587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  759.195525][T25587] RSP: 002b:00007f024c3ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  759.195543][T25587] RAX: ffffffffffffffda RBX: 00007f024b7c5fa0 RCX: 00007f024b58ebe9
[  759.195551][T25587] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  759.195560][T25587] RBP: 00007f024b611e19 R08: 0000000000000004 R09: 0000000000000000
[  759.195567][T25587] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  759.195575][T25587] R13: 00007f024b7c6038 R14: 00007f024b7c5fa0 R15: 00007ffe8f3c42a8
[  759.195596][T25587]  </TASK>
[  759.195602][T25587] Mem-Info:
[  759.322568][T25587] active_anon:5151 inactive_anon:17 isolated_anon:17
[  759.322568][T25587]  active_file:1814 inactive_file:38508 isolated_file:0
[  759.322568][T25587]  unevictable:1768 dirty:397 writeback:0
[  759.322568][T25587]  slab_reclaimable:9979 slab_unreclaimable:54803
[  759.322568][T25587]  mapped:18673 shmem:2403 pagetables:973
[  759.322568][T25587]  sec_pagetables:0 bounce:0
[  759.322568][T25587]  kernel_misc_reclaimable:0
[  759.322568][T25587]  free:282804 free_pcp:29222 free_cma:0
[  759.350826][T25587] Node 0 active_anon:11640kB inactive_anon:0kB active_file:4492kB inactive_file:140056kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46700kB dirty:276kB writeback:0kB shmem:2200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5516kB pagetables:2140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  759.425660][T25587] Node 1 active_anon:8964kB inactive_anon:68kB active_file:2764kB inactive_file:13976kB unevictable:3536kB isolated(anon):68kB isolated(file):0kB mapped:31188kB dirty:1312kB writeback:0kB shmem:7412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6928kB pagetables:1820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  759.467128][T25587] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  759.532086][T25587] lowmem_reserve[]: 0 811 811 811 811
[  759.534537][T25587] Node 0 DMA32 free:262584kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11640kB inactive_anon:0kB active_file:4492kB inactive_file:140056kB unevictable:3536kB writepending:276kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:45248kB local_pcp:15980kB free_cma:0kB
[  759.567643][T25587] lowmem_reserve[]: 0 0 0 0 0
[  759.569672][T25587] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  759.602429][T25587] lowmem_reserve[]: 0 0 854 854 854
[  759.605596][T25587] Node 1 Normal free:406848kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8964kB inactive_anon:68kB active_file:2764kB inactive_file:13976kB unevictable:3536kB writepending:1312kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:66860kB local_pcp:18552kB free_cma:0kB
[  759.638046][T25587] lowmem_reserve[]: 0 0 0 0 0
[  759.640872][T25587] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  759.648701][T25587] Node 0 DMA32: 480*4kB (ME) 435*8kB (UME) 170*16kB (ME) 602*32kB (UME) 381*64kB (UME) 174*128kB (UME) 113*256kB (UME) 38*512kB (UME) 7*1024kB (UME) 3*2048kB (U) 31*4096kB (UM) = 262712kB
[  759.667343][T25587] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  759.687620][T25587] Node 1 Normal: 584*4kB (UME) 155*8kB (UME) 193*16kB (UME) 460*32kB (UME) 208*64kB (UME) 50*128kB (UME) 102*256kB (UME) 42*512kB (UM) 16*1024kB (UME) 5*2048kB (UME) 71*4096kB (UM) = 406152kB
[  759.700206][T25587] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  759.707849][T25587] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  759.712437][T25587] 42744 total pagecache pages
[  759.714507][T25587] 17 pages in swap cache
[  759.716374][T25587] Free swap  = 124928kB
[  759.718211][T25587] Total swap = 124996kB
[  759.720042][T25587] 786301 pages RAM
[  759.722019][T25587] 0 pages HighMem/MovableOnly
[  759.724831][T25587] 241337 pages reserved
[  759.726651][T25587] 0 pages cma reserved
[  761.111773][   T33] audit: type=1800 audit(1756906988.800:10): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22460" name="file1" dev="tmpfs" ino=37464 res=0 errno=0
[  761.140292][T25667] bridge0: entered promiscuous mode
[  761.154285][T25666] bridge0: left promiscuous mode
[  762.556745][T25716] syz_tun: entered allmulticast mode
[  762.686011][T25714] pim6reg: entered allmulticast mode
[  762.726023][T25714] pim6reg: left allmulticast mode
[  762.803476][T25715] syz_tun: left allmulticast mode
[  763.007488][T25711] pim6reg: entered allmulticast mode
[  763.213287][T25744] IPVS: Unknown mcast interface: 
[  764.932236][T25821] veth0: entered promiscuous mode
[  765.034015][T25820] veth0: left promiscuous mode
[  766.023656][   T33] audit: type=1800 audit(1756906993.700:11): pid=25860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22525" name="file1" dev="tmpfs" ino=38202 res=0 errno=0
[  767.131230][T25900] veth0: entered promiscuous mode
[  767.699993][T25899] veth0: left promiscuous mode
[  768.891583][T25951] ip6gretap0: entered promiscuous mode
[  768.895792][T25950] ip6gretap0: left promiscuous mode
[  771.668605][T26054] veth0: entered promiscuous mode
[  771.674019][T26053] veth0: left promiscuous mode
[  772.067334][T26073] veth1_to_bond: entered allmulticast mode
[  772.397502][T26072] veth1_to_bond: left allmulticast mode
[  774.175898][T26135] veth0: entered promiscuous mode
[  774.325844][T26134] veth0: left promiscuous mode
[  774.438706][   T33] audit: type=1800 audit(1756907002.120:12): pid=26143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22621" name="file1" dev="tmpfs" ino=37759 res=0 errno=0
[  774.662972][T26153] veth0: entered promiscuous mode
[  774.929464][T26152] veth0: left promiscuous mode
[  777.124920][T26249] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  777.343509][T26261] can: request_module (can-proto-4) failed.
[  778.319665][T26291] can: request_module (can-proto-4) failed.
[  778.917536][T26315] can: request_module (can-proto-4) failed.
[  780.699461][T26371] dvmrp1: entered allmulticast mode
[  785.583292][T26551] dvmrp1: left allmulticast mode
[  786.125951][T26567] random: crng reseeded on system resumption
[  787.172817][T26602] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000
[  787.189446][T26601] delete_channel: no stack
[  787.344400][T26605] can: request_module (can-proto-4) failed.
[  789.125909][T26646] dvmrp0: left allmulticast mode
[  789.128730][T26646] dvmrp1: left allmulticast mode
[  789.946074][T26675] pimreg: entered allmulticast mode
[  791.007119][T26706] random: crng reseeded on system resumption
[  791.551365][T26729] bridge0: entered allmulticast mode
[  793.031117][T26773] dvmrp1: entered allmulticast mode
[  793.495336][T26795] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  794.846117][T26837] pimreg: left allmulticast mode
[  797.057490][T26899] dvmrp1: entered allmulticast mode
[  798.636533][T26941] random: crng reseeded on system resumption
[  803.510578][T27089] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 2, id = 0
[  805.075602][T27148] bridge0: entered promiscuous mode
[  805.084285][T27147] bridge0: left promiscuous mode
[  805.441611][T27159] random: crng reseeded on system resumption
[  806.272613][T27191] pim6reg9: entered allmulticast mode
[  808.482585][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  808.484914][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  810.379370][T27369] pimreg: entered allmulticast mode
[  810.384947][T27369] pimreg: left allmulticast mode
[  810.528664][T27381] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  810.535803][T27378] IPVS: stopping master sync thread 27381 ...
[  810.542736][T27378] IPVS: stopping backup sync thread 20940 ...
[  811.471568][T27428] syz_tun: entered allmulticast mode
[  811.530869][T27427] syz_tun: left allmulticast mode
[  815.471171][T27594] random: crng reseeded on system resumption
[  817.023809][T27659] IPVS: ip_vs_add_dest(): server weight less than zero
[  817.031906][T27660] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  817.036316][T27659] IPVS: stopping backup sync thread 27660 ...
[  817.088078][T27662] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000
[  819.242719][T27730] dummy0: entered allmulticast mode
[  821.552412][T27787] veth0_to_batadv: entered promiscuous mode
[  821.564769][T27786] veth0_to_batadv: left promiscuous mode
[  822.590000][T27837] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001
[  823.766035][T27870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  825.141434][T27935] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  825.431147][T27941] can: request_module (can-proto-4) failed.
[  828.538747][T28080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  829.878984][T28112] dvmrp0: entered allmulticast mode
[  832.728667][T28164] veth1_to_bond: entered allmulticast mode
[  832.763575][T28163] veth1_to_bond: left allmulticast mode
[  834.504253][T28226] dvmrp0: entered allmulticast mode
[  835.377032][T28257] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  836.559378][T28308] veth0: entered promiscuous mode
[  836.935917][T28307] veth0: left promiscuous mode
[  837.908814][T28367] dvmrp0: left allmulticast mode
[  837.911042][T28367] dvmrp1: left allmulticast mode
[  838.534457][T28396] bridge0: entered promiscuous mode
[  838.543046][T28396] IPVS: set_ctl: invalid protocol: 98 172.20.20.15:20004
[  838.561501][T28394] bridge0: left promiscuous mode
[  838.745004][T28403] IPVS: set_ctl: invalid protocol: 0 172.20.20.31:20000
[  839.717590][T28430] can: request_module (can-proto-4) failed.
[  842.527939][T28553] delete_channel: no stack
[  844.589395][T28619] dvmrp1: left allmulticast mode
[  845.325481][T28667] pim6reg: left allmulticast mode
[  847.599564][T28734] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003
[  850.045641][T28820] binder_alloc: binder_alloc_mmap_handler: 28819 200000ffc000-200000ffd000 already mapped failed -16
[  850.749066][T28841] pim6reg: entered allmulticast mode
[  850.913709][T28849] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  853.295549][T28919] random: crng reseeded on system resumption
[  854.547816][T28973] delete_channel: no stack
[  855.210351][T29027] IPVS: set_ctl: invalid protocol: 191 172.30.5.3:20003
[  857.211004][T29063] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  857.228893][T29063] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  857.233926][T29063] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  857.336513][T29337] binder: binder_mmap: 29320 200000ffb000-200000ffd000 bad vm_flags failed -1
[  858.490210][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[  859.128181][T30286] delete_channel: no stack
[  859.280295][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout
[  859.280379][T22681] Bluetooth: hci1: command 0x0c1a tx timeout
[  861.534112][T30387] can: request_module (can-proto-4) failed.
[  863.694629][T30465] IPVS: set_ctl: invalid protocol: 496 0.0.0.0:20000
[  864.533805][T30510] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003
[  864.537442][T30510] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  866.049263][T30562] dvmrp0: left allmulticast mode
[  866.054079][T30562] dummy0: left allmulticast mode
[  869.071284][T30657] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  869.922184][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  869.924950][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  870.346456][T30713] syz_tun: entered allmulticast mode
[  871.017616][T30735] random: crng reseeded on system resumption
[  875.326739][T30857] veth0_vlan: entered allmulticast mode
[  877.510386][T30931] lo: entered promiscuous mode
[  877.513498][T30929] lo: left promiscuous mode
[  878.522870][T30972] IPVS: set_ctl: invalid protocol: 3 10.1.1.1:20003
[  882.496098][T31085] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:0
[  883.075792][T31101] can: request_module (can-proto-0) failed.
[  886.602208][T31197] IPVS: stopping backup sync thread 20067 ...
[  887.027602][   T33] audit: type=1800 audit(1756907114.710:13): pid=31205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23942" name="bus" dev="tmpfs" ino=40667 res=0 errno=0
[  893.495996][T31406] IPVS: set_ctl: invalid protocol: 0 1.0.0.0:0
[  893.534418][T31406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  898.035528][T31586] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003
[  898.038463][T31587] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003
[  898.067996][T31586] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004
[  901.343145][T31666] veth0_vlan: entered allmulticast mode
[  901.414183][T31669] bridge0: left allmulticast mode
[  901.416527][T31669] veth0_vlan: left allmulticast mode
[  901.796756][T31673] can: request_module (can-proto-4) failed.
[  902.004742][T31680] delete_channel: no stack
[  902.858485][T31720] veth0: entered promiscuous mode
[  902.933939][T31719] veth0: left promiscuous mode
[  903.518960][T31745] dvmrp0: entered allmulticast mode
[  903.602166][T31745] ubi0: attaching mtd0
[  903.607839][T31745] ubi0: scanning is finished
[  903.611010][T31745] ubi0: empty MTD device detected
[  903.756531][T31745] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  903.759663][T31745] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  903.780330][T31745] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  903.783342][T31745] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  903.786490][T31745] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  903.789286][T31745] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  903.795161][T31745] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1765372418
[  903.802121][T31745] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  903.807410][T31752] ubi0: background thread "ubi_bgt0d" started, PID 31752
[  906.035879][T31825] veth0_vlan: entered allmulticast mode
[  906.039169][T31825] syz_tun: left allmulticast mode
[  906.046332][T31825] veth0_vlan: left allmulticast mode
[  906.612782][T31847] ip6gretap0: entered promiscuous mode
[  906.621755][T31846] ip6gretap0: left promiscuous mode
[  909.855089][T31951] lo: entered promiscuous mode
[  909.895275][T31950] lo: left promiscuous mode
[  911.802227][T31993] dummy0: entered allmulticast mode
[  912.126004][T32017] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  912.129570][T32017] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  913.711914][T32054] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  914.088037][T32061] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  914.736200][T32080] IPVS: set_ctl: invalid protocol: 65535 255.255.255.255:0
[  914.739966][T32080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  915.321436][T32100] dvmrp0: entered allmulticast mode
[  915.414261][T32100] ubi: mtd0 is already attached to ubi0
[  916.241977][T32133] ubi: mtd0 is already attached to ubi0
[  916.708154][T32149] veth0: entered promiscuous mode
[  916.823202][T32149] veth0: left promiscuous mode
[  916.912458][T32157] ubi: mtd0 is already attached to ubi0
[  917.217117][T32167] random: crng reseeded on system resumption
[  917.323309][T32170] ubi: mtd0 is already attached to ubi0
[  919.081364][T32246] pim6reg: entered allmulticast mode
[  920.493491][T32299] dvmrp0: entered allmulticast mode
[  920.548327][T32299] ubi: mtd0 is already attached to ubi0
[  922.481130][T32368] dvmrp0: left allmulticast mode
[  925.030564][T32454] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[  926.044874][T32511] syz.0.24372: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  926.054681][T32511] CPU: 1 UID: 0 PID: 32511 Comm: syz.0.24372 Not tainted syzkaller #0 PREEMPT(full) 
[  926.054703][T32511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  926.054711][T32511] Call Trace:
[  926.054718][T32511]  <TASK>
[  926.054724][T32511]  dump_stack_lvl+0x189/0x250
[  926.054748][T32511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  926.054763][T32511]  ? __pfx__printk+0x10/0x10
[  926.054780][T32511]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  926.054796][T32511]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  926.054813][T32511]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  926.054859][T32511]  warn_alloc+0x214/0x310
[  926.054881][T32511]  ? __kfence_alloc+0x385/0x3b0
[  926.054901][T32511]  ? __pfx_warn_alloc+0x10/0x10
[  926.054919][T32511]  ? __kmalloc_cache_noprof+0x329/0x3d0
[  926.054938][T32511]  ? xsk_setsockopt+0x4dc/0x8d0
[  926.054953][T32511]  ? do_sock_setsockopt+0x17c/0x1b0
[  926.054976][T32511]  __vmalloc_node_range_noprof+0x125/0x12f0
[  926.055014][T32511]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  926.055035][T32511]  ? __kasan_kmalloc+0x22/0xb0
[  926.055055][T32511]  vmalloc_user_noprof+0xad/0xf0
[  926.055072][T32511]  ? xskq_create+0xbf/0x170
[  926.055088][T32511]  xskq_create+0xbf/0x170
[  926.055105][T32511]  xsk_init_queue+0xb0/0x110
[  926.055123][T32511]  xsk_setsockopt+0x4dc/0x8d0
[  926.055141][T32511]  ? __pfx_xsk_setsockopt+0x10/0x10
[  926.055156][T32511]  ? __pfx_aa_sk_perm+0x10/0x10
[  926.055177][T32511]  ? aa_sock_opt_perm+0xff/0x1b0
[  926.055191][T32511]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  926.055204][T32511]  ? __pfx_xsk_setsockopt+0x10/0x10
[  926.055221][T32511]  do_sock_setsockopt+0x17c/0x1b0
[  926.055237][T32511]  __x64_sys_setsockopt+0x13f/0x1b0
[  926.055253][T32511]  do_syscall_64+0xfa/0x3b0
[  926.055265][T32511]  ? lockdep_hardirqs_on+0x9c/0x150
[  926.055284][T32511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.055295][T32511]  ? exc_page_fault+0x9f/0xf0
[  926.055313][T32511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.055325][T32511] RIP: 0033:0x7fe6e5d8ebe9
[  926.055349][T32511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  926.055359][T32511] RSP: 002b:00007fe6e6ce8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  926.055375][T32511] RAX: ffffffffffffffda RBX: 00007fe6e5fc5fa0 RCX: 00007fe6e5d8ebe9
[  926.055383][T32511] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  926.055391][T32511] RBP: 00007fe6e5e11e19 R08: 0000000000000004 R09: 0000000000000000
[  926.055398][T32511] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  926.055406][T32511] R13: 00007fe6e5fc6038 R14: 00007fe6e5fc5fa0 R15: 00007ffe606e3bb8
[  926.055427][T32511]  </TASK>
[  926.055432][T32511] Mem-Info:
[  926.180648][T32511] active_anon:5204 inactive_anon:18 isolated_anon:0
[  926.180648][T32511]  active_file:2190 inactive_file:38574 isolated_file:0
[  926.180648][T32511]  unevictable:1768 dirty:97 writeback:0
[  926.180648][T32511]  slab_reclaimable:10080 slab_unreclaimable:53664
[  926.180648][T32511]  mapped:19026 shmem:2415 pagetables:969
[  926.180648][T32511]  sec_pagetables:0 bounce:0
[  926.180648][T32511]  kernel_misc_reclaimable:0
[  926.180648][T32511]  free:287958 free_pcp:26835 free_cma:0
[  926.210385][T32511] Node 0 active_anon:11668kB inactive_anon:0kB active_file:5656kB inactive_file:140224kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47468kB dirty:332kB writeback:0kB shmem:3300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6064kB pagetables:2000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  926.246233][T32511] Node 1 active_anon:9216kB inactive_anon:72kB active_file:3104kB inactive_file:14072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28636kB dirty:56kB writeback:0kB shmem:6360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8120kB pagetables:1876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  926.298708][T32511] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  926.318882][T32511] lowmem_reserve[]: 0 811 811 811 811
[  926.352553][T32511] Node 0 DMA32 free:253224kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11668kB inactive_anon:0kB active_file:5656kB inactive_file:140224kB unevictable:3536kB writepending:332kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:58976kB local_pcp:38008kB free_cma:0kB
[  926.372576][T32511] lowmem_reserve[]: 0 0 0 0 0
[  926.376442][T32511] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  926.389551][T32511] lowmem_reserve[]: 0 0 854 854 854
[  926.397799][T32511] Node 1 Normal free:424700kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9216kB inactive_anon:72kB active_file:3104kB inactive_file:14072kB unevictable:3536kB writepending:56kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:48836kB local_pcp:21180kB free_cma:0kB
[  926.415524][T32511] lowmem_reserve[]: 0 0 0 0 0
[  926.420476][T32511] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  926.444359][T32511] Node 0 DMA32: 1348*4kB (UME) 1191*8kB (UME) 556*16kB (UME) 317*32kB (UME) 306*64kB (UME) 178*128kB (UME) 47*256kB (UME) 46*512kB (UME) 14*1024kB (UME) 2*2048kB (U) 30*4096kB (UM) = 253224kB
[  926.462214][T32511] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  926.477609][T32511] Node 1 Normal: 861*4kB (UME) 261*8kB (UM) 280*16kB (UME) 557*32kB (UME) 359*64kB (UME) 115*128kB (UME) 123*256kB (UME) 48*512kB (UME) 24*1024kB (UME) 6*2048kB (UME) 65*4096kB (UM) = 424700kB
[  926.502633][T32511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  926.517960][T32511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  926.524543][T32511] 43231 total pagecache pages
[  926.527036][T32511] 18 pages in swap cache
[  926.529151][T32511] Free swap  = 124924kB
[  926.534845][T32511] Total swap = 124996kB
[  926.536630][T32511] 786301 pages RAM
[  926.538354][T32511] 0 pages HighMem/MovableOnly
[  926.541202][T32511] 241337 pages reserved
[  926.543044][T32511] 0 pages cma reserved
[  926.843670][T32532] ubi: mtd0 is already attached to ubi0
[  928.922046][T32589] veth0: entered promiscuous mode
[  929.157191][T32603] dummy0: entered allmulticast mode
[  929.171065][T32588] veth0: left promiscuous mode
[  929.982539][T32632] veth0: entered promiscuous mode
[  930.063667][T32631] veth0: left promiscuous mode
[  931.368275][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  931.371177][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  932.009578][T32706] veth0_vlan: entered allmulticast mode
[  932.075604][T32706] dummy0: left allmulticast mode
[  932.077880][T32706] veth0_vlan: left allmulticast mode
[  935.342887][  T331] random: crng reseeded on system resumption
[  935.847499][  T343] dvmrp0: left allmulticast mode
[  935.849795][  T343] dummy0: left allmulticast mode
[  935.856034][  T343] veth0_vlan: left allmulticast mode
[  936.404114][  T352] can: request_module (can-proto-3) failed.
[  938.389136][  T423] veth0_vlan: entered allmulticast mode
[  938.459095][  T413] syz.1.24502: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  938.494426][  T413] CPU: 1 UID: 0 PID: 413 Comm: syz.1.24502 Not tainted syzkaller #0 PREEMPT(full) 
[  938.494447][  T413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  938.494454][  T413] Call Trace:
[  938.494460][  T413]  <TASK>
[  938.494466][  T413]  dump_stack_lvl+0x189/0x250
[  938.494491][  T413]  ? __pfx_dump_stack_lvl+0x10/0x10
[  938.494505][  T413]  ? __pfx__printk+0x10/0x10
[  938.494523][  T413]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  938.494538][  T413]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  938.494553][  T413]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  938.494569][  T413]  warn_alloc+0x214/0x310
[  938.494592][  T413]  ? __pfx_warn_alloc+0x10/0x10
[  938.494615][  T413]  ? __get_vm_area_node+0x28f/0x300
[  938.494631][  T413]  ? xskq_create+0xbf/0x170
[  938.494650][  T413]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  938.494687][  T413]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  938.494707][  T413]  ? __kasan_kmalloc+0x93/0xb0
[  938.494755][  T413]  vmalloc_user_noprof+0xad/0xf0
[  938.494771][  T413]  ? xskq_create+0xbf/0x170
[  938.494787][  T413]  xskq_create+0xbf/0x170
[  938.494804][  T413]  xsk_init_queue+0xb0/0x110
[  938.494821][  T413]  xsk_setsockopt+0x57b/0x8d0
[  938.494838][  T413]  ? __pfx_xsk_setsockopt+0x10/0x10
[  938.494853][  T413]  ? __pfx_aa_sk_perm+0x10/0x10
[  938.494871][  T413]  ? __fget_files+0x2a/0x420
[  938.494880][  T413]  ? aa_sock_opt_perm+0xff/0x1b0
[  938.494893][  T413]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  938.494906][  T413]  ? __pfx_xsk_setsockopt+0x10/0x10
[  938.494928][  T413]  do_sock_setsockopt+0x17c/0x1b0
[  938.494945][  T413]  __x64_sys_setsockopt+0x13f/0x1b0
[  938.494960][  T413]  do_syscall_64+0xfa/0x3b0
[  938.494971][  T413]  ? lockdep_hardirqs_on+0x9c/0x150
[  938.494987][  T413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.494997][  T413]  ? exc_page_fault+0x9f/0xf0
[  938.495014][  T413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.495025][  T413] RIP: 0033:0x7f024b58ebe9
[  938.495036][  T413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  938.495045][  T413] RSP: 002b:00007f024c3ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  938.495058][  T413] RAX: ffffffffffffffda RBX: 00007f024b7c5fa0 RCX: 00007f024b58ebe9
[  938.495066][  T413] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  938.495073][  T413] RBP: 00007f024b611e19 R08: 0000000000000004 R09: 0000000000000000
[  938.495080][  T413] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  938.495086][  T413] R13: 00007f024b7c6038 R14: 00007f024b7c5fa0 R15: 00007ffe8f3c42a8
[  938.495105][  T413]  </TASK>
[  938.495110][  T413] Mem-Info:
[  938.634384][  T413] active_anon:7959 inactive_anon:18 isolated_anon:0
[  938.634384][  T413]  active_file:3404 inactive_file:38579 isolated_file:0
[  938.634384][  T413]  unevictable:1768 dirty:1345 writeback:0
[  938.634384][  T413]  slab_reclaimable:10200 slab_unreclaimable:53821
[  938.634384][  T413]  mapped:21841 shmem:5289 pagetables:919
[  938.634384][  T413]  sec_pagetables:0 bounce:0
[  938.634384][  T413]  kernel_misc_reclaimable:0
[  938.634384][  T413]  free:284673 free_pcp:25113 free_cma:0
[  938.655289][  T413] Node 0 active_anon:20040kB inactive_anon:0kB active_file:10128kB inactive_file:140232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56228kB dirty:4792kB writeback:0kB shmem:12028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6068kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  938.672989][  T413] Node 1 active_anon:11868kB inactive_anon:72kB active_file:3488kB inactive_file:14084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31208kB dirty:588kB writeback:0kB shmem:9124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7956kB pagetables:1536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  938.688198][  T413] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  938.710207][  T413] lowmem_reserve[]: 0 811 811 811 811
[  938.714345][  T413] Node 0 DMA32 free:250940kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20040kB inactive_anon:0kB active_file:10128kB inactive_file:140232kB unevictable:3536kB writepending:4792kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:48324kB local_pcp:13756kB free_cma:0kB
[  938.750383][  T413] lowmem_reserve[]: 0 0 0 0 0
[  938.752621][  T413] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  938.797008][  T413] lowmem_reserve[]: 0 0 854 854 854
[  938.799535][  T413] Node 1 Normal free:413320kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11740kB inactive_anon:72kB active_file:3488kB inactive_file:14084kB unevictable:3536kB writepending:600kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:51920kB local_pcp:35252kB free_cma:0kB
[  938.839352][  T413] lowmem_reserve[]: 0 0 0 0 0
[  938.844402][  T413] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  938.849180][  T413] Node 0 DMA32: 557*4kB (UME) 993*8kB (UME) 512*16kB (UME) 476*32kB (UME) 357*64kB (UME) 171*128kB (UME) 32*256kB (UME) 46*512kB (UME) 13*1024kB (UME) 2*2048kB (UM) 30*4096kB (UM) = 250364kB
[  938.859692][  T413] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  938.868326][  T413] Node 1 Normal: 270*4kB (UE) 432*8kB (UME) 533*16kB (UME) 470*32kB (UME) 377*64kB (UME) 147*128kB (UME) 123*256kB (UME) 33*512kB (UME) 13*1024kB (UME) 9*2048kB (UME) 64*4096kB (UM) = 413320kB
[  938.881046][  T413] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  938.884312][  T413] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  938.887776][  T413] 47293 total pagecache pages
[  938.889669][  T413] 18 pages in swap cache
[  938.892539][  T413] Free swap  = 124924kB
[  938.894239][  T413] Total swap = 124996kB
[  938.896067][  T413] 786301 pages RAM
[  938.903990][  T413] 0 pages HighMem/MovableOnly
[  938.905901][  T413] 241337 pages reserved
[  938.907635][  T413] 0 pages cma reserved
[  938.968071][  T438] veth0_vlan: left allmulticast mode
[  943.312522][  T582] veth0: entered promiscuous mode
[  943.350922][  T581] veth0: left promiscuous mode
[  944.184082][  T623] veth0_vlan: entered allmulticast mode
[  944.262944][  T629] dvmrp0: left allmulticast mode
[  944.265329][  T629] veth0_vlan: left allmulticast mode
[  945.965541][  T679] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  949.221359][  T774] GUP no longer grows the stack in syz.1.24624 (774): 200000003000-200000c01000 (200000001000)
[  949.226270][  T774] CPU: 1 UID: 0 PID: 774 Comm: syz.1.24624 Not tainted syzkaller #0 PREEMPT(full) 
[  949.226292][  T774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  949.226300][  T774] Call Trace:
[  949.226306][  T774]  <TASK>
[  949.226314][  T774]  dump_stack_lvl+0x189/0x250
[  949.226337][  T774]  ? __pfx_dump_stack_lvl+0x10/0x10
[  949.226353][  T774]  ? __pfx__printk+0x10/0x10
[  949.226369][  T774]  ? find_vma+0xe7/0x160
[  949.226397][  T774]  __get_user_pages+0x24d0/0x2ce0
[  949.226411][  T774]  ? __lock_acquire+0xab9/0xd20
[  949.226446][  T774]  ? __gup_longterm_locked+0x307/0x1660
[  949.226465][  T774]  __gup_longterm_locked+0x3dc/0x1660
[  949.226493][  T774]  ? gup_fast_fallback+0x195f/0x2010
[  949.226511][  T774]  gup_fast_fallback+0x1e6a/0x2010
[  949.226551][  T774]  ? __pfx_gup_fast_fallback+0x10/0x10
[  949.226572][  T774]  ? rcu_is_watching+0x15/0xb0
[  949.226585][  T774]  ? io_pin_pages+0x9a/0x1a0
[  949.226596][  T774]  ? is_valid_gup_args+0x11f/0x200
[  949.226612][  T774]  ? pin_user_pages_fast+0x4d/0xb0
[  949.226660][  T774]  io_pin_pages+0xb5/0x1a0
[  949.226677][  T774]  io_region_pin_pages+0x7d/0x190
[  949.226692][  T774]  io_create_region+0x386/0x480
[  949.226711][  T774]  io_create_region_mmap_safe+0xc0/0x180
[  949.226726][  T774]  ? __pfx_io_create_region_mmap_safe+0x10/0x10
[  949.226739][  T774]  ? __kasan_kmalloc+0x93/0xb0
[  949.226763][  T774]  io_register_pbuf_ring+0x428/0x6b0
[  949.226778][  T774]  ? __pfx_io_register_pbuf_ring+0x10/0x10
[  949.226793][  T774]  ? __pfx___mutex_lock+0x10/0x10
[  949.226818][  T774]  ? __fget_files+0x3a0/0x420
[  949.226828][  T774]  ? __fget_files+0x2a/0x420
[  949.226841][  T774]  ? io_is_uring_fops+0xd/0x50
[  949.226859][  T774]  __se_sys_io_uring_register+0x692/0x11b0
[  949.226873][  T774]  ? __se_sys_futex+0x36f/0x400
[  949.226893][  T774]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  949.226910][  T774]  ? rcu_is_watching+0x15/0xb0
[  949.226925][  T774]  ? do_syscall_64+0xbe/0x3b0
[  949.226940][  T774]  do_syscall_64+0xfa/0x3b0
[  949.226950][  T774]  ? lockdep_hardirqs_on+0x9c/0x150
[  949.226966][  T774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.226978][  T774]  ? exc_page_fault+0x9f/0xf0
[  949.226996][  T774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.227008][  T774] RIP: 0033:0x7f024b58ebe9
[  949.227021][  T774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  949.227031][  T774] RSP: 002b:00007f024c3ab038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  949.227045][  T774] RAX: ffffffffffffffda RBX: 00007f024b7c5fa0 RCX: 00007f024b58ebe9
[  949.227053][  T774] RDX: 0000200000000040 RSI: 0000000000000016 RDI: 0000000000000007
[  949.227062][  T774] RBP: 00007f024b611e19 R08: 0000000000000000 R09: 0000000000000000
[  949.227070][  T774] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  949.227078][  T774] R13: 00007f024b7c6038 R14: 00007f024b7c5fa0 R15: 00007ffe8f3c42a8
[  949.227099][  T774]  </TASK>
[  952.772240][  T881] syz.0.24666: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  952.778457][  T881] CPU: 1 UID: 0 PID: 881 Comm: syz.0.24666 Not tainted syzkaller #0 PREEMPT(full) 
[  952.778481][  T881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  952.778490][  T881] Call Trace:
[  952.778497][  T881]  <TASK>
[  952.778505][  T881]  dump_stack_lvl+0x189/0x250
[  952.778531][  T881]  ? __pfx_dump_stack_lvl+0x10/0x10
[  952.778546][  T881]  ? __pfx__printk+0x10/0x10
[  952.778566][  T881]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  952.778581][  T881]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  952.778632][  T881]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  952.778650][  T881]  warn_alloc+0x214/0x310
[  952.778674][  T881]  ? stack_depot_save_flags+0x40/0x860
[  952.778696][  T881]  ? __pfx_warn_alloc+0x10/0x10
[  952.778718][  T881]  ? kasan_save_track+0x4f/0x80
[  952.778735][  T881]  ? xskq_create+0x56/0x170
[  952.778752][  T881]  ? xsk_init_queue+0xb0/0x110
[  952.778766][  T881]  ? xsk_setsockopt+0x4dc/0x8d0
[  952.778780][  T881]  ? do_sock_setsockopt+0x17c/0x1b0
[  952.778792][  T881]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  952.778802][  T881]  ? do_syscall_64+0xfa/0x3b0
[  952.778813][  T881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  952.778830][  T881]  __vmalloc_node_range_noprof+0x125/0x12f0
[  952.778874][  T881]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  952.778895][  T881]  ? __kasan_kmalloc+0x93/0xb0
[  952.778914][  T881]  vmalloc_user_noprof+0xad/0xf0
[  952.778933][  T881]  ? xskq_create+0xbf/0x170
[  952.778951][  T881]  xskq_create+0xbf/0x170
[  952.778972][  T881]  xsk_init_queue+0xb0/0x110
[  952.778990][  T881]  xsk_setsockopt+0x4dc/0x8d0
[  952.779009][  T881]  ? __pfx_xsk_setsockopt+0x10/0x10
[  952.779025][  T881]  ? __pfx_aa_sk_perm+0x10/0x10
[  952.779046][  T881]  ? aa_sock_opt_perm+0xff/0x1b0
[  952.779060][  T881]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  952.779073][  T881]  ? __pfx_xsk_setsockopt+0x10/0x10
[  952.779090][  T881]  do_sock_setsockopt+0x17c/0x1b0
[  952.779105][  T881]  __x64_sys_setsockopt+0x13f/0x1b0
[  952.779122][  T881]  do_syscall_64+0xfa/0x3b0
[  952.779133][  T881]  ? lockdep_hardirqs_on+0x9c/0x150
[  952.779150][  T881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  952.779161][  T881]  ? exc_page_fault+0x9f/0xf0
[  952.779179][  T881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  952.779190][  T881] RIP: 0033:0x7fe6e5d8ebe9
[  952.779204][  T881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  952.779214][  T881] RSP: 002b:00007fe6e6ce8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  952.779229][  T881] RAX: ffffffffffffffda RBX: 00007fe6e5fc5fa0 RCX: 00007fe6e5d8ebe9
[  952.779238][  T881] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  952.779245][  T881] RBP: 00007fe6e5e11e19 R08: 0000000000000004 R09: 0000000000000000
[  952.779252][  T881] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  952.779259][  T881] R13: 00007fe6e5fc6038 R14: 00007fe6e5fc5fa0 R15: 00007ffe606e3bb8
[  952.779279][  T881]  </TASK>
[  952.779284][  T881] Mem-Info:
[  952.902490][  T881] active_anon:5675 inactive_anon:18 isolated_anon:0
[  952.902490][  T881]  active_file:2190 inactive_file:38584 isolated_file:0
[  952.902490][  T881]  unevictable:1784 dirty:214 writeback:0
[  952.902490][  T881]  slab_reclaimable:10125 slab_unreclaimable:52906
[  952.902490][  T881]  mapped:20658 shmem:2427 pagetables:1010
[  952.902490][  T881]  sec_pagetables:0 bounce:0
[  952.902490][  T881]  kernel_misc_reclaimable:0
[  952.902490][  T881]  free:287238 free_pcp:25363 free_cma:0
[  952.918954][  T881] Node 0 active_anon:11636kB inactive_anon:0kB active_file:5660kB inactive_file:140256kB unevictable:3568kB isolated(anon):0kB isolated(file):0kB mapped:51340kB dirty:440kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6092kB pagetables:2360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  952.931105][  T881] Node 1 active_anon:11064kB inactive_anon:72kB active_file:3100kB inactive_file:14080kB unevictable:3568kB isolated(anon):0kB isolated(file):0kB mapped:31292kB dirty:416kB writeback:0kB shmem:5748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:7992kB pagetables:1680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  952.943994][  T881] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  952.956290][  T881] lowmem_reserve[]: 0 811 811 811 811
[  952.958670][  T881] Node 0 DMA32 free:253692kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11636kB inactive_anon:0kB active_file:5660kB inactive_file:140256kB unevictable:3568kB writepending:440kB present:1556484kB managed:830928kB mlocked:32kB bounce:0kB free_pcp:47572kB local_pcp:13252kB free_cma:0kB
[  952.972005][  T881] lowmem_reserve[]: 0 0 0 0 0
[  952.974134][  T881] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  952.985964][  T881] lowmem_reserve[]: 0 0 854 854 854
[  952.987844][  T881] Node 1 Normal free:419236kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11064kB inactive_anon:72kB active_file:3100kB inactive_file:14080kB unevictable:3568kB writepending:416kB present:1048576kB managed:874952kB mlocked:32kB bounce:0kB free_pcp:53952kB local_pcp:36528kB free_cma:0kB
[  953.030543][  T881] lowmem_reserve[]: 0 0 0 0 0
[  953.033118][  T881] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  953.038512][  T881] Node 0 DMA32: 1051*4kB (UME) 628*8kB (UME) 153*16kB (UME) 501*32kB (UME) 307*64kB (UME) 218*128kB (UME) 61*256kB (UME) 50*512kB (UME) 14*1024kB (UME) 5*2048kB (UM) 28*4096kB (UM) = 255740kB
[  953.090228][  T881] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  953.099096][  T881] Node 1 Normal: 281*4kB (UME) 499*8kB (UME) 513*16kB (UME) 540*32kB (UME) 438*64kB (UME) 143*128kB (UME) 125*256kB (UME) 34*512kB (UME) 12*1024kB (UME) 7*2048kB (UME) 65*4096kB (UM) = 419212kB
[  953.139815][  T897] veth0: entered promiscuous mode
[  953.148407][  T881] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  953.152430][  T881] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  953.157388][  T881] 43219 total pagecache pages
[  953.159796][  T881] 18 pages in swap cache
[  953.161725][  T881] Free swap  = 124924kB
[  953.163282][  T881] Total swap = 124996kB
[  953.165020][  T881] 786301 pages RAM
[  953.166401][  T881] 0 pages HighMem/MovableOnly
[  953.168329][  T881] 241337 pages reserved
[  953.170247][  T881] 0 pages cma reserved
[  953.262546][  T894] veth0: left promiscuous mode
[  953.281552][  T902] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  953.765336][  T941] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  953.982201][  T950] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000
[  956.053789][  T998] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  956.102874][  T997] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  958.322145][ T1100] delete_channel: no stack
[  958.514497][ T1122] veth0: entered promiscuous mode
[  958.636144][ T1121] veth0: left promiscuous mode
[  959.538585][ T1157] pimreg: entered allmulticast mode
[  959.575432][ T1156] pimreg: left allmulticast mode
[  961.664060][ T1214] hsr0: entered promiscuous mode
[  961.718034][ T1213] hsr0: left promiscuous mode
[  962.201861][ T1241] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  962.643711][ T1257] dvmrp0: entered allmulticast mode
[  965.278434][ T1287] ubi: mtd0 is already attached to ubi0
[  965.885583][ T1304] veth0: entered promiscuous mode
[  965.962008][ T1301] veth0: left promiscuous mode
[  966.001166][ T1311] sock: sock_set_timeout: `syz.2.24803' (pid 1311) tries to set negative timeout
[  968.041892][ T1413] veth0: entered promiscuous mode
[  968.148895][ T1409] veth0: left promiscuous mode
[  968.532245][ T1423] veth0: entered promiscuous mode
[  968.648237][ T1422] veth0: left promiscuous mode
[  968.917935][ T1443] sock: sock_timestamping_bind_phc: sock not bind to device
[  969.584528][ T1473] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20000
[  970.520426][ T1506] veth0_vlan: entered allmulticast mode
[  970.860495][  T972] delete_channel: no stack
[  971.012514][ T1519] veth0: entered promiscuous mode
[  971.136687][ T1518] veth0: left promiscuous mode
[  972.264887][ T1555] dvmrp0: entered allmulticast mode
[  972.289366][ T1554] dvmrp0: left allmulticast mode
[  974.333111][ T1596] dvmrp0: entered allmulticast mode
[  974.347699][ T1596] ubi: mtd0 is already attached to ubi0
[  975.190988][ T1616] IPVS: ip_vs_add_dest(): server weight less than zero
[  975.733768][ T1607] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  975.736449][ T1607] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  975.739076][ T1607] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  976.974730][T22681] Bluetooth: hci0: command 0x0c1a tx timeout
[  977.760518][T22681] Bluetooth: hci2: command 0x0c1a tx timeout
[  977.760540][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[  977.772579][ T3316] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  977.777211][ T3315] IPVS: stopping master sync thread 3316 ...
[  977.835490][ T3318] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  978.212677][ T3324] can: request_module (can-proto-0) failed.
[  978.340288][ T7502] delete_channel: no stack
[  980.312545][ T3402] dvmrp0: entered allmulticast mode
[  981.012966][ T3421] dvmrp0: left allmulticast mode
[  981.014732][ T3421] veth0_vlan: left allmulticast mode
[  981.948290][ T3455] pimreg: entered allmulticast mode
[  982.109039][ T3474] veth0: entered promiscuous mode
[  982.115039][ T3473] veth0: left promiscuous mode
[  984.127729][ T3518] syz_tun: entered allmulticast mode
[  984.784014][ T3538] pim6reg9: entered allmulticast mode
[  987.597486][ T3597] ipvlan0: entered promiscuous mode
[  987.649320][ T3596] ipvlan0: left promiscuous mode
[  988.230416][ T3606] dvmrp0: left allmulticast mode
[  989.909526][ T3633] ipvlan0: entered promiscuous mode
[  989.952248][ T3632] ipvlan0: left promiscuous mode
[  992.828424][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  992.831567][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  995.999906][ T3789] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  996.173194][ T3791] delete_channel: no stack
[  996.481248][ T3797] ipvlan0: entered promiscuous mode
[  996.483777][ T3796] ipvlan0: left promiscuous mode
[  996.726602][ T3805] misc userio: Invalid payload size
[  997.404746][ T3810] delete_channel: no stack
[  997.734774][ T3822] pim6reg: left allmulticast mode
[ 1002.674738][ T3974] random: crng reseeded on system resumption
[ 1002.693896][ T3974] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1002.836632][ T3983] random: crng reseeded on system resumption
[ 1004.513515][ T4038] geneve0: entered promiscuous mode
[ 1004.518642][ T4037] geneve0: left promiscuous mode
[ 1005.114860][ T4062] pimreg3: entered allmulticast mode
[ 1006.077608][ T4093] veth0_to_bridge: entered promiscuous mode
[ 1006.496987][ T4092] veth0_to_bridge: left promiscuous mode
[ 1009.440527][ T4161] ubi0: detaching mtd0
[ 1009.512297][ T4161] ubi0: mtd0 is detached
[ 1010.853199][ T4207] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002
[ 1011.377836][ T4227] pimreg: entered allmulticast mode
[ 1011.381878][ T4227] pimreg: left allmulticast mode
[ 1014.108387][ T4316] can: request_module (can-proto-0) failed.
[ 1016.728308][ T4436] syz_tun: left allmulticast mode
[ 1016.730624][ T4436] pimreg: left allmulticast mode
[ 1019.220269][ T4496] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003
[ 1020.402102][ T4531] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[ 1024.035336][ T4612] pimreg: entered allmulticast mode
[ 1024.730287][ T4638] IPVS: stopping backup sync thread 28849 ...
[ 1028.015154][ T4712] delete_channel: no stack
[ 1028.435693][ T4727] pimreg: left allmulticast mode
[ 1028.542591][ T4729] can: request_module (can-proto-4) failed.
[ 1030.434829][ T4787] can: request_module (can-proto-4) failed.
[ 1032.506218][ T4854] can: request_module (can-proto-4) failed.
[ 1032.555446][ T4850] veth0_to_bridge: entered promiscuous mode
[ 1032.670447][ T4849] veth0_to_bridge: left promiscuous mode
[ 1032.932769][ T4871] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20000
[ 1033.819797][ T4902] bond_slave_0: entered promiscuous mode
[ 1033.836168][ T4901] bond_slave_0: left promiscuous mode
[ 1033.991787][ T4912] af_packet: tpacket_rcv: packet too big, clamped from 1294 to 4294967286. macoff=82
[ 1034.551624][ T4930] pim6reg: left allmulticast mode
[ 1039.112488][ T5027] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[ 1040.449931][ T5064] delete_channel: no stack
[ 1041.004647][ T5083] sock: sock_set_timeout: `syz.1.25529' (pid 5083) tries to set negative timeout
[ 1042.280874][ T5122] pimreg: entered allmulticast mode
[ 1042.293285][ T5122] pimreg: left allmulticast mode
[ 1043.181311][ T5145] dvmrp1: entered allmulticast mode
[ 1043.356655][ T5156] delete_channel: no stack
[ 1045.000739][ T5616] veth0: entered promiscuous mode
[ 1045.060884][ T5549] veth0: left promiscuous mode
[ 1046.987053][ T6359] ipvlan0: entered promiscuous mode
[ 1047.042068][ T6358] ipvlan0: left promiscuous mode
[ 1048.647821][ T6399] veth0: entered promiscuous mode
[ 1048.655318][ T6398] veth0: left promiscuous mode
[ 1050.623867][ T6461] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000
[ 1053.820681][ T6550] vlan0: entered promiscuous mode
[ 1053.828505][ T6549] vlan0: left promiscuous mode
[ 1054.243908][ T6560] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1054.247487][ T6560] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1054.255882][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.256939][ T6560] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1054.259400][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.260689][ T6570] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1055.264523][ T6570] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1055.267498][ T6570] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1055.747292][ T6611] syz_tun: entered allmulticast mode
[ 1056.570539][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1057.280563][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1057.288570][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1058.293920][ T6645] IPVS: set_ctl: invalid protocol: 25647 47.112.112.112:0
[ 1062.119459][ T6715] delete_channel: no stack
[ 1065.436123][ T6826] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1065.496094][ T6825] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 1072.580838][ T7037] dvmrp1: left allmulticast mode
[ 1073.470440][ T7046] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1073.473288][ T7046] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1073.475942][ T7046] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1074.023690][ T7058] IPVS: set_ctl: invalid protocol: 8 172.20.20.53:20000
[ 1074.026916][ T7057] delete_channel: no stack
[ 1074.224387][ T7070] ubi0: attaching mtd0
[ 1074.226780][ T7070] ubi0: scanning is finished
[ 1074.296791][ T7070] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1074.299785][ T7070] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1074.302627][ T7070] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1074.305438][ T7070] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1074.308415][ T7070] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1074.311414][ T7070] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1074.314759][ T7070] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1765372418
[ 1074.319061][ T7070] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1074.327739][ T7072] ubi0: background thread "ubi_bgt0d" started, PID 7072
[ 1075.520288][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1075.520836][ T6635] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1075.522891][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1077.121638][ T7855] dvmrp5: entered allmulticast mode
[ 1077.442097][ T7859] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1077.503191][ T7858] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[ 1078.248554][ T7898] delete_channel: no stack
[ 1078.256611][ T7898] delete_channel: no stack
[ 1078.846197][ T7924] ip6gretap0: entered promiscuous mode
[ 1078.848428][ T7923] ip6gretap0: left promiscuous mode
[ 1079.631661][   T33] audit: type=1800 audit(1756907307.320:14): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25909" name="bus" dev="tmpfs" ino=44227 res=0 errno=0
[ 1080.517569][ T8003] lo: entered promiscuous mode
[ 1080.545331][ T8002] lo: left promiscuous mode
[ 1083.288266][ T8071] can: request_module (can-proto-4) failed.
[ 1084.178023][ T8092] bond_slave_0: entered promiscuous mode
[ 1084.185917][ T8090] bond_slave_0: left promiscuous mode
[ 1084.193935][ T8093] pimreg: entered allmulticast mode
[ 1084.197067][ T8093] pimreg: left allmulticast mode
[ 1084.784272][ T8121] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000
[ 1084.795584][ T8119] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000
[ 1087.342822][ T8188] ipvlan1: entered promiscuous mode
[ 1087.358897][ T8187] ipvlan1: left promiscuous mode
[ 1089.128125][ T8231] random: crng reseeded on system resumption
[ 1095.037801][ T8391] dummy0: entered allmulticast mode
[ 1095.103116][ T8397] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000
[ 1095.108597][ T8397] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20004
[ 1097.924264][ T8480] delete_channel: no stack
[ 1098.294829][ T8486] lo: entered allmulticast mode
[ 1098.349670][ T8485] lo: left allmulticast mode
[ 1099.587667][ T8529] IPVS: ip_vs_edit_dest(): server weight less than zero
[ 1100.727058][ T8565] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1100.856069][ T8574] delete_channel: no stack
[ 1102.689171][ T8619] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[ 1102.692304][ T8618] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[ 1104.774257][ T8717] IPVS: stopping backup sync thread 20797 ...
[ 1107.289490][ T8816] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1107.293471][ T8803] ubi: mtd0 is already attached to ubi0
[ 1107.315663][ T8819] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[ 1108.950688][ T8877] binder_alloc: binder_alloc_mmap_handler: 8876 200000ffd000-200000ffe000 already mapped failed -16
[ 1112.107638][ T8988] random: crng reseeded on system resumption
[ 1113.680474][ T9074] can: request_module (can-proto-4) failed.
[ 1114.160839][ T9099] ubi: mtd0 is already attached to ubi0
[ 1114.713048][ T9129] ubi: mtd0 is already attached to ubi0
[ 1115.111343][ T9140] geneve1: entered promiscuous mode
[ 1115.126490][ T9139] geneve1: left promiscuous mode
[ 1115.684385][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.688314][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.209648][ T9155] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1116.212596][ T9155] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1116.215445][ T9155] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1117.217735][ T9216] veth0: entered promiscuous mode
[ 1117.416311][ T9211] veth0: left promiscuous mode
[ 1117.521734][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1118.240614][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1118.243310][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1119.459258][ T9272] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1125.244867][ T9438] ubi0: detaching mtd0
[ 1125.251560][ T9438] ubi0: mtd0 is detached
[ 1125.344299][ T9444] dvmrp0: entered allmulticast mode
[ 1125.446412][ T9451] dvmrp1: entered allmulticast mode
[ 1126.445461][ T9470] delete_channel: no stack
[ 1127.105679][ T9494] delete_channel: no stack
[ 1127.657563][ T9533] veth0: entered promiscuous mode
[ 1127.752731][ T9525] veth0: left promiscuous mode
[ 1128.734486][ T9568] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003
[ 1129.487948][ T9604] veth0: entered promiscuous mode
[ 1129.532383][ T9601] veth0: left promiscuous mode
[ 1129.568129][ T9609] random: crng reseeded on system resumption
[ 1130.302427][ T9660] veth0: entered promiscuous mode
[ 1130.627554][ T9655] veth0: left promiscuous mode
[ 1130.763801][ T9681] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1132.279166][ T9747] delete_channel: no stack
[ 1132.564738][ T9758] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001
[ 1134.122154][ T9801] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1134.126310][ T9801] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1134.131593][ T9801] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1134.336875][ T9828] dvmrp1: entered allmulticast mode
[ 1134.348356][ T9832] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 1134.348603][ T9827] IPVS: stopping master sync thread 9832 ...
[ 1135.347299][ T9861] sock: sock_set_timeout: `syz.1.26545' (pid 9861) tries to set negative timeout
[ 1135.360867][T22681] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1135.553499][ T9868] dvmrp1: left allmulticast mode
[ 1135.649280][ T9872] random: crng reseeded on system resumption
[ 1136.165407][T22681] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1136.168107][T22681] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1136.305257][ T9896] random: crng reseeded on system resumption
[ 1136.886789][ T9903] veth0: entered promiscuous mode
[ 1137.259399][ T9902] veth0: left promiscuous mode
[ 1138.408282][ T9959] veth0: entered promiscuous mode
[ 1138.699528][ T9952] veth0: left promiscuous mode
[ 1139.477247][ T9993] sock: sock_set_timeout: `syz.2.26584' (pid 9993) tries to set negative timeout
[ 1139.589910][ T9997] pim6reg: entered allmulticast mode
[ 1140.871234][T10032] random: crng reseeded on system resumption
[ 1141.145805][T10048] ubi0: attaching mtd0
[ 1141.149643][T10048] ubi0: scanning is finished
[ 1141.268078][T10048] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1141.271422][T10048] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1141.274772][T10048] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1141.277782][T10048] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1141.282206][T10048] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1141.285190][T10048] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1141.299188][T10048] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1765372418
[ 1141.330315][T10048] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1141.334884][T10053] ubi0: background thread "ubi_bgt0d" started, PID 10053
[ 1141.975104][T10064] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[ 1141.983889][T10062] IPVS: stopping backup sync thread 10064 ...
[ 1141.992449][T10065] ubi: mtd0 is already attached to ubi0
[ 1142.107670][T10070] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20002
[ 1142.915793][T10106] sock: sock_set_timeout: `syz.2.26619' (pid 10106) tries to set negative timeout
[ 1145.842871][T10205] dvmrp0: left allmulticast mode
[ 1145.845269][T10205] dvmrp1: left allmulticast mode
[ 1146.090887][T10216] ipvlan0: entered promiscuous mode
[ 1146.094089][T10215] ipvlan0: left promiscuous mode
[ 1146.682314][T10242] random: crng reseeded on system resumption
[ 1149.334511][T10330] bond_slave_0: entered promiscuous mode
[ 1149.985198][T10320] bond_slave_0: left promiscuous mode
[ 1151.873531][T10413] random: crng reseeded on system resumption
[ 1152.561547][T10438] pim6reg: entered allmulticast mode
[ 1152.570698][T10438] pim6reg: left allmulticast mode
[ 1154.685817][T10487] veth0: entered promiscuous mode
[ 1154.921933][T10486] veth0: left promiscuous mode
[ 1158.526377][T10583] dvmrp0: left allmulticast mode
[ 1159.770818][T10629] IPVS: set_ctl: invalid protocol: 9 172.20.20.170:20004
[ 1159.988333][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.006236][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.023562][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.042985][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.046280][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.049307][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.070024][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.084314][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.095943][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.120320][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.130789][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.141746][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.161667][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.168278][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.178448][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.188590][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.192525][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.195402][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.198470][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.211243][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.220475][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.223559][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.230725][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.233772][T10647] IPVS: set_ctl: invalid protocol: 11609 172.30.1.3:20003
[ 1160.564463][T10647] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1163.606315][T10744] can: request_module (can-proto-0) failed.
[ 1165.889901][T10813] ubi: mtd0 is already attached to ubi0
[ 1167.842463][T10871] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1167.851976][T10871] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1167.876912][T10871] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1168.270488][T10886] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003
[ 1169.852376][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1169.946217][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1169.948853][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1172.207612][T11019] delete_channel: no stack
[ 1173.889516][T11070] random: crng reseeded on system resumption
[ 1175.913963][T11174] macvlan1: entered promiscuous mode
[ 1176.646676][T11173] macvlan1: left promiscuous mode
[ 1177.125078][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.133182][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.408291][T11217] veth0: entered promiscuous mode
[ 1177.412393][T11217] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[ 1177.419461][T11215] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[ 1177.432481][T11215] veth0: left promiscuous mode
[ 1177.785113][T11216] delete_channel: no stack
[ 1177.997972][T11235] random: crng reseeded on system resumption
[ 1178.102421][T11244] lo: entered promiscuous mode
[ 1178.362583][T11242] lo: left promiscuous mode
[ 1181.208913][T11355] macvlan1: entered promiscuous mode
[ 1181.212687][T11354] macvlan1: left promiscuous mode
[ 1181.740531][T11379] delete_channel: no stack
[ 1181.787320][T11378] delete_channel: no stack
[ 1183.392287][   T33] audit: type=1800 audit(1756907411.080:15): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27056" name="file1" dev="tmpfs" ino=45194 res=0 errno=0
[ 1183.707568][T11446] sock: sock_set_timeout: `syz.0.27060' (pid 11446) tries to set negative timeout
[ 1184.787415][T11479] pim6reg: entered allmulticast mode
[ 1185.866181][T11527] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1185.877365][T11526] IPVS: stopping backup sync thread 11527 ...
[ 1189.283049][T11631] dvmrp0: entered allmulticast mode
[ 1189.288904][T11631] ubi: mtd0 is already attached to ubi0
[ 1189.516821][T11642] ip6gretap0: entered promiscuous mode
[ 1189.529842][T11641] ip6gretap0: left promiscuous mode
[ 1195.490836][T11812] syz_tun: left allmulticast mode
[ 1195.493159][T11812] dummy0: left allmulticast mode
[ 1195.495285][T11812] dvmrp5: left allmulticast mode
[ 1197.119206][T11864] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffd000-200001000000 already mapped failed -16
[ 1197.131301][T11865] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffe000-200001000000 already mapped failed -16
[ 1197.137616][T11865] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffe000-200001000000 already mapped failed -16
[ 1197.144041][T11864] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffd000-200001000000 already mapped failed -16
[ 1197.149222][T11864] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffd000-200001000000 already mapped failed -16
[ 1197.159318][T11865] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffe000-200001000000 already mapped failed -16
[ 1197.164790][T11864] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffd000-200001000000 already mapped failed -16
[ 1197.173585][T11865] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffe000-200001000000 already mapped failed -16
[ 1197.184119][T11864] binder_alloc: binder_alloc_mmap_handler: 11863 200000ffd000-200001000000 already mapped failed -16
[ 1198.210065][T11908] binder: binder_mmap: 11907 200000ffb000-200000ffd000 bad vm_flags failed -1
[ 1199.406248][T11969] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1200.655631][T12009] dvmrp0: entered allmulticast mode
[ 1200.675684][T12008] delete_channel: no stack
[ 1204.540348][T12133] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1206.580363][T12191] veth0: entered promiscuous mode
[ 1206.584263][T12191] veth0: left promiscuous mode
[ 1207.541934][T12213] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20002
[ 1210.959983][T12317] dvmrp5: entered allmulticast mode
[ 1211.033214][T12321] pimreg: entered allmulticast mode
[ 1216.269604][T12496] veth0: entered promiscuous mode
[ 1216.299471][T12495] veth0: left promiscuous mode
[ 1224.412933][T12745] IPVS: stopping backup sync thread 5027 ...
[ 1225.618765][T12773] delete_channel: no stack
[ 1226.861168][T12809] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[ 1230.869739][T12934] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1230.873507][T12934] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1230.876202][T12934] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1232.240659][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1232.508609][T13026] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[ 1232.524641][T13024] IPVS: stopping backup sync thread 13026 ...
[ 1232.833160][T13041] sctp: [Deprecated]: syz.0.27588 (pid 13041) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1232.833160][T13041] Use struct sctp_sack_info instead
[ 1232.880539][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1232.883268][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1233.490508][T13053] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1234.900577][T13085] can: request_module (can-proto-4) failed.
[ 1238.580402][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.582876][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 1242.595979][T13257] geneve1: entered promiscuous mode
[ 1242.607935][T13256] geneve1: left promiscuous mode
[ 1242.879474][T13268] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[ 1246.197506][   T33] audit: type=1804 audit(1756907473.880:16): pid=13334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.27688" name="/newroot/9335/file1" dev="tmpfs" ino=47756 res=1 errno=0
[ 1249.577942][T13383] delete_channel: no stack
[ 1249.846909][T13398] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004
[ 1250.612628][T13417] veth0: entered promiscuous mode
[ 1250.618853][T13416] veth0: left promiscuous mode
[ 1252.425168][T13452] veth0: entered promiscuous mode
[ 1253.251669][T13451] veth0: left promiscuous mode
[ 1255.082725][T13585] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[ 1255.085717][T13585] IPVS: set_ctl: invalid protocol: 12078 108.101.48.0:5
[ 1255.088812][T13585] IPVS: set_ctl: invalid protocol: 12078 108.101.48.0:5
[ 1257.353501][T13635] syz_tun: entered allmulticast mode
[ 1257.397028][T13634] syz_tun: left allmulticast mode
[ 1257.572332][T13649] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1257.801654][T13654] dvmrp0: left allmulticast mode
[ 1259.108009][T13665] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1259.111830][T13665] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1259.114592][T13665] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1260.320397][T22681] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1261.120788][T22681] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1261.120842][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1261.656462][T13771] ip6gretap0: entered promiscuous mode
[ 1261.659592][T13770] ip6gretap0: left promiscuous mode
[ 1264.815741][T13814] tipc: Trying to set illegal importance in message
[ 1266.770941][T13862] syzkaller0: entered allmulticast mode
[ 1266.781370][T13862] syzkaller0 (unregistering): left allmulticast mode
[ 1267.187327][T13878] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[ 1267.208697][T13877] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[ 1267.415933][T13890] tipc: Trying to set illegal importance in message
[ 1267.744770][T13904] IPVS: set_ctl: invalid protocol: 33 172.30.0.3:20004
[ 1269.324810][T13940] IPVS: set_ctl: invalid protocol: 34 172.20.20.66:20003
[ 1269.874671][T13979] delete_channel: no stack
[ 1270.837354][T13994] ip6gretap0: entered promiscuous mode
[ 1271.093351][T13993] ip6gretap0: left promiscuous mode
[ 1272.248560][T14082] bond_slave_0: entered promiscuous mode
[ 1272.407239][T14081] bond_slave_0: left promiscuous mode
[ 1273.077292][T14105] tipc: Trying to set illegal importance in message
[ 1273.117205][T14109] IPVS: set_ctl: invalid protocol: 18 172.20.20.24:20003
[ 1274.842444][T14170] can: request_module (can-proto-4) failed.
[ 1275.616143][T14190] gretap0: entered allmulticast mode
[ 1277.869412][   T33] audit: type=1800 audit(1756907505.530:17): pid=14248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28001" name="file1" dev="tmpfs" ino=46687 res=0 errno=0
[ 1278.117791][T14255] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1278.416264][T14265] pim6reg: entered allmulticast mode
[ 1284.246331][T14419] sctp: [Deprecated]: syz.2.28052 (pid 14419) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1284.246331][T14419] Use struct sctp_sack_info instead
[ 1287.205691][T14539] veth0: entered promiscuous mode
[ 1287.232403][T14538] veth0: left promiscuous mode
[ 1287.608900][T14550] delete_channel: no stack
[ 1289.077707][   T33] audit: type=1804 audit(1756907516.760:18): pid=14594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.28110" name="/newroot/9480/file1" dev="tmpfs" ino=48494 res=1 errno=0
[ 1289.120247][   T33] audit: type=1804 audit(1756907516.760:19): pid=14594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.28110" name="/newroot/9480/file1" dev="tmpfs" ino=48494 res=1 errno=0
[ 1292.331485][T14667] tipc: Trying to set illegal importance in message
[ 1295.549095][T14747] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001
[ 1296.897310][T14797] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000
[ 1296.924925][T14797] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001
[ 1296.928536][T14797] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001
[ 1296.933438][T14797] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000
[ 1296.937132][T14797] IPVS: set_ctl: invalid protocol: 189 172.20.20.187:20001
[ 1296.942942][T14797] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20004
[ 1298.680949][T28532] ------------[ cut here ]------------
[ 1298.684192][T28532] WARNING: CPU: 1 PID: 28532 at io_uring/io_uring.c:2982 io_ring_exit_work+0x4ed/0x930
[ 1298.688546][T28532] Modules linked in:
[ 1298.690822][T28532] CPU: 1 UID: 0 PID: 28532 Comm: kworker/u10:53 Not tainted syzkaller #0 PREEMPT(full) 
[ 1298.695681][T28532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1298.699747][T28532] Workqueue: iou_exit io_ring_exit_work
[ 1298.702584][T28532] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1298.705845][T28532] Code: c6 05 d8 f2 61 0e 01 48 c7 c7 60 62 e2 8b be 24 00 00 00 48 c7 c2 00 62 e2 8b e8 2e 1f 72 00 e9 7b fe ff ff e8 04 45 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1298.713846][T28532] RSP: 0018:ffffc90004fdf8e0 EFLAGS: 00010293
[ 1298.716439][T28532] RAX: ffffffff812b690c RBX: 000000010001857c RCX: ffff888108769cc0
[ 1298.720392][T28532] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000
[ 1298.723877][T28532] RBP: ffffc90004fdfa70 R08: ffffc90004fdf867 R09: 1ffff920009fbf0c
[ 1298.727712][T28532] R10: dffffc0000000000 R11: fffff520009fbf0d R12: 0000000100018579
[ 1298.731078][T28532] R13: ffff8881067fe310 R14: ffff8881067fe480 R15: dffffc0000000000
[ 1298.735628][T28532] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[ 1298.740699][T28532] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1298.744663][T28532] CR2: 00007ffe8f3c2d88 CR3: 000000000df36000 CR4: 00000000000006f0
[ 1298.748931][T28532] Call Trace:
[ 1298.751047][T28532]  <TASK>
[ 1298.752690][T28532]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1298.754917][T28532]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1298.758238][T28532]  ? process_scheduled_works+0x9ef/0x17b0
[ 1298.761074][T28532]  ? process_scheduled_works+0x9ef/0x17b0
[ 1298.763458][T28532]  process_scheduled_works+0xae1/0x17b0
[ 1298.765798][T28532]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1298.768308][T28532]  worker_thread+0x8a0/0xda0
[ 1298.770551][T28532]  kthread+0x711/0x8a0
[ 1298.772598][T28532]  ? __pfx_worker_thread+0x10/0x10
[ 1298.774836][T28532]  ? __pfx_kthread+0x10/0x10
[ 1298.776896][T28532]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1298.779199][T28532]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1298.781701][T28532]  ? __pfx_kthread+0x10/0x10
[ 1298.783722][T28532]  ret_from_fork+0x3fc/0x770
[ 1298.785722][T28532]  ? __pfx_ret_from_fork+0x10/0x10
[ 1298.787956][T28532]  ? __switch_to_asm+0x39/0x70
[ 1298.790073][T28532]  ? __switch_to_asm+0x33/0x70
[ 1298.792286][T28532]  ? __pfx_kthread+0x10/0x10
[ 1298.794307][T28532]  ret_from_fork_asm+0x1a/0x30
[ 1298.796417][T28532]  </TASK>
[ 1298.797747][T28532] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1298.800824][T28532] CPU: 1 UID: 0 PID: 28532 Comm: kworker/u10:53 Not tainted syzkaller #0 PREEMPT(full) 
[ 1298.804900][T28532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1298.809256][T28532] Workqueue: iou_exit io_ring_exit_work
[ 1298.811722][T28532] Call Trace:
[ 1298.813152][T28532]  <TASK>
[ 1298.814343][T28532]  dump_stack_lvl+0x99/0x250
[ 1298.816307][T28532]  ? __asan_memcpy+0x40/0x70
[ 1298.818231][T28532]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1298.820471][T28532]  ? __pfx__printk+0x10/0x10
[ 1298.822408][T28532]  vpanic+0x281/0x750
[ 1298.824027][T28532]  ? __pfx__printk+0x10/0x10
[ 1298.826269][T28532]  ? __pfx_vpanic+0x10/0x10
[ 1298.828315][T28532]  ? is_bpf_text_address+0x26/0x2b0
[ 1298.830363][T28532]  panic+0xb9/0xc0
[ 1298.831973][T28532]  ? __pfx_panic+0x10/0x10
[ 1298.833859][T28532]  __warn+0x31b/0x4b0
[ 1298.835492][T28532]  ? io_ring_exit_work+0x4ed/0x930
[ 1298.837697][T28532]  ? io_ring_exit_work+0x4ed/0x930
[ 1298.839979][T28532]  report_bug+0x2be/0x4f0
[ 1298.842795][T28532]  ? io_ring_exit_work+0x4ed/0x930
[ 1298.846094][T28532]  ? io_ring_exit_work+0x4ed/0x930
[ 1298.848376][T28532]  ? io_ring_exit_work+0x4ef/0x930
[ 1298.850613][T28532]  handle_bug+0x84/0x160
[ 1298.852523][T28532]  exc_invalid_op+0x1a/0x50
[ 1298.854906][T28532]  asm_exc_invalid_op+0x1a/0x20
[ 1298.857934][T28532] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1298.861388][T28532] Code: c6 05 d8 f2 61 0e 01 48 c7 c7 60 62 e2 8b be 24 00 00 00 48 c7 c2 00 62 e2 8b e8 2e 1f 72 00 e9 7b fe ff ff e8 04 45 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1298.870717][T28532] RSP: 0018:ffffc90004fdf8e0 EFLAGS: 00010293
[ 1298.873405][T28532] RAX: ffffffff812b690c RBX: 000000010001857c RCX: ffff888108769cc0
[ 1298.876834][T28532] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000
[ 1298.880418][T28532] RBP: ffffc90004fdfa70 R08: ffffc90004fdf867 R09: 1ffff920009fbf0c
[ 1298.884658][T28532] R10: dffffc0000000000 R11: fffff520009fbf0d R12: 0000000100018579
[ 1298.888160][T28532] R13: ffff8881067fe310 R14: ffff8881067fe480 R15: dffffc0000000000
[ 1298.891566][T28532]  ? io_ring_exit_work+0x4ec/0x930
[ 1298.893944][T28532]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1298.896560][T28532]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1298.898690][T28532]  ? process_scheduled_works+0x9ef/0x17b0
[ 1298.901095][T28532]  ? process_scheduled_works+0x9ef/0x17b0
[ 1298.903799][T28532]  process_scheduled_works+0xae1/0x17b0
[ 1298.906546][T28532]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1298.909035][T28532]  worker_thread+0x8a0/0xda0
[ 1298.911039][T28532]  kthread+0x711/0x8a0
[ 1298.912768][T28532]  ? __pfx_worker_thread+0x10/0x10
[ 1298.914900][T28532]  ? __pfx_kthread+0x10/0x10
[ 1298.917040][T28532]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1298.919369][T28532]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1298.921759][T28532]  ? __pfx_kthread+0x10/0x10
[ 1298.923858][T28532]  ret_from_fork+0x3fc/0x770
[ 1298.925983][T28532]  ? __pfx_ret_from_fork+0x10/0x10
[ 1298.928132][T28532]  ? __switch_to_asm+0x39/0x70
[ 1298.930720][T28532]  ? __switch_to_asm+0x33/0x70
[ 1298.932816][T28532]  ? __pfx_kthread+0x10/0x10
[ 1298.934819][T28532]  ret_from_fork_asm+0x1a/0x30
[ 1298.936904][T28532]  </TASK>
[ 1298.938987][T28532] Kernel Offset: disabled
[ 1298.940854][T28532] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:52:06  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff84894329 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888022241cc0
RSI=0000000000000000 RDI=ffff88802a8950b8 RBP=ffffc9000178f888 RSP=ffffc9000178f598
R8 =ffffc9000178f4af R9 =0000000000000000 R10=ffffc9000178f4a0 R11=fffff520002f1e96
R12=ffff88802a8950b8 R13=ffff88802a894fe0 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff8b7b9a90 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9cce608380 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000001f732000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=00000000000000ff 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004fdf090
R8 =ffff8880212c8237 R9 =1ffff11004259046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8e3 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe8f3c2d88 CR3=0000000028c36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f024b612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
