last executing test programs:

2m22.561970202s ago: executing program 1 (id=3459):
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x9602, 0x1, 0x0, 0x34d}, &(0x7f0000000480)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = io_uring_setup(0x1441, &(0x7f0000000000)={0x0, 0x9e69, 0x40, 0x1, 0x226, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x89dd5ec0d6538e71, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x10000000)

2m22.526970056s ago: executing program 1 (id=3460):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
accept(r3, 0x0, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2m22.190049338s ago: executing program 1 (id=3463):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000006c0)={0x7, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/185, 0xb9}, {&(0x7f00000002c0)=""/183, 0xb7}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000005c0)=""/183, 0xb7}], &(0x7f0000000680)=[0xffff0000, 0x2, 0x8000000000000001, 0xfff, 0xba0]}, 0x20)
r5 = accept$packet(r4, &(0x7f0000000740), &(0x7f0000000780)=0x14)
syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x41, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r9=>0x0})
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000000c0)=@can={0x1d, r9}})
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000007c0)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
r10 = syz_io_uring_complete(r2)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000700)=r10, 0x1)

2m21.780969783s ago: executing program 1 (id=3465):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad4, 0x0, 0x0, 0x80}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x800, 0x6)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0)
r5 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2m21.478506736s ago: executing program 1 (id=3467):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xffff8acb, @private2, 0x68a}, @in6={0xa, 0x4e20, 0xde, @mcast1, 0xc2e}], 0x38)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4b642, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) (async)
r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7738, 0x40, 0x1, 0x1b7}, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r5 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r6 = socket$packet(0x11, 0x3, 0x300) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'vlan0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000049000/0x3000)=nil, 0x3000, 0x11) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000440)=[{0x2, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/218, 0xda}, {&(0x7f00000002c0)=""/163, 0xa3}], &(0x7f00000003c0)=[0x7fffffffffffffff, 0x6f, 0xfff, 0x7fffffffffffffff, 0x7, 0xacf, 0x400]}], 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) (async)
setsockopt$inet6_int(r9, 0x29, 0x38, 0x0, 0x0) (async)
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, r0, 0x6ed9a8ac000)

2m21.295485472s ago: executing program 1 (id=3469):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32f, 0x0, r0}, &(0x7f0000000680)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) (async)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000080), 0x4)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x4)
close(r5)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async)
io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2m5.738604406s ago: executing program 32 (id=3469):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32f, 0x0, r0}, &(0x7f0000000680)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) (async)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000080), 0x4)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x4)
close(r5)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async)
io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1.450598818s ago: executing program 3 (id=4687):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7732, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async)
syz_io_uring_setup(0x69ce, &(0x7f0000000000)={0x0, 0x2a56, 0x1000, 0x1, 0x3c9, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1.340726924s ago: executing program 3 (id=4689):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7664, 0x3010, 0x1, 0x39e}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_io_uring_setup(0x34b3, &(0x7f0000000500)={0x0, 0x0, 0x30c0, 0x2, 0x2c1}, &(0x7f0000000100), &(0x7f00000000c0))
r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r6, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1.180251498s ago: executing program 3 (id=4691):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4b642, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x0, 0x40000, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00005c9000/0x2000)=nil, 0x2000, 0x1, 0x2010, r0, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1.107936093s ago: executing program 3 (id=4693):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7732, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x5, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000000)=0x3ff, 0x0, 0x4)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000240), 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x530181, 0x44)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
close(0x3)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0xc0285629, &(0x7f0000000bc0)={'hsr0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

939.436796ms ago: executing program 3 (id=4695):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080)=0x3999, 0x4)
r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0)
close(0x3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x59, @remote, 0x1}], 0x1c)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_mreq(r5, 0x0, 0x23, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040), 0x4)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x44b00, 0x0)
socket(0x22, 0x5, 0x8)
syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = syz_io_uring_setup(0x1177, &(0x7f00000002c0)={0x0, 0x29, 0x20000, 0x1, 0x20b}, &(0x7f0000000040)=<r11=>0x0, &(0x7f0000000340)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12})
setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r13, 0x29, 0x2a, 0x0, 0x88)
io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000f)

938.966671ms ago: executing program 2 (id=4696):
syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x2, 0x80}, &(0x7f00000002c0), &(0x7f0000000280)) (async)
r0 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x2, 0x80}, &(0x7f00000002c0), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$inet(0x2, 0x3, 0x8) (async)
socket$inet(0x2, 0x3, 0x8)
syz_io_uring_setup(0x10d3, &(0x7f0000000100)={0x0, 0x80633d, 0x10, 0xfffffffd, 0x17d}, &(0x7f00000000c0), &(0x7f0000000080)) (async)
r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000100)={0x0, 0x80633d, 0x10, 0xfffffffd, 0x17d}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(0x3)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x80106408, &(0x7f0000000000)) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x80106408, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f00000003c0)={0x0, 0x4b0e, 0x20000, 0x3, 0x3b, 0x0, r0}, 0x1) (async)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f00000003c0)={0x0, 0x4b0e, 0x20000, 0x3, 0x3b, 0x0, r0}, 0x1)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x484801, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a, 0x80013, r6, 0x0)
syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x2bfb, 0x2, 0x40000, 0x35c, 0x0, r5}, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000001c0))
socket$rds(0x15, 0x5, 0x0) (async)
r8 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x4, 0x0, 0x1c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000294000/0x1000)=nil, 0x1000, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
r9 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0xf}, &(0x7f0000002000)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x7fffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r9, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async)
io_uring_enter(r9, 0x48e9, 0x0, 0x2, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x575a02, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x575a02, 0x0)
eventfd(0x6)

816.875621ms ago: executing program 0 (id=4697):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7732, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 32)
r3 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0xf313, 0x0, 0x0, 0x3c}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0) (rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0xffffffc7, 0x0, 0x0, {0x1}}) (async)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

815.687653ms ago: executing program 2 (id=4698):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7732, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x541b, &(0x7f0000000040))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
close(r4)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x40045701, &(0x7f0000000000)={'syzkaller1\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

677.984896ms ago: executing program 2 (id=4699):
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x48c5, 0x1000, 0xffffffff, 0x17b}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 32)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async, rerun: 32)
r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x0, 0x0, 0x173}, &(0x7f0000000240)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async, rerun: 32)
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (rerun: 32)

672.242799ms ago: executing program 0 (id=4700):
open(&(0x7f00000001c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x89)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a002, 0x90)
r0 = socket$packet(0x11, 0xa, 0x300)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x40086602, &(0x7f0000000b40))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040), 0x4)
setsockopt(r2, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000100)=0x6a05, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x1, 0x0, 0x0, 0x1a5d7c94}, {0x7}]}, 0x10)

570.027703ms ago: executing program 0 (id=4701):
socket$kcm(0x29, 0x2, 0x0)
socket$phonet(0x23, 0x2, 0x1)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14)
socket(0xf, 0x3, 0x3a)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

400.119407ms ago: executing program 0 (id=4702):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
r3 = socket(0x2, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x2, 0x0, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async)
r4 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)

350.070692ms ago: executing program 2 (id=4703):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x40, 0x2007, @fd=r0, 0x0, &(0x7f0000000000)="5f29aa667bc635c84b454005ed02e6aade62cb254e9cef6a7466d0947dc7fff8e7a33a9a95c2ccb8d40e34c44b1ffa43edd9b51d01cce5da414e8bc5a819c2b273335bb4722390e2f2f29cf69f670c56265a581d602c686f35770ecbe7378363e84affeec5d776bfc69bba7b6876fe48073200ec695382aa3b", 0x79, 0xe})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

251.164406ms ago: executing program 2 (id=4704):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x400, 0x2, &(0x7f0000000500)="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", 0xffff, 0x0, 0x0, {0x2}})
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x8, 0x40000, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000763000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000100)=0x80003, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x24, &(0x7f0000000200)=[{0x27, 0x0, 0x0, 0x6}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x46, 0x0, 0x0, 0x9, &(0x7f0000000000)={0x77359400}, 0x1, 0x10})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

250.888026ms ago: executing program 0 (id=4705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r1, 0xffffd000)
r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x1, 0x40000, 0x1dc}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000540)="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", 0x162)
r5 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000340))
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
close(0x3)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000140)={0x2, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @private=0xffffffff}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x80045430, &(0x7f0000000bc0)={'hsr0\x00'})
r10 = syz_io_uring_complete(r6)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000000c0)={0x1, r0, 0x0, {0x5, 0x5}, 0x1}, 0x1)
syz_io_uring_setup(0x65be, &(0x7f0000000000)={0x0, 0x9636, 0x10, 0x1, 0x393, 0x0, r2}, &(0x7f0000000080)=<r11=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x110, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
close(0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r12, 0x5412, &(0x7f0000000bc0)={'hsr0\x00'})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
socket$nl_xfrm(0x10, 0x3, 0x6)
mprotect(&(0x7f00003d5000/0x2000)=nil, 0x2000, 0x2)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

135.013697ms ago: executing program 0 (id=4706):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0)
r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000100)={0x0, 0x633d, 0x10, 0xfffffffd, 0x17d}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "2f73c5a830e16ebe", "7f31d419c92e80c41c82e8b7abf195e37202d8e41360cbb6c01b1f48815d24b4", "ed02adfc", "d89d79a4ba695f66"}, 0x38)

808.474µs ago: executing program 3 (id=4707):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000001c0)="b80af958abeb547d4a3883ac", 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
close(0x3)
socket$tipc(0x1e, 0x2, 0x0)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
close(0x4)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8004745a, &(0x7f0000000bc0)={'hsr0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "51f7dc18831b41af", "02655d57150b178d229c32a41708c82c9470b2844f0ca6ea7120203e049b70b8", "19f9e0fd", "980b7bb6b41665af"}, 0x38)
r3 = syz_io_uring_setup(0x5cb, &(0x7f0000000240)={0x0, 0x7730, 0x2c26, 0x40000, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000440)={@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, {&(0x7f00000002c0)=""/242, 0xf2}, &(0x7f0000000000), 0x14}, 0xa0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xc, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=4708):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4b642, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x0, 0x40000, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22854' (ED25519) to the list of known hosts.
syzkaller login: [   48.821501][ T5777] cgroup: Unknown subsys name 'net'
[   48.903649][ T5777] cgroup: Unknown subsys name 'cpuset'
[   48.911079][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.806946][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.409771][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.412918][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.417109][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.421720][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.441104][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.444304][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.449464][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.458084][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.462169][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.462292][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.468538][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.475933][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.479525][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.491121][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.494260][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.691515][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.766611][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.819799][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   55.852458][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.855482][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.858103][ T5845] bridge_slave_0: entered allmulticast mode
[   55.861898][ T5845] bridge_slave_0: entered promiscuous mode
[   55.885608][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.888555][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.892021][ T5845] bridge_slave_1: entered allmulticast mode
[   55.895737][ T5845] bridge_slave_1: entered promiscuous mode
[   55.926468][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.943070][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.997652][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.000417][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.002980][ T5849] bridge_slave_0: entered allmulticast mode
[   56.005965][ T5849] bridge_slave_0: entered promiscuous mode
[   56.010119][ T5845] team0: Port device team_slave_0 added
[   56.022247][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.025232][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.028216][ T5850] bridge_slave_0: entered allmulticast mode
[   56.033166][ T5850] bridge_slave_0: entered promiscuous mode
[   56.037093][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.041018][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.043929][ T5849] bridge_slave_1: entered allmulticast mode
[   56.047419][ T5849] bridge_slave_1: entered promiscuous mode
[   56.058257][ T5845] team0: Port device team_slave_1 added
[   56.071188][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.074472][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.077542][ T5850] bridge_slave_1: entered allmulticast mode
[   56.082086][ T5850] bridge_slave_1: entered promiscuous mode
[   56.100830][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.132115][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.136516][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.140954][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.151522][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.173142][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.192631][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.195259][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.205289][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.213804][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.256505][ T5849] team0: Port device team_slave_0 added
[   56.272443][ T5850] team0: Port device team_slave_0 added
[   56.276750][ T5849] team0: Port device team_slave_1 added
[   56.300013][ T5845] hsr_slave_0: entered promiscuous mode
[   56.302889][ T5845] hsr_slave_1: entered promiscuous mode
[   56.307213][ T5850] team0: Port device team_slave_1 added
[   56.352464][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.355310][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.365086][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.370825][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.373860][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.384259][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.390836][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.393159][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.403040][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.433170][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.436145][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.447202][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.526805][ T5850] hsr_slave_0: entered promiscuous mode
[   56.530915][ T5850] hsr_slave_1: entered promiscuous mode
[   56.533792][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   56.536207][ T5850] Cannot create hsr debugfs directory
[   56.567679][ T5849] hsr_slave_0: entered promiscuous mode
[   56.571145][ T5849] hsr_slave_1: entered promiscuous mode
[   56.574139][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.576535][ T5849] Cannot create hsr debugfs directory
[   56.890303][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.900948][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.907930][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.923285][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.956299][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.975745][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.991485][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.997054][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.034315][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.042329][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.052758][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.064251][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.139814][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.157665][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.165853][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.185462][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.188414][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.204034][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.206735][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.228470][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   57.242876][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.245278][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.272979][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.277319][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.279915][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.322775][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.346922][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.350109][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.388792][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.392113][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.472673][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.494540][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.518782][ T5845] veth0_vlan: entered promiscuous mode
[   57.530530][ T5238] Bluetooth: hci2: command tx timeout
[   57.532551][ T5238] Bluetooth: hci1: command tx timeout
[   57.533277][ T5852] Bluetooth: hci0: command tx timeout
[   57.542028][ T5845] veth1_vlan: entered promiscuous mode
[   57.560197][ T5850] veth0_vlan: entered promiscuous mode
[   57.573950][ T5850] veth1_vlan: entered promiscuous mode
[   57.602231][ T5845] veth0_macvtap: entered promiscuous mode
[   57.612916][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.623623][ T5845] veth1_macvtap: entered promiscuous mode
[   57.648439][ T5850] veth0_macvtap: entered promiscuous mode
[   57.656617][ T5850] veth1_macvtap: entered promiscuous mode
[   57.677193][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.695356][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.720180][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.724263][ T5849] veth0_vlan: entered promiscuous mode
[   57.728341][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.737160][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.749392][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.758335][ T5849] veth1_vlan: entered promiscuous mode
[   57.764781][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.785476][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.790865][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.807002][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.811340][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.815198][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.865716][ T5849] veth0_macvtap: entered promiscuous mode
[   57.886263][ T5849] veth1_macvtap: entered promiscuous mode
[   57.894530][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.897774][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.925820][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.928584][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.978683][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.983794][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.985982][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.000676][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.003352][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.013471][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.030632][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.049900][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.052896][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.059735][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.073380][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.179797][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.183534][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.214383][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.217657][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.736279][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.992595][ T5946] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.142683][ T5967] Zero length message leads to an empty skb
[   59.584491][ T5986] dvmrp17: entered allmulticast mode
[   59.586727][ T5987] dvmrp17: left allmulticast mode
[   59.609399][ T5854] Bluetooth: hci1: command tx timeout
[   59.609439][ T5852] Bluetooth: hci0: command tx timeout
[   59.609463][ T5852] Bluetooth: hci2: command tx timeout
[   59.751309][  T791] IPVS: starting estimator thread 0...
[   59.851930][ T5995] IPVS: using max 79 ests per chain, 189600 per kthread
[   60.327342][ T6000] dvmrp17: entered allmulticast mode
[   60.338410][ T6000] dvmrp17: left allmulticast mode
[   61.690246][ T5852] Bluetooth: hci2: command tx timeout
[   61.690399][ T5238] Bluetooth: hci0: command tx timeout
[   61.696493][ T5854] Bluetooth: hci1: command tx timeout
[   63.769599][ T5854] Bluetooth: hci2: command tx timeout
[   63.772065][ T5854] Bluetooth: hci1: command tx timeout
[   63.774363][ T5854] Bluetooth: hci0: command tx timeout
[   64.219236][  T791] IPVS: starting estimator thread 0...
[   64.312794][ T6137] IPVS: using max 76 ests per chain, 182400 per kthread
[   65.494684][ T6185] dvmrp0: entered allmulticast mode
[   68.667578][ T6288] can: request_module (can-proto-0) failed.
[   69.070003][ T6306] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20004
[   69.076294][ T6306] dvmrp1: entered allmulticast mode
[   70.876570][ T6378] dvmrp5: entered allmulticast mode
[   70.884985][ T6378] pimreg: entered allmulticast mode
[   71.296298][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.299328][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   73.135190][ T6440] IPVS: ip_vs_add_dest(): server weight less than zero
[   74.569575][ T6487] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 2, id = 0
[   75.041198][ T6503] veth0: entered promiscuous mode
[   75.049593][ T6503] veth0: left promiscuous mode
[   79.368411][ T6607] delete_channel: no stack
[   80.361837][ T5900] delete_channel: no stack
[   81.532159][    T9] cfg80211: failed to load regulatory.db
[   83.124939][ T6771] vlan0: entered allmulticast mode
[   83.127336][ T6771] veth0_vlan: entered allmulticast mode
[   83.326712][ T6787] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000
[   84.125274][ T6811] ptm ptm0: ldisc open failed (-12), clearing slot 0
[   84.272516][ T6816] veth1_to_bond: entered allmulticast mode
[   84.520735][ T6815] veth1_to_bond: left allmulticast mode
[   84.874667][  T791] IPVS: starting estimator thread 0...
[   84.962182][ T6841] IPVS: using max 49 ests per chain, 117600 per kthread
[   85.991060][ T6879] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   86.056629][ T6878] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[   88.413926][ T6947] delete_channel: no stack
[   88.778561][ T6955] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   89.085697][ T6963] syz_tun: entered allmulticast mode
[   89.346881][ T6964] syz_tun: left allmulticast mode
[   89.803914][ T6992] syz.2.304: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   89.850143][ T6992] CPU: 1 UID: 0 PID: 6992 Comm: syz.2.304 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   89.850166][ T6992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.850174][ T6992] Call Trace:
[   89.850180][ T6992]  <TASK>
[   89.850186][ T6992]  dump_stack_lvl+0x189/0x250
[   89.850209][ T6992]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.850224][ T6992]  ? __pfx__printk+0x10/0x10
[   89.850243][ T6992]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   89.850265][ T6992]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   89.850281][ T6992]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   89.850298][ T6992]  warn_alloc+0x214/0x310
[   89.850321][ T6992]  ? stack_depot_save_flags+0x41b/0x860
[   89.850339][ T6992]  ? __pfx_warn_alloc+0x10/0x10
[   89.850359][ T6992]  ? kasan_save_track+0x4f/0x80
[   89.850401][ T6992]  ? xskq_create+0x56/0x170
[   89.850416][ T6992]  ? xsk_init_queue+0xb0/0x110
[   89.850428][ T6992]  ? xsk_setsockopt+0x4dc/0x8d0
[   89.850440][ T6992]  ? do_sock_setsockopt+0x17c/0x1b0
[   89.850457][ T6992]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   89.850470][ T6992]  ? do_syscall_64+0xfa/0x3b0
[   89.850486][ T6992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.850504][ T6992]  __vmalloc_node_range_noprof+0x125/0x12f0
[   89.850541][ T6992]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   89.850564][ T6992]  ? __kasan_kmalloc+0x93/0xb0
[   89.850581][ T6992]  vmalloc_user_noprof+0xad/0xf0
[   89.850599][ T6992]  ? xskq_create+0xbf/0x170
[   89.850614][ T6992]  xskq_create+0xbf/0x170
[   89.850630][ T6992]  xsk_init_queue+0xb0/0x110
[   89.850646][ T6992]  xsk_setsockopt+0x4dc/0x8d0
[   89.850660][ T6992]  ? __pfx_xsk_setsockopt+0x10/0x10
[   89.850673][ T6992]  ? __pfx_aa_sk_perm+0x10/0x10
[   89.850691][ T6992]  ? aa_sock_opt_perm+0xff/0x1b0
[   89.850711][ T6992]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   89.850724][ T6992]  ? __pfx_xsk_setsockopt+0x10/0x10
[   89.850737][ T6992]  do_sock_setsockopt+0x17c/0x1b0
[   89.850757][ T6992]  __x64_sys_setsockopt+0x13f/0x1b0
[   89.850778][ T6992]  do_syscall_64+0xfa/0x3b0
[   89.850792][ T6992]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.850806][ T6992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.850817][ T6992]  ? exc_page_fault+0x9f/0xf0
[   89.850834][ T6992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.850845][ T6992] RIP: 0033:0x7f222618ebe9
[   89.850857][ T6992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.850868][ T6992] RSP: 002b:00007f2226f1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   89.850883][ T6992] RAX: ffffffffffffffda RBX: 00007f22263b5fa0 RCX: 00007f222618ebe9
[   89.850891][ T6992] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[   89.850898][ T6992] RBP: 00007f2226211e19 R08: 0000000000000004 R09: 0000000000000000
[   89.850906][ T6992] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.850913][ T6992] R13: 00007f22263b6038 R14: 00007f22263b5fa0 R15: 00007ffdc40b09b8
[   89.850933][ T6992]  </TASK>
[   89.851772][ T6992] Mem-Info:
[   89.998429][ T6992] active_anon:5311 inactive_anon:0 isolated_anon:0
[   89.998429][ T6992]  active_file:901 inactive_file:38220 isolated_file:0
[   89.998429][ T6992]  unevictable:1768 dirty:32 writeback:0
[   89.998429][ T6992]  slab_reclaimable:9370 slab_unreclaimable:53656
[   89.998429][ T6992]  mapped:18428 shmem:2432 pagetables:933
[   89.998429][ T6992]  sec_pagetables:0 bounce:0
[   89.998429][ T6992]  kernel_misc_reclaimable:0
[   89.998429][ T6992]  free:296908 free_pcp:20193 free_cma:0
[   90.018782][ T6992] Node 0 active_anon:12324kB inactive_anon:0kB active_file:3152kB inactive_file:21636kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37156kB dirty:68kB writeback:0kB shmem:3284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5096kB pagetables:1948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   90.119542][ T6992] Node 1 active_anon:8920kB inactive_anon:0kB active_file:452kB inactive_file:131244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36264kB dirty:60kB writeback:0kB shmem:6444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7088kB pagetables:1852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   90.152139][ T6992] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   90.177078][ T6992] lowmem_reserve[]: 0 811 811 811 811
[   90.189124][ T6992] Node 0 DMA32 free:412108kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12188kB inactive_anon:0kB active_file:3152kB inactive_file:21636kB unevictable:3536kB writepending:68kB present:1556484kB managed:831004kB mlocked:0kB bounce:0kB free_pcp:28472kB local_pcp:13840kB free_cma:0kB
[   90.210307][ T6992] lowmem_reserve[]: 0 0 0 0 0
[   90.212525][ T6992] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   90.228601][ T6992] lowmem_reserve[]: 0 0 854 854 854
[   90.231641][ T6992] Node 1 Normal free:309448kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9056kB inactive_anon:0kB active_file:452kB inactive_file:131244kB unevictable:3536kB writepending:60kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46184kB local_pcp:31144kB free_cma:0kB
[   90.246053][ T6992] lowmem_reserve[]: 0 0 0 0 0
[   90.248441][ T6992] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   90.279033][ T6992] Node 0 DMA32: 483*4kB (UM) 670*8kB (UME) 217*16kB (UM) 170*32kB (UME) 56*64kB (UME) 33*128kB (UM) 16*256kB (UM) 12*512kB (UM) 7*1024kB (UME) 9*2048kB (UME) 86*4096kB (M) = 412108kB
[   90.287140][ T6992] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   90.298992][ T6992] Node 1 Normal: 628*4kB (UME) 329*8kB (UME) 293*16kB (UME) 275*32kB (UME) 98*64kB (UME) 29*128kB (UM) 7*256kB (UM) 5*512kB (UM) 4*1024kB (ME) 3*2048kB (UME) 65*4096kB (UM) = 309448kB
[   90.307402][ T6992] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   90.314715][ T6992] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   90.320634][ T6992] 41553 total pagecache pages
[   90.322919][ T6992] 0 pages in swap cache
[   90.324981][ T6992] Free swap  = 124996kB
[   90.327076][ T6992] Total swap = 124996kB
[   90.329611][ T6992] 786301 pages RAM
[   90.331526][ T6992] 0 pages HighMem/MovableOnly
[   90.333834][ T6992] 241318 pages reserved
[   90.335892][ T6992] 0 pages cma reserved
[   91.883548][ T7064] pim6reg9: entered allmulticast mode
[   92.755734][ T7092] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[   96.503917][ T7209] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20001
[   96.562628][ T7214] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   96.568712][ T7214] IPVS: set_ctl: invalid protocol: 45056 16.127.0.0:0
[   96.579947][ T7214] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   98.282383][ T7271] delete_channel: no stack
[   99.487102][ T7326] sctp: [Deprecated]: syz.1.401 (pid 7326) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.487102][ T7326] Use struct sctp_sack_info instead
[  101.173769][ T7342] delete_channel: no stack
[  102.433416][ T7399] sctp: [Deprecated]: syz.0.424 (pid 7399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.433416][ T7399] Use struct sctp_sack_info instead
[  103.537561][ T7441] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  105.262263][ T7515] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  105.765613][ T7552] IPVS: set_ctl: invalid protocol: 59 172.20.20.46:8
[  106.026450][ T7562] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  106.070233][ T7561] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  106.292431][ T7575] veth0: entered promiscuous mode
[  106.294694][ T7575] veth0: left promiscuous mode
[  107.285987][ T7633] team0: entered promiscuous mode
[  107.303692][ T7633] team_slave_0: entered promiscuous mode
[  107.305618][ T7633] team_slave_1: entered promiscuous mode
[  107.326388][ T7633] team0: left promiscuous mode
[  107.335307][ T7633] team_slave_0: left promiscuous mode
[  107.340165][ T7633] team_slave_1: left promiscuous mode
[  107.464348][ T7643] IPVS: set_ctl: invalid protocol: 0 138.22.0.0:1792
[  108.072826][ T7677] bond0: entered promiscuous mode
[  108.074742][ T7677] bond_slave_0: entered promiscuous mode
[  108.076888][ T7677] bond_slave_1: entered promiscuous mode
[  108.264664][ T7677] bond0: left promiscuous mode
[  108.266885][ T7677] bond_slave_0: left promiscuous mode
[  108.271590][ T7677] bond_slave_1: left promiscuous mode
[  109.456475][ T7765] random: crng reseeded on system resumption
[  114.803583][ T7943] sctp: [Deprecated]: syz.1.576 (pid 7943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.803583][ T7943] Use struct sctp_sack_info instead
[  115.099120][ T7948] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  115.102743][ T7948] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  117.247513][ T8014] syz.0.597: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  117.289052][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.0.597 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  117.289073][ T8014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.289080][ T8014] Call Trace:
[  117.289085][ T8014]  <TASK>
[  117.289091][ T8014]  dump_stack_lvl+0x189/0x250
[  117.289112][ T8014]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.289127][ T8014]  ? __pfx__printk+0x10/0x10
[  117.289144][ T8014]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.289166][ T8014]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.289181][ T8014]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  117.289197][ T8014]  warn_alloc+0x214/0x310
[  117.289244][ T8014]  ? stack_depot_save_flags+0x40/0x860
[  117.289260][ T8014]  ? __pfx_warn_alloc+0x10/0x10
[  117.289279][ T8014]  ? kasan_save_track+0x4f/0x80
[  117.289294][ T8014]  ? xskq_create+0x56/0x170
[  117.289307][ T8014]  ? xsk_init_queue+0xb0/0x110
[  117.289318][ T8014]  ? xsk_setsockopt+0x4dc/0x8d0
[  117.289328][ T8014]  ? do_sock_setsockopt+0x17c/0x1b0
[  117.289344][ T8014]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  117.289358][ T8014]  ? do_syscall_64+0xfa/0x3b0
[  117.289371][ T8014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.289389][ T8014]  __vmalloc_node_range_noprof+0x125/0x12f0
[  117.289426][ T8014]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  117.289447][ T8014]  ? __kasan_kmalloc+0x93/0xb0
[  117.289465][ T8014]  vmalloc_user_noprof+0xad/0xf0
[  117.289482][ T8014]  ? xskq_create+0xbf/0x170
[  117.289495][ T8014]  xskq_create+0xbf/0x170
[  117.289510][ T8014]  xsk_init_queue+0xb0/0x110
[  117.289525][ T8014]  xsk_setsockopt+0x4dc/0x8d0
[  117.289540][ T8014]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.289552][ T8014]  ? __pfx_aa_sk_perm+0x10/0x10
[  117.289571][ T8014]  ? aa_sock_opt_perm+0xff/0x1b0
[  117.289589][ T8014]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  117.289601][ T8014]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.289615][ T8014]  do_sock_setsockopt+0x17c/0x1b0
[  117.289634][ T8014]  __x64_sys_setsockopt+0x13f/0x1b0
[  117.289654][ T8014]  do_syscall_64+0xfa/0x3b0
[  117.289668][ T8014]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.289681][ T8014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.289692][ T8014]  ? exc_page_fault+0x9f/0xf0
[  117.289707][ T8014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.289719][ T8014] RIP: 0033:0x7f1000d8ebe9
[  117.289730][ T8014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.289740][ T8014] RSP: 002b:00007f1001ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  117.289754][ T8014] RAX: ffffffffffffffda RBX: 00007f1000fb5fa0 RCX: 00007f1000d8ebe9
[  117.289763][ T8014] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  117.289770][ T8014] RBP: 00007f1000e11e19 R08: 0000000000000004 R09: 0000000000000000
[  117.289777][ T8014] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.289784][ T8014] R13: 00007f1000fb6038 R14: 00007f1000fb5fa0 R15: 00007ffc26a96b08
[  117.289804][ T8014]  </TASK>
[  117.289809][ T8014] Mem-Info:
[  117.468248][ T8014] active_anon:5888 inactive_anon:0 isolated_anon:0
[  117.468248][ T8014]  active_file:901 inactive_file:38232 isolated_file:0
[  117.468248][ T8014]  unevictable:1768 dirty:23 writeback:0
[  117.468248][ T8014]  slab_reclaimable:9388 slab_unreclaimable:55926
[  117.468248][ T8014]  mapped:17892 shmem:2434 pagetables:905
[  117.468248][ T8014]  sec_pagetables:0 bounce:0
[  117.468248][ T8014]  kernel_misc_reclaimable:0
[  117.468248][ T8014]  free:292505 free_pcp:19714 free_cma:0
[  117.588975][ T8014] Node 0 active_anon:14940kB inactive_anon:0kB active_file:3152kB inactive_file:21684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36528kB dirty:84kB writeback:0kB shmem:2716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5172kB pagetables:1688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.698018][ T8014] Node 1 active_anon:8544kB inactive_anon:0kB active_file:452kB inactive_file:131244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35516kB dirty:8kB writeback:0kB shmem:7020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7960kB pagetables:1864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.758703][ T8014] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.799366][ T8014] lowmem_reserve[]: 0 811 811 811 811
[  117.801819][ T8014] Node 0 DMA32 free:399316kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15020kB inactive_anon:0kB active_file:3152kB inactive_file:21684kB unevictable:3536kB writepending:28kB present:1556484kB managed:831004kB mlocked:0kB bounce:0kB free_pcp:34704kB local_pcp:14152kB free_cma:0kB
[  117.858961][ T8014] lowmem_reserve[]: 0 0 0 0 0
[  117.860648][ T8014] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  117.879393][ T8014] lowmem_reserve[]: 0 0 854 854 854
[  117.881491][ T8014] Node 1 Normal free:299356kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8432kB inactive_anon:0kB active_file:452kB inactive_file:131244kB unevictable:3536kB writepending:4kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50312kB local_pcp:31840kB free_cma:0kB
[  117.894437][ T8014] lowmem_reserve[]: 0 0 0 0 0
[  117.897070][ T8014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  117.908265][ T8014] Node 0 DMA32: 1*4kB (M) 758*8kB (UE) 354*16kB (UME) 298*32kB (UME) 81*64kB (UM) 13*128kB (UM) 6*256kB (UM) 9*512kB (ME) 7*1024kB (UM) 8*2048kB (UME) 84*4096kB (UM) = 401876kB
[  117.918229][ T8014] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  117.923924][ T8014] Node 1 Normal: 13*4kB (UME) 15*8kB (UME) 233*16kB (UME) 1*32kB (M) 80*64kB (UM) 28*128kB (UM) 2*256kB (U) 5*512kB (UM) 7*1024kB (UME) 7*2048kB (UME) 64*4096kB (UM) = 299356kB
[  117.930090][ T8014] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.933354][ T8014] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.936456][ T8014] 41569 total pagecache pages
[  117.938061][ T8014] 0 pages in swap cache
[  117.940825][ T8014] Free swap  = 124996kB
[  117.942286][ T8014] Total swap = 124996kB
[  117.943735][ T8014] 786301 pages RAM
[  117.945133][ T8014] 0 pages HighMem/MovableOnly
[  117.946942][ T8014] 241318 pages reserved
[  117.948614][ T8014] 0 pages cma reserved
[  119.351740][ T8089] binder_alloc: binder_alloc_mmap_handler: 8088 200000ffc000-200000ffd000 already mapped failed -16
[  120.510255][ T8108] dvmrp1: entered allmulticast mode
[  121.395024][ T8142] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  123.320312][ T8190] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  126.788371][ T8295] syz.1.681 uses obsolete (PF_INET,SOCK_PACKET)
[  132.747307][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.750200][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.388084][ T8474] sctp: [Deprecated]: syz.0.743 (pid 8474) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.388084][ T8474] Use struct sctp_sack_info instead
[  134.125593][ T8507] random: crng reseeded on system resumption
[  134.334212][ T8511] macvlan0: entered allmulticast mode
[  134.336134][ T8511] veth1_vlan: entered allmulticast mode
[  135.199563][ T8537] veth0_to_bridge: entered promiscuous mode
[  135.212188][ T8539] veth0_to_bridge: left promiscuous mode
[  135.508656][ T8524] delete_channel: no stack
[  136.483646][ T8595] dvmrp0: left allmulticast mode
[  136.485433][ T8595] dvmrp1: left allmulticast mode
[  136.769438][ T8614] geneve0: entered promiscuous mode
[  137.003723][  T791] geneve0: left promiscuous mode
[  137.664545][ T8641] pimreg: entered allmulticast mode
[  137.672829][ T8641] pimreg: left allmulticast mode
[  141.610030][ T8757] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  141.612981][ T8757] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  141.625292][ T8757] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  141.668255][ T8757] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  141.681406][ T8757] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  141.714790][ T8757] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  141.734510][ T8757] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  141.756432][ T8757] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  141.778506][ T8757] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  143.689108][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[  143.691986][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout
[  143.769307][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  145.398950][ T8865] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  145.403689][ T8866] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  145.771668][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout
[  145.774469][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[  145.848931][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  146.296357][ T8896] dvmrp17: entered allmulticast mode
[  147.849025][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout
[  147.851127][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout
[  147.929137][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout
[  149.589236][ T9009] sock: sock_timestamping_bind_phc: sock not bind to device
[  152.467648][ T9105] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20004
[  152.503344][ T9103] IPVS: set_ctl: invalid protocol: 136 172.30.0.2:20003
[  152.689924][ T9110] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  152.835303][ T9122] delete_channel: no stack
[  153.587665][ T9152] pimreg: entered allmulticast mode
[  153.592293][ T9152] veth1: entered promiscuous mode
[  153.595387][ T9152] veth1: left promiscuous mode
[  153.600473][ T9151] pimreg: left allmulticast mode
[  153.687208][ T9156] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20000
[  154.539834][ T9186] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0
[  156.586751][ T9227] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  156.591030][ T9227] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  156.593213][ T9227] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  157.849107][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout
[  158.658959][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.661564][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[  159.511707][ T9408] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002
[  160.129938][ T9423] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  162.135463][ T9501] delete_channel: no stack
[  163.911265][   T33] audit: type=1800 audit(1754800723.251:2): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1073" name="file1" dev="tmpfs" ino=1812 res=0 errno=0
[  165.808790][ T9645] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002
[  166.825808][ T9691] ip6tnl0: entered allmulticast mode
[  166.833794][ T9690] ip6tnl0: left allmulticast mode
[  166.956707][ T9705] dvmrp17: entered allmulticast mode
[  168.330869][ T9749] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20001
[  168.387633][ T9754] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20004
[  168.882882][ T9763] ptm ptm6: ldisc open failed (-12), clearing slot 6
[  168.936477][ T9769] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002
[  168.941048][ T9769] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:4095
[  171.909991][ T9874] delete_channel: no stack
[  171.961839][ T9862] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  171.966497][ T9862] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  171.968813][ T9862] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  172.166644][ T9883] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  172.166923][ T9882] IPVS: stopping master sync thread 9883 ...
[  172.224264][ T9882] geneve0: entered promiscuous mode
[  172.349147][ T9881] geneve0: left promiscuous mode
[  174.010608][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  174.010628][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[  174.013383][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout
[  178.720894][T10059] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000
[  181.676123][    C0] hrtimer: interrupt took 25013 ns
[  184.266685][T10225] team0: entered allmulticast mode
[  184.269242][T10225] team_slave_0: entered allmulticast mode
[  184.272007][T10225] team_slave_1: entered allmulticast mode
[  186.901475][T10315] sctp: [Deprecated]: syz.1.1286 (pid 10315) Use of struct sctp_assoc_value in delayed_ack socket option.
[  186.901475][T10315] Use struct sctp_sack_info instead
[  190.919859][T10451] dvmrp17: entered allmulticast mode
[  190.945324][T10451] dvmrp17: left allmulticast mode
[  191.097080][T10450] delete_channel: no stack
[  191.304551][T10467] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  191.345291][T10466] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  192.163157][T10494] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  192.166890][T10494] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  192.380797][T10498] random: crng reseeded on system resumption
[  192.464017][T10505] pimreg3: entered allmulticast mode
[  194.184580][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.186942][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  196.527677][T10648] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0
[  196.757640][T10657] sctp: [Deprecated]: syz.1.1384 (pid 10657) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.757640][T10657] Use struct sctp_sack_info instead
[  199.661108][T10754] dvmrp17: left allmulticast mode
[  201.410517][T10835] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  204.805380][T10933] ip6tnl0: entered promiscuous mode
[  205.108336][T10929] ip6tnl0: left promiscuous mode
[  206.589008][T10979] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20003
[  208.455040][T11064] geneve1: entered promiscuous mode
[  208.485540][T11063] geneve1: left promiscuous mode
[  208.985213][T11085] sctp: [Deprecated]: syz.1.1514 (pid 11085) Use of int in maxseg socket option.
[  208.985213][T11085] Use struct sctp_assoc_value instead
[  211.652681][T11216] lo: entered promiscuous mode
[  211.936583][T11215] lo: left promiscuous mode
[  217.029405][T11374] delete_channel: no stack
[  219.013682][T11463] hsr0: entered promiscuous mode
[  219.017468][T11463] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004
[  219.026693][T11462] hsr0: left promiscuous mode
[  220.500923][T11511] veth1_to_bond: entered allmulticast mode
[  221.327199][T11510] veth1_to_bond: left allmulticast mode
[  222.932883][T11594] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20002
[  223.213259][T11606] syz_tun: entered allmulticast mode
[  223.233722][T11606] dvmrp1: entered allmulticast mode
[  223.347157][T11605] syz_tun: left allmulticast mode
[  228.373739][T11742] dvmrp1: left allmulticast mode
[  228.698980][T11747] syz.0.1711: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  228.740350][T11747] CPU: 1 UID: 0 PID: 11747 Comm: syz.0.1711 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  228.740369][T11747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.740377][T11747] Call Trace:
[  228.740381][T11747]  <TASK>
[  228.740387][T11747]  dump_stack_lvl+0x189/0x250
[  228.740408][T11747]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.740423][T11747]  ? __pfx__printk+0x10/0x10
[  228.740440][T11747]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  228.740454][T11747]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  228.740469][T11747]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  228.740485][T11747]  warn_alloc+0x214/0x310
[  228.740503][T11747]  ? stack_depot_save_flags+0x40/0x860
[  228.740518][T11747]  ? __pfx_warn_alloc+0x10/0x10
[  228.740537][T11747]  ? kasan_save_track+0x4f/0x80
[  228.740552][T11747]  ? xskq_create+0x56/0x170
[  228.740599][T11747]  ? xsk_init_queue+0xb0/0x110
[  228.740610][T11747]  ? xsk_setsockopt+0x4dc/0x8d0
[  228.740620][T11747]  ? do_sock_setsockopt+0x17c/0x1b0
[  228.740635][T11747]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  228.740650][T11747]  ? do_syscall_64+0xfa/0x3b0
[  228.740663][T11747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.740685][T11747]  __vmalloc_node_range_noprof+0x125/0x12f0
[  228.740724][T11747]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  228.740741][T11747]  ? xskq_create+0x56/0x170
[  228.740756][T11747]  ? __kasan_kmalloc+0x93/0xb0
[  228.740779][T11747]  vmalloc_user_noprof+0xad/0xf0
[  228.740795][T11747]  ? xskq_create+0xbf/0x170
[  228.740809][T11747]  xskq_create+0xbf/0x170
[  228.740843][T11747]  xsk_init_queue+0xb0/0x110
[  228.740859][T11747]  xsk_setsockopt+0x4dc/0x8d0
[  228.740873][T11747]  ? __pfx_xsk_setsockopt+0x10/0x10
[  228.740885][T11747]  ? __pfx_aa_sk_perm+0x10/0x10
[  228.740903][T11747]  ? aa_sock_opt_perm+0xff/0x1b0
[  228.740921][T11747]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  228.740934][T11747]  ? __pfx_xsk_setsockopt+0x10/0x10
[  228.740947][T11747]  do_sock_setsockopt+0x17c/0x1b0
[  228.740966][T11747]  __x64_sys_setsockopt+0x13f/0x1b0
[  228.740986][T11747]  do_syscall_64+0xfa/0x3b0
[  228.740999][T11747]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.741013][T11747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.741024][T11747]  ? exc_page_fault+0x9f/0xf0
[  228.741039][T11747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.741050][T11747] RIP: 0033:0x7f1000d8ebe9
[  228.741061][T11747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.741070][T11747] RSP: 002b:00007f1001ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  228.741084][T11747] RAX: ffffffffffffffda RBX: 00007f1000fb5fa0 RCX: 00007f1000d8ebe9
[  228.741093][T11747] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  228.741100][T11747] RBP: 00007f1000e11e19 R08: 0000000000000004 R09: 0000000000000000
[  228.741107][T11747] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.741115][T11747] R13: 00007f1000fb6038 R14: 00007f1000fb5fa0 R15: 00007ffc26a96b08
[  228.741135][T11747]  </TASK>
[  228.741963][T11747] Mem-Info:
[  228.893938][T11747] active_anon:5889 inactive_anon:0 isolated_anon:0
[  228.893938][T11747]  active_file:1040 inactive_file:38279 isolated_file:0
[  228.893938][T11747]  unevictable:1768 dirty:30 writeback:0
[  228.893938][T11747]  slab_reclaimable:9438 slab_unreclaimable:61243
[  228.893938][T11747]  mapped:18591 shmem:2443 pagetables:917
[  228.893938][T11747]  sec_pagetables:0 bounce:0
[  228.893938][T11747]  kernel_misc_reclaimable:0
[  228.893938][T11747]  free:278521 free_pcp:27622 free_cma:0
[  228.917291][T11747] Node 0 active_anon:15076kB inactive_anon:0kB active_file:3620kB inactive_file:21864kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38380kB dirty:64kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5500kB pagetables:1856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  228.933435][T11747] Node 1 active_anon:8480kB inactive_anon:0kB active_file:540kB inactive_file:131252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35984kB dirty:56kB writeback:0kB shmem:7644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7984kB pagetables:1812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  228.947719][T11747] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  228.963198][T11747] lowmem_reserve[]: 0 811 811 811 811
[  228.967005][T11747] Node 0 DMA32 free:356068kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14940kB inactive_anon:0kB active_file:3620kB inactive_file:21864kB unevictable:3536kB writepending:64kB present:1556484kB managed:831004kB mlocked:0kB bounce:0kB free_pcp:48832kB local_pcp:19332kB free_cma:0kB
[  229.059024][T11747] lowmem_reserve[]: 0 0 0 0 0
[  229.061155][T11747] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  229.149054][T11747] lowmem_reserve[]: 0 0 854 854 854
[  229.151325][T11747] Node 1 Normal free:284164kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8412kB inactive_anon:0kB active_file:540kB inactive_file:131252kB unevictable:3536kB writepending:56kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:62976kB local_pcp:42700kB free_cma:0kB
[  229.189099][T11747] lowmem_reserve[]: 0 0 0 0 0
[  229.190963][T11747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  229.195261][T11747] Node 0 DMA32: 11*4kB (UME) 213*8kB (ME) 75*16kB (M) 59*32kB (ME) 48*64kB (ME) 28*128kB (UME) 15*256kB (UME) 11*512kB (UM) 8*1024kB (UME) 16*2048kB (UM) 72*4096kB (UM) = 356836kB
[  229.229087][T11747] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  229.234926][T11747] Node 1 Normal: 15*4kB (E) 919*8kB (UE) 227*16kB (UE) 11*32kB (UE) 2*64kB (E) 2*128kB (UM) 4*256kB (UM) 3*512kB (ME) 6*1024kB (M) 3*2048kB (UE) 63*4096kB (UM) = 284676kB
[  229.315395][T11747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  229.322982][T11747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  229.326903][T11747] 42475 total pagecache pages
[  229.359737][T11747] 0 pages in swap cache
[  229.361249][T11747] Free swap  = 124996kB
[  229.379001][T11747] Total swap = 124996kB
[  229.380468][T11747] 786301 pages RAM
[  229.381757][T11747] 0 pages HighMem/MovableOnly
[  229.383336][T11747] 241318 pages reserved
[  229.384757][T11747] 0 pages cma reserved
[  230.387083][T11788] delete_channel: no stack
[  231.340407][T11817] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  234.486488][T11906] veth0: entered promiscuous mode
[  235.180818][T11902] veth0: left promiscuous mode
[  237.130854][T11976] comedi: valid board names for 8255 driver are:
[  237.134406][T11976]  8255
[  237.135386][T11976] comedi: valid board names for vmk80xx driver are:
[  237.137630][T11976]  vmk80xx
[  237.138694][T11976] comedi: valid board names for usbduxsigma driver are:
[  237.141130][T11976]  usbduxsigma
[  237.142374][T11976] comedi: valid board names for usbduxfast driver are:
[  237.145036][T11976]  usbduxfast
[  237.146252][T11976] comedi: valid board names for usbdux driver are:
[  237.148446][T11976]  usbdux
[  237.149814][T11976] comedi: valid board names for ni6501 driver are:
[  237.152317][T11976]  ni6501
[  237.153373][T11976] comedi: valid board names for dt9812 driver are:
[  237.156351][T11976]  dt9812
[  237.157793][T11976] comedi: valid board names for ni_labpc_cs driver are:
[  237.160991][T11976]  ni_labpc_cs
[  237.162453][T11976] comedi: valid board names for ni_daq_700 driver are:
[  237.165241][T11976]  ni_daq_700
[  237.166537][T11976] comedi: valid board names for labpc_pci driver are:
[  237.168809][T11976]  labpc_pci
[  237.171638][T11976] comedi: valid board names for adl_pci9118 driver are:
[  237.174724][T11976]  pci9118dg
[  237.176069][T11976]  pci9118hg
[  237.177431][T11976]  pci9118hr
[  237.178820][T11976] comedi: valid board names for 8255_pci driver are:
[  237.181739][T11976]  8255_pci
[  237.183022][T11976] comedi: valid board names for s526 driver are:
[  237.186404][T11976]  s526
[  237.187929][T11976] comedi: valid board names for multiq3 driver are:
[  237.191738][T11976]  multiq3
[  237.193225][T11976] comedi: valid board names for pcmuio driver are:
[  237.196156][T11976]  pcmuio48
[  237.197763][T11976]  pcmuio96
[  237.200181][T11976] comedi: valid board names for pcmmio driver are:
[  237.202786][T11976]  pcmmio
[  237.203949][T11976] comedi: valid board names for pcmda12 driver are:
[  237.207126][T11976]  pcmda12
[  237.208539][T11976] comedi: valid board names for pcmad driver are:
[  237.211449][T11976]  pcmad12
[  237.213471][T11976]  pcmad16
[  237.214942][T11976] comedi: valid board names for ni_labpc driver are:
[  237.217864][T11976]  lab-pc-1200
[  237.220587][T11976]  lab-pc-1200ai
[  237.222328][T11976]  lab-pc+
[  237.223998][T11976] comedi: valid board names for atmio16 driver are:
[  237.227138][T11976]  atmio16
[  237.228654][T11976]  atmio16d
[  237.230596][T11976] comedi: valid board names for ni_at_ao driver are:
[  237.233411][T11976]  at-ao-6
[  237.234863][T11976]  at-ao-10
[  237.236310][T11976] comedi: valid board names for ni_at_a2150 driver are:
[  237.239806][T11976]  ni_at_a2150
[  237.241416][T11976] comedi: valid board names for adq12b driver are:
[  237.243862][T11976]  adq12b
[  237.245176][T11976] comedi: valid board names for mpc624 driver are:
[  237.247794][T11976]  mpc624
[  237.250020][T11976] comedi: valid board names for c6xdigio driver are:
[  237.252945][T11976]  c6xdigio
[  237.254397][T11976] comedi: valid board names for aio_iiro_16 driver are:
[  237.257394][T11976]  aio_iiro_16
[  237.258742][T11976] comedi: valid board names for aio_aio12_8 driver are:
[  237.262257][T11976]  aio_aio12_8
[  237.263630][T11976]  aio_ai12_8
[  237.264921][T11976]  aio_ao12_4
[  237.266228][T11976] comedi: valid board names for fl512 driver are:
[  237.268547][T11976]  fl512
[  237.270413][T11976] comedi: valid board names for dmm32at driver are:
[  237.272982][T11976]  dmm32at
[  237.274362][T11976] comedi: valid board names for dt282x driver are:
[  237.276902][T11976]  dt2821
[  237.277921][T11976]  dt2821-f
[  237.279749][T11976]  dt2821-g
[  237.280979][T11976]  dt2823
[  237.282014][T11976]  dt2824-pgh
[  237.283371][T11976]  dt2824-pgl
[  237.284709][T11976]  dt2825
[  237.285904][T11976]  dt2827
[  237.287200][T11976]  dt2828
[  237.288449][T11976]  dt2829
[  237.290175][T11976]  dt21-ez
[  237.291337][T11976]  dt23-ez
[  237.292556][T11976]  dt24-ez
[  237.293731][T11976]  dt24-ez-pgl
[  237.295082][T11976] comedi: valid board names for dt2817 driver are:
[  237.297801][T11976]  dt2817
[  237.300107][T11976] comedi: valid board names for dt2815 driver are:
[  237.303463][T11976]  dt2815
[  237.304691][T11976] comedi: valid board names for dt2814 driver are:
[  237.307096][T11976]  dt2814
[  237.308680][T11976] comedi: valid board names for dt2811 driver are:
[  237.311693][T11976]  dt2811-pgh
[  237.313327][T11976]  dt2811-pgl
[  237.314586][T11976] comedi: valid board names for dt2801 driver are:
[  237.316927][T11976]  dt2801
[  237.318017][T11976] comedi: valid board names for das6402 driver are:
[  237.320625][T11976]  das6402-12
[  237.322098][T11976]  das6402-16
[  237.323360][T11976] comedi: valid board names for das1800 driver are:
[  237.325937][T11976]  das-1701st
[  237.327238][T11976]  das-1701st-da
[  237.328579][T11976]  das-1702st
[  237.331051][T11976]  das-1702st-da
[  237.332342][T11976]  das-1702hr
[  237.333594][T11976]  das-1702hr-da
[  237.334872][T11976]  das-1701ao
[  237.336094][T11976]  das-1702ao
[  237.337314][T11976]  das-1801st
[  237.338562][T11976]  das-1801st-da
[  237.340074][T11976]  das-1802st
[  237.341850][T11976]  das-1802st-da
[  237.343239][T11976]  das-1802hr
[  237.344478][T11976]  das-1802hr-da
[  237.345805][T11976]  das-1801hc
[  237.346994][T11976]  das-1802hc
[  237.348187][T11976]  das-1801ao
[  237.349730][T11976]  das-1802ao
[  237.351358][T11976] comedi: valid board names for das800 driver are:
[  237.354299][T11976]  das-800
[  237.355814][T11976]  cio-das800
[  237.357355][T11976]  das-801
[  237.358749][T11976]  cio-das801
[  237.360452][T11976]  das-802
[  237.362136][T11976]  cio-das802
[  237.363740][T11976]  cio-das802/16
[  237.365367][T11976] comedi: valid board names for isa-das08 driver are:
[  237.368468][T11976]  isa-das08
[  237.370175][T11976]  das08-pgm
[  237.371698][T11976]  das08-pgh
[  237.373589][T11976]  das08-pgl
[  237.375148][T11976]  das08-aoh
[  237.376573][T11976]  das08-aol
[  237.377963][T11976]  das08-aom
[  237.379588][T11976]  das08/jr-ao
[  237.381244][T11976]  das08jr-16-ao
[  237.383295][T11976]  pc104-das08
[  237.384793][T11976]  das08jr/16
[  237.386228][T11976] comedi: valid board names for das16m1 driver are:
[  237.389258][T11976]  das16m1
[  237.390680][T11976] comedi: valid board names for dac02 driver are:
[  237.394106][T11976]  dac02
[  237.395391][T11976] comedi: valid board names for rti802 driver are:
[  237.396043][T11965] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  237.398066][T11976]  rti802
[  237.398082][T11976] comedi: valid board names for rti800 driver are:
[  237.398089][T11976]  rti800
[  237.398094][T11976]  rti815
[  237.398100][T11976] comedi: valid board names for pcm3724 driver are:
[  237.398106][T11976]  pcm3724
[  237.398112][T11976] comedi: valid board names for pcl818 driver are:
[  237.398119][T11976]  pcl818l
[  237.398125][T11976]  pcl818h
[  237.398129][T11976]  pcl818hd
[  237.398134][T11976]  pcl818hg
[  237.398140][T11976]  pcl818
[  237.402457][T11965] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  237.404890][T11976]  pcl718
[  237.406141][T11965] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  237.407235][T11976]  pcm3718
[  237.430431][T11976] comedi: valid board names for pcl816 driver are:
[  237.433717][T11976]  pcl816
[  237.435081][T11976]  pcl814b
[  237.436548][T11976] comedi: valid board names for pcl812 driver are:
[  237.440351][T11976]  pcl812
[  237.441819][T11976]  pcl812pg
[  237.443341][T11976]  acl8112pg
[  237.444911][T11976]  acl8112dg
[  237.446380][T11976]  acl8112hg
[  237.447715][T11976]  a821pgl
[  237.449205][T11976]  a821pglnda
[  237.450712][T11976]  a821pgh
[  237.452115][T11976]  a822pgl
[  237.453601][T11976]  a822pgh
[  237.455137][T11976]  a823pgl
[  237.456692][T11976]  a823pgh
[  237.458119][T11976]  pcl813
[  237.459560][T11976]  pcl813b
[  237.460929][T11976]  acl8113
[  237.462325][T11976]  iso813
[  237.463667][T11976]  acl8216
[  237.465052][T11976]  a826pg
[  237.466466][T11976] comedi: valid board names for pcl730 driver are:
[  237.469779][T11976]  pcl730
[  237.471109][T11976]  iso730
[  237.472452][T11976]  acl7130
[  237.473853][T11976]  pcm3730
[  237.475263][T11976]  pcl725
[  237.476659][T11976]  p8r8dio
[  237.478112][T11976]  acl7225b
[  237.479847][T11976]  p16r16dio
[  237.481500][T11976]  pcl733
[  237.482956][T11976]  pcl734
[  237.484314][T11976]  opmm-1616-xt
[  237.485861][T11976]  pearl-mm-p
[  237.487302][T11976]  ir104-pbf
[  237.488716][T11976] comedi: valid board names for pcl726 driver are:
[  237.494302][T11976]  pcl726
[  237.495906][T11976]  pcl727
[  237.497330][T11976]  pcl728
[  237.498746][T11976]  acl6126
[  237.500273][T11976]  acl6128
[  237.501796][T11976] comedi: valid board names for pcl724 driver are:
[  237.504793][T11976]  pcl724
[  237.506401][T11976]  pcl722
[  237.508032][T11976]  pcl731
[  237.509598][T11976]  acl7122
[  237.511118][T11976]  acl7124
[  237.512554][T11976]  pet48dio
[  237.514373][T11976]  pcmio48
[  237.516203][T11976]  onyx-mm-dio
[  237.517863][T11976] comedi: valid board names for pcl711 driver are:
[  237.521085][T11976]  pcl711
[  237.522632][T11976]  pcl711b
[  237.524178][T11976]  acl8112hg
[  237.525769][T11976]  acl8112dg
[  237.527351][T11976] comedi: valid board names for amplc_pc263 driver are:
[  237.530550][T11976]  pc263
[  237.531993][T11976] comedi: valid board names for amplc_pc236 driver are:
[  237.544549][T11976]  pc36at
[  237.553260][T11976] comedi: valid board names for amplc_dio200 driver are:
[  237.563203][T11976]  pc212e
[  237.568031][T11976]  pc214e
[  237.573072][T11976]  pc215e
[  237.576842][T11976]  pc218e
[  237.581667][T11976]  pc272e
[  237.586667][T11976] comedi: valid board names for comedi_parport driver are:
[  237.603962][T11976]  comedi_parport
[  237.609355][T11976] comedi: valid board names for comedi_test driver are:
[  237.624653][T11976]  comedi_test
[  237.628641][T11976] comedi: valid board names for comedi_bond driver are:
[  237.638822][T11976]  comedi_bond
[  237.900088][T11998] IPVS: Unknown mcast interface: dvmrp0
[  238.649300][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout
[  239.459812][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  239.462609][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout
[  240.929132][   T33] audit: type=1800 audit(1754800800.281:3): pid=12066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1805" name="bus" dev="tmpfs" ino=3019 res=0 errno=0
[  244.340146][T12144] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003
[  244.343252][T12144] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003
[  247.629223][T12207] geneve0: entered promiscuous mode
[  248.342622][T12202] geneve0: left promiscuous mode
[  248.876138][T12248] sctp: [Deprecated]: syz.1.1856 (pid 12248) Use of struct sctp_assoc_value in delayed_ack socket option.
[  248.876138][T12248] Use struct sctp_sack_info instead
[  249.082302][T12260] sctp: [Deprecated]: syz.0.1860 (pid 12260) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.082302][T12260] Use struct sctp_sack_info instead
[  249.769724][T12285] IPVS: set_ctl: invalid protocol: 49924 172.30.0.3:20004
[  250.259098][T12301] IPVS: set_ctl: invalid protocol: 25647 47.98.116.114:26227
[  250.262855][T12301] IPVS: set_ctl: invalid protocol: 25647 47.98.116.114:26227
[  255.491155][T12483] veth1_to_bond: entered allmulticast mode
[  255.526943][T12476] veth1_to_bond: left allmulticast mode
[  255.618372][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.620659][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.801091][ T1069] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  255.804451][ T1069] sr 2:0:0:0: [sr0] tag#2 Sense Key : Not Ready [current] 
[  255.827273][ T1069] sr 2:0:0:0: [sr0] tag#2 Add. Sense: Medium not present
[  255.841794][ T1069] sr 2:0:0:0: [sr0] tag#2 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  255.849169][ T1069] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0
[  255.862030][   T61] sr 2:0:0:0: [sr0] tag#6 unaligned transfer
[  255.865023][   T61] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.869440][   T61] Buffer I/O error on dev sr0, logical block 0, async page read
[  255.873287][   T61] sr 2:0:0:0: [sr0] tag#7 unaligned transfer
[  255.876088][   T61] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 0
[  255.886469][   T61] Buffer I/O error on dev sr0, logical block 1, async page read
[  255.890101][   T61] Buffer I/O error on dev sr0, logical block 2, async page read
[  255.893530][   T61] Buffer I/O error on dev sr0, logical block 3, async page read
[  255.896963][   T61] Buffer I/O error on dev sr0, logical block 4, async page read
[  255.900621][   T61] Buffer I/O error on dev sr0, logical block 5, async page read
[  255.904071][   T61] Buffer I/O error on dev sr0, logical block 6, async page read
[  255.907216][   T61] Buffer I/O error on dev sr0, logical block 7, async page read
[  255.911688][T12498] sr 2:0:0:0: [sr0] tag#8 unaligned transfer
[  255.914650][T12498] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.917845][T12498] Buffer I/O error on dev sr0, logical block 0, async page read
[  255.939212][T12498] sr 2:0:0:0: [sr0] tag#9 unaligned transfer
[  255.941367][T12498] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.964443][T12498] Buffer I/O error on dev sr0, logical block 1, async page read
[  255.967312][T12498] sr 2:0:0:0: [sr0] tag#10 unaligned transfer
[  255.981480][T12498] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  255.984780][T12498] sr 2:0:0:0: [sr0] tag#11 unaligned transfer
[  255.986936][T12498] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  256.000372][T12498] sr 2:0:0:0: [sr0] tag#24 unaligned transfer
[  256.006662][T12498] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  256.019515][T12498] sr 2:0:0:0: [sr0] tag#25 unaligned transfer
[  256.025459][T12498] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  256.043991][T12498] sr 2:0:0:0: [sr0] tag#12 unaligned transfer
[  256.046692][T12498] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  256.064711][T12498] sr 2:0:0:0: [sr0] tag#13 unaligned transfer
[  256.919449][   T33] audit: type=1800 audit(1754800816.261:4): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1945" name=CBFB0C2DA9205417B60C213C4B2809BF3DCBF4F5662C05E98F4F2D278050DAD6EF9B034574FCB13FFD0FE89930618587C7245DE25DCE8DD3D46FCB8EF459716C dev="tmpfs" ino=3401 res=0 errno=0
[  257.726100][T12577] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  257.941532][T12590] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20001
[  258.912159][T12626] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004
[  262.398538][T12767] dummy0: entered allmulticast mode
[  262.466923][T12766] dummy0: left allmulticast mode
[  263.056981][   T33] audit: type=1800 audit(1754800822.411:5): pid=12791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2016" name="file0" dev="tmpfs" ino=3373 res=0 errno=0
[  273.163248][T13058] geneve1: entered promiscuous mode
[  273.293498][T13057] geneve1: left promiscuous mode
[  274.152512][T13079] delete_channel: no stack
[  283.622229][T13403] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000
[  283.813782][T13395] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  283.830490][T13395] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  283.833965][T13395] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  285.214313][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  285.849097][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  285.851201][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout
[  286.144190][T13489] sctp: [Deprecated]: syz.0.2224 (pid 13489) Use of struct sctp_assoc_value in delayed_ack socket option.
[  286.144190][T13489] Use struct sctp_sack_info instead
[  286.283414][T13493] bond0: entered promiscuous mode
[  286.289832][T13493] bond_slave_0: entered promiscuous mode
[  286.293076][T13493] bond_slave_1: entered promiscuous mode
[  286.585765][T13492] bond0: left promiscuous mode
[  286.587997][T13492] bond_slave_0: left promiscuous mode
[  286.597050][T13492] bond_slave_1: left promiscuous mode
[  290.072670][T13641] random: crng reseeded on system resumption
[  290.917870][T13678] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0
[  292.873437][T13736] pimreg: entered allmulticast mode
[  294.433095][   T33] audit: type=1800 audit(1754800853.791:6): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2310" name=CBFB0C2DA9205417B60C213C4B2809BF3DCBF4F5662C05E98F4F2D278050DAD6EF9B034574FCB13FFD0FE89930618587C7245DE25DCE8DD3D46FCB8EF459716CE1DB3C837F7BA6054553308435B52E99EA868FB05CDF56C931CD79A71C33274B4BF11F303011A29C4154B9411CBA89DB7B65EA1A6187FB44C094E0D5F2FBD77922AED695A7986A835BCDFB dev="tmpfs" ino=3923 res=0 errno=0
[  294.654077][T13815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  295.204020][T13827] delete_channel: no stack
[  298.168273][T13941] dvmrp0: entered allmulticast mode
[  298.198285][T13941] dvmrp0: left allmulticast mode
[  300.759282][T14038] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  300.761824][T14038] IPVS: set_ctl: invalid protocol: 4095 0.0.0.0:0
[  300.815669][T14039] IPVS: set_ctl: invalid protocol: 4095 0.0.0.0:0
[  305.544051][T14188] pim6reg: entered allmulticast mode
[  305.812227][T14186] pim6reg: left allmulticast mode
[  307.679128][T14234] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003
[  307.910768][T14244] IPVS: stopping backup sync thread 13678 ...
[  312.412436][T14402] syz.1.2504 (14402) used obsolete PPPIOCDETACH ioctl
[  317.066158][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.068380][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.813457][T14587] veth1_to_bond: entered allmulticast mode
[  318.227289][T14582] veth1_to_bond: left allmulticast mode
[  320.346511][T14672] pimreg: entered allmulticast mode
[  320.405764][T14672] pimreg: left allmulticast mode
[  321.076408][T14694] ubi0: attaching mtd0
[  321.082437][T14694] ubi0: scanning is finished
[  321.084049][T14694] ubi0: empty MTD device detected
[  321.184318][T14694] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  321.187548][T14694] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  321.191849][T14694] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  321.195169][T14694] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  321.198198][T14694] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  321.240472][T14694] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  321.259121][T14694] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2750548368
[  321.262904][T14694] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  321.268798][T14699] ubi0: background thread "ubi_bgt0d" started, PID 14699
[  326.269972][T14819] macvtap0: entered promiscuous mode
[  326.393510][T14818] macvtap0: left promiscuous mode
[  328.766851][T14874] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  334.085244][T15053] IPVS: set_ctl: invalid protocol: 25647 47.110.117.108:27746
[  334.636069][T15076] sctp: [Deprecated]: syz.0.2702 (pid 15076) Use of struct sctp_assoc_value in delayed_ack socket option.
[  334.636069][T15076] Use struct sctp_sack_info instead
[  336.682221][T15128] vlan0: entered promiscuous mode
[  337.374357][T15126] vlan0: left promiscuous mode
[  341.943244][T15273] hsr0: entered promiscuous mode
[  341.972994][T15271] hsr0: left promiscuous mode
[  349.503146][T15479] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  350.681812][T15516] macvtap0: entered promiscuous mode
[  350.992380][T15515] macvtap0: left promiscuous mode
[  352.603442][T15544] bridge0: entered allmulticast mode
[  352.619078][T15544] pim6reg: entered allmulticast mode
[  352.625805][T15544] pim6reg: left allmulticast mode
[  352.634168][T15544] bridge0: left allmulticast mode
[  352.648644][T15544] team0: left allmulticast mode
[  352.658725][T15544] team_slave_0: left allmulticast mode
[  352.668269][T15544] team_slave_1: left allmulticast mode
[  353.957517][T15576] delete_channel: no stack
[  353.988993][    T9] delete_channel: no stack
[  356.750400][T15663] dvmrp0: entered allmulticast mode
[  357.780692][T15695] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  358.285849][T15716] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  363.266761][T15846] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 3, id = 0
[  364.619566][T15890] lo: entered promiscuous mode
[  365.330159][ T5315] lo: left promiscuous mode
[  365.454077][T15919] dvmrp0: left allmulticast mode
[  367.004630][T15951] TCP: TCP_TX_DELAY enabled
[  368.587734][T15992] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004
[  371.609526][ T1069] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  371.614153][ T1069] sr 2:0:0:0: [sr0] tag#17 Sense Key : Not Ready [current] 
[  371.617717][ T1069] sr 2:0:0:0: [sr0] tag#17 Add. Sense: Medium not present
[  371.640040][ T1069] sr 2:0:0:0: [sr0] tag#17 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  371.645777][ T1069] blk_print_req_error: 1 callbacks suppressed
[  371.645788][ T1069] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0
[  371.656387][T16100] sr 2:0:0:0: [sr0] tag#27 unaligned transfer
[  371.663855][T16100] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  371.687086][T16100] buffer_io_error: 6 callbacks suppressed
[  371.687100][T16100] Buffer I/O error on dev sr0, logical block 0, async page read
[  371.707876][T16100] sr 2:0:0:0: [sr0] tag#18 unaligned transfer
[  371.727778][T16100] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  371.735337][T16100] Buffer I/O error on dev sr0, logical block 1, async page read
[  371.739881][T16100] sr 2:0:0:0: [sr0] tag#19 unaligned transfer
[  371.742675][T16100] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  371.747017][T16100] Buffer I/O error on dev sr0, logical block 2, async page read
[  371.752496][T16100] sr 2:0:0:0: [sr0] tag#20 unaligned transfer
[  371.763595][T16100] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  371.767541][T16100] Buffer I/O error on dev sr0, logical block 3, async page read
[  371.792835][T16100] sr 2:0:0:0: [sr0] tag#21 unaligned transfer
[  371.795707][T16100] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  371.808933][T16100] Buffer I/O error on dev sr0, logical block 4, async page read
[  371.812789][T16100] sr 2:0:0:0: [sr0] tag#22 unaligned transfer
[  371.815524][T16100] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  371.825891][T16100] Buffer I/O error on dev sr0, logical block 5, async page read
[  371.830187][T16100] sr 2:0:0:0: [sr0] tag#23 unaligned transfer
[  371.833589][T16100] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  371.837666][T16100] Buffer I/O error on dev sr0, logical block 6, async page read
[  371.842591][T16100] sr 2:0:0:0: [sr0] tag#28 unaligned transfer
[  371.845350][T16100] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  371.850681][T16100] Buffer I/O error on dev sr0, logical block 7, async page read
[  372.118150][T16115] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000
[  373.578803][T16191] hsr0: entered promiscuous mode
[  374.438417][T16190] hsr0: left promiscuous mode
[  378.493808][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.495968][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.821412][T16325] delete_channel: no stack
[  386.882934][T16694] sctp: [Deprecated]: syz.2.3185 (pid 16694) Use of struct sctp_assoc_value in delayed_ack socket option.
[  386.882934][T16694] Use struct sctp_sack_info instead
[  387.662672][T16723] dvmrp17: entered allmulticast mode
[  389.196492][T16790] sctp: [Deprecated]: syz.2.3212 (pid 16790) Use of struct sctp_assoc_value in delayed_ack socket option.
[  389.196492][T16790] Use struct sctp_sack_info instead
[  389.535130][T16803] random: crng reseeded on system resumption
[  390.475413][T16830] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20003
[  391.641521][T16855] dvmrp0: entered allmulticast mode
[  391.644802][T16856] dvmrp0: left allmulticast mode
[  392.348128][T16882] syz.1.3240: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  392.355571][T16882] CPU: 1 UID: 0 PID: 16882 Comm: syz.1.3240 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  392.355590][T16882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  392.355597][T16882] Call Trace:
[  392.355604][T16882]  <TASK>
[  392.355635][T16882]  dump_stack_lvl+0x189/0x250
[  392.355658][T16882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.355674][T16882]  ? __pfx__printk+0x10/0x10
[  392.355692][T16882]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  392.355707][T16882]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  392.355722][T16882]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  392.355738][T16882]  warn_alloc+0x214/0x310
[  392.355758][T16882]  ? stack_depot_save_flags+0x40/0x860
[  392.355774][T16882]  ? __pfx_warn_alloc+0x10/0x10
[  392.355793][T16882]  ? kasan_save_track+0x4f/0x80
[  392.355809][T16882]  ? xskq_create+0x56/0x170
[  392.355822][T16882]  ? xsk_init_queue+0xb0/0x110
[  392.355839][T16882]  ? xsk_setsockopt+0x4dc/0x8d0
[  392.355851][T16882]  ? do_sock_setsockopt+0x17c/0x1b0
[  392.355867][T16882]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  392.355880][T16882]  ? do_syscall_64+0xfa/0x3b0
[  392.355894][T16882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.355911][T16882]  __vmalloc_node_range_noprof+0x125/0x12f0
[  392.355943][T16882]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  392.355956][T16882]  ? __kasan_kmalloc+0x93/0xb0
[  392.355966][T16882]  vmalloc_user_noprof+0xad/0xf0
[  392.355976][T16882]  ? xskq_create+0xbf/0x170
[  392.355985][T16882]  xskq_create+0xbf/0x170
[  392.355994][T16882]  xsk_init_queue+0xb0/0x110
[  392.356003][T16882]  xsk_setsockopt+0x4dc/0x8d0
[  392.356011][T16882]  ? __pfx_xsk_setsockopt+0x10/0x10
[  392.356022][T16882]  ? __pfx_aa_sk_perm+0x10/0x10
[  392.356039][T16882]  ? aa_sock_opt_perm+0xff/0x1b0
[  392.356055][T16882]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  392.356069][T16882]  ? __pfx_xsk_setsockopt+0x10/0x10
[  392.356081][T16882]  do_sock_setsockopt+0x17c/0x1b0
[  392.356099][T16882]  __x64_sys_setsockopt+0x13f/0x1b0
[  392.356120][T16882]  do_syscall_64+0xfa/0x3b0
[  392.356133][T16882]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.356147][T16882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.356158][T16882]  ? exc_page_fault+0x9f/0xf0
[  392.356172][T16882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.356206][T16882] RIP: 0033:0x7fc79978ebe9
[  392.356219][T16882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.356229][T16882] RSP: 002b:00007fc79a584038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  392.356245][T16882] RAX: ffffffffffffffda RBX: 00007fc7999b5fa0 RCX: 00007fc79978ebe9
[  392.356255][T16882] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  392.356263][T16882] RBP: 00007fc799811e19 R08: 0000000000000004 R09: 0000000000000000
[  392.356270][T16882] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.356278][T16882] R13: 00007fc7999b6038 R14: 00007fc7999b5fa0 R15: 00007ffe502b7d58
[  392.356299][T16882]  </TASK>
[  392.357461][T16882] Mem-Info:
[  392.482943][T16882] active_anon:6569 inactive_anon:0 isolated_anon:0
[  392.482943][T16882]  active_file:1119 inactive_file:38346 isolated_file:0
[  392.482943][T16882]  unevictable:1768 dirty:77 writeback:0
[  392.482943][T16882]  slab_reclaimable:9704 slab_unreclaimable:54631
[  392.482943][T16882]  mapped:18234 shmem:2407 pagetables:936
[  392.482943][T16882]  sec_pagetables:0 bounce:0
[  392.482943][T16882]  kernel_misc_reclaimable:0
[  392.482943][T16882]  free:291235 free_pcp:21355 free_cma:0
[  392.522477][T16882] Node 0 active_anon:15372kB inactive_anon:0kB active_file:3836kB inactive_file:22048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37172kB dirty:200kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5844kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  392.536640][T16882] Node 1 active_anon:10768kB inactive_anon:0kB active_file:640kB inactive_file:131336kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35664kB dirty:108kB writeback:0kB shmem:11124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8516kB pagetables:1652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  392.551147][T16882] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  392.564270][T16882] lowmem_reserve[]: 0 811 811 811 811
[  392.566907][T16882] Node 0 DMA32 free:377512kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15576kB inactive_anon:0kB active_file:3836kB inactive_file:22048kB unevictable:3536kB writepending:200kB present:1556484kB managed:831004kB mlocked:0kB bounce:0kB free_pcp:45308kB local_pcp:13348kB free_cma:0kB
[  392.581997][T16882] lowmem_reserve[]: 0 0 0 0 0
[  392.583921][T16882] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  392.601280][T16882] lowmem_reserve[]: 0 0 854 854 854
[  392.603668][T16882] Node 1 Normal free:312872kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10768kB inactive_anon:0kB active_file:640kB inactive_file:131336kB unevictable:3536kB writepending:108kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40192kB local_pcp:23028kB free_cma:0kB
[  392.618098][T16882] lowmem_reserve[]: 0 0 0 0 0
[  392.620811][T16882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  392.626672][T16882] Node 0 DMA32: 368*4kB (M) 263*8kB (UME) 182*16kB (UME) 151*32kB (UME) 123*64kB (UME) 71*128kB (UME) 35*256kB (UME) 20*512kB (UME) 9*1024kB (UME) 6*2048kB (UME) 75*4096kB (UM) = 376184kB
[  392.636339][T16882] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  392.643874][T16882] Node 1 Normal: 1015*4kB (UE) 880*8kB (UE) 538*16kB (UE) 247*32kB (UE) 82*64kB (UE) 22*128kB (UME) 5*256kB (U) 1*512kB (M) 7*1024kB (UM) 7*2048kB (UME) 62*4096kB (UM) = 312924kB
[  392.655583][T16882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  392.660291][T16882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  392.664535][T16882] 43196 total pagecache pages
[  392.666842][T16882] 0 pages in swap cache
[  392.668804][T16882] Free swap  = 124996kB
[  392.671042][T16882] Total swap = 124996kB
[  392.673070][T16882] 786301 pages RAM
[  392.674930][T16882] 0 pages HighMem/MovableOnly
[  392.677348][T16882] 241318 pages reserved
[  392.679627][T16882] 0 pages cma reserved
[  394.176618][T16941] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20004
[  396.424407][T17014] IPVS: Unknown mcast interface: pimreg1
[  397.278497][T17051] binder: 17050:17051 ioctl c00c6211 200000000000 returned -14
[  402.994421][T17202] geneve0: entered promiscuous mode
[  403.094937][T17201] geneve0: left promiscuous mode
[  403.148999][T17204] bridge0: entered promiscuous mode
[  403.153742][T17204] IPVS: set_ctl: invalid protocol: 57344 16.127.0.0:0
[  403.157577][T17203] bridge0: left promiscuous mode
[  413.361586][T17499] random: crng reseeded on system resumption
[  413.655154][T17505] can: request_module (can-proto-0) failed.
[  417.428142][T17597] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002
[  419.413528][T17650] geneve0: entered promiscuous mode
[  419.449259][T17649] geneve0: left promiscuous mode
[  420.264142][T17656] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  421.672591][T17698] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003
[  426.249642][T17776] cgroup: fork rejected by pids controller in /syz2
[  429.371545][T17980] syz_tun: entered allmulticast mode
[  434.295513][T18017] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  434.298383][T18017] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  434.303103][T18017] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  434.758155][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  434.773028][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  434.793613][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  434.799409][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  434.804529][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  435.246440][T18026] chnl_net:caif_netlink_parms(): no params data found
[  435.413800][T18026] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.417010][T18026] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.437063][T18026] bridge_slave_0: entered allmulticast mode
[  435.450698][T18026] bridge_slave_0: entered promiscuous mode
[  435.474172][T18026] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.477588][T18026] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.491808][T18026] bridge_slave_1: entered allmulticast mode
[  435.520101][T18026] bridge_slave_1: entered promiscuous mode
[  435.612640][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout
[  435.697441][T18026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.728005][T18026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.836515][T18026] team0: Port device team_slave_0 added
[  435.850584][T18026] team0: Port device team_slave_1 added
[  435.967237][T18026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.970116][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.995592][T18026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.007867][T18026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.011740][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.036018][T18026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.121769][T18026] hsr_slave_0: entered promiscuous mode
[  436.124154][T18026] hsr_slave_1: entered promiscuous mode
[  436.126384][T18026] debugfs: 'hsr0' already exists in 'hsr'
[  436.142858][T18026] Cannot create hsr debugfs directory
[  436.342418][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  436.345072][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout
[  436.616741][T18026] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  436.633077][T18026] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  436.640028][T18026] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  436.646098][T18026] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  436.838055][T18026] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.856417][T18026] 8021q: adding VLAN 0 to HW filter on device team0
[  436.884999][T17916] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.887700][T17916] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.890504][ T5852] Bluetooth: hci3: command tx timeout
[  436.919790][T17916] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.922764][T17916] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.335217][T18026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.381646][T18026] veth0_vlan: entered promiscuous mode
[  437.398105][T18026] veth1_vlan: entered promiscuous mode
[  437.466421][T18026] veth0_macvtap: entered promiscuous mode
[  437.473328][T18026] veth1_macvtap: entered promiscuous mode
[  437.504880][T18026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.521590][T18026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.556713][ T5879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.580096][ T5879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.583547][ T5879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.601441][ T5879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.701643][ T7298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.705280][ T7298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.759594][ T7298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.762862][ T7298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.969126][ T5852] Bluetooth: hci3: command tx timeout
[  439.950190][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  439.953144][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  441.049215][ T5852] Bluetooth: hci3: command tx timeout
[  442.241970][T18137] pim6reg: entered allmulticast mode
[  442.245400][T18137] pim6reg: left allmulticast mode
[  442.693548][T18149] syz.2.3577: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  442.699578][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.2.3577 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  442.699591][T18149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  442.699595][T18149] Call Trace:
[  442.699599][T18149]  <TASK>
[  442.699602][T18149]  dump_stack_lvl+0x189/0x250
[  442.699616][T18149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  442.699626][T18149]  ? __pfx__printk+0x10/0x10
[  442.699637][T18149]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  442.699647][T18149]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  442.699656][T18149]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  442.699665][T18149]  warn_alloc+0x214/0x310
[  442.699678][T18149]  ? stack_depot_save_flags+0x40/0x860
[  442.699687][T18149]  ? __pfx_warn_alloc+0x10/0x10
[  442.699698][T18149]  ? kasan_save_track+0x4f/0x80
[  442.699708][T18149]  ? xskq_create+0x56/0x170
[  442.699715][T18149]  ? xsk_init_queue+0xb0/0x110
[  442.699721][T18149]  ? xsk_setsockopt+0x4dc/0x8d0
[  442.699728][T18149]  ? do_sock_setsockopt+0x17c/0x1b0
[  442.699737][T18149]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  442.699745][T18149]  ? do_syscall_64+0xfa/0x3b0
[  442.699754][T18149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.699764][T18149]  __vmalloc_node_range_noprof+0x125/0x12f0
[  442.699787][T18149]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  442.699799][T18149]  ? __kasan_kmalloc+0x93/0xb0
[  442.699810][T18149]  vmalloc_user_noprof+0xad/0xf0
[  442.699820][T18149]  ? xskq_create+0xbf/0x170
[  442.699828][T18149]  xskq_create+0xbf/0x170
[  442.699837][T18149]  xsk_init_queue+0xb0/0x110
[  442.699846][T18149]  xsk_setsockopt+0x4dc/0x8d0
[  442.699855][T18149]  ? __pfx_xsk_setsockopt+0x10/0x10
[  442.699862][T18149]  ? __pfx_aa_sk_perm+0x10/0x10
[  442.699873][T18149]  ? aa_sock_opt_perm+0xff/0x1b0
[  442.699884][T18149]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  442.699892][T18149]  ? __pfx_xsk_setsockopt+0x10/0x10
[  442.699900][T18149]  do_sock_setsockopt+0x17c/0x1b0
[  442.699911][T18149]  __x64_sys_setsockopt+0x13f/0x1b0
[  442.699923][T18149]  do_syscall_64+0xfa/0x3b0
[  442.699931][T18149]  ? lockdep_hardirqs_on+0x9c/0x150
[  442.699939][T18149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.699945][T18149]  ? exc_page_fault+0x9f/0xf0
[  442.699954][T18149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.699961][T18149] RIP: 0033:0x7f222618ebe9
[  442.699968][T18149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.699974][T18149] RSP: 002b:00007f2226f1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  442.699983][T18149] RAX: ffffffffffffffda RBX: 00007f22263b5fa0 RCX: 00007f222618ebe9
[  442.699988][T18149] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  442.699992][T18149] RBP: 00007f2226211e19 R08: 0000000000000004 R09: 0000000000000000
[  442.699996][T18149] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  442.700001][T18149] R13: 00007f22263b6038 R14: 00007f22263b5fa0 R15: 00007ffdc40b09b8
[  442.700011][T18149]  </TASK>
[  442.700014][T18149] Mem-Info:
[  442.846280][T18149] active_anon:6926 inactive_anon:0 isolated_anon:0
[  442.846280][T18149]  active_file:1193 inactive_file:38365 isolated_file:0
[  442.846280][T18149]  unevictable:1768 dirty:27 writeback:0
[  442.846280][T18149]  slab_reclaimable:9627 slab_unreclaimable:59880
[  442.846280][T18149]  mapped:23846 shmem:2414 pagetables:1002
[  442.846280][T18149]  sec_pagetables:0 bounce:0
[  442.846280][T18149]  kernel_misc_reclaimable:0
[  442.846280][T18149]  free:273977 free_pcp:19585 free_cma:0
[  442.894866][T18149] Node 0 active_anon:15728kB inactive_anon:0kB active_file:4132kB inactive_file:22124kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38248kB dirty:64kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6356kB pagetables:1816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  442.984408][T18149] Node 1 active_anon:12180kB inactive_anon:0kB active_file:640kB inactive_file:131336kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:57204kB dirty:44kB writeback:0kB shmem:10148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8688kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  443.056177][T18149] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  443.125220][T18149] lowmem_reserve[]: 0 811 811 811 811
[  443.127183][T18149] Node 0 DMA32 free:369556kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15728kB inactive_anon:0kB active_file:4132kB inactive_file:22124kB unevictable:3536kB writepending:64kB present:1556484kB managed:831004kB mlocked:0kB bounce:0kB free_pcp:35916kB local_pcp:13904kB free_cma:0kB
[  443.149401][T18149] lowmem_reserve[]: 0 0 0 0 0
[  443.152132][T18149] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  443.156261][ T5852] Bluetooth: hci3: command tx timeout
[  443.188959][T18149] lowmem_reserve[]: 0 0 854 854 854
[  443.207254][T18149] Node 1 Normal free:246916kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12180kB inactive_anon:0kB active_file:640kB inactive_file:131336kB unevictable:3536kB writepending:44kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36596kB local_pcp:18860kB free_cma:0kB
[  443.251435][T18149] lowmem_reserve[]: 0 0 0 0 0
[  443.295216][T18149] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  443.301954][T18149] Node 0 DMA32: 397*4kB (UME) 1024*8kB (UME) 514*16kB (UME) 108*32kB (UME) 81*64kB (UME) 37*128kB (UME) 18*256kB (UME) 17*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 75*4096kB (UME) = 369300kB
[  443.347228][T18149] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  443.389257][T18149] Node 1 Normal: 785*4kB (UME) 140*8kB (M) 72*16kB (ME) 15*32kB (ME) 22*64kB (UME) 30*128kB (UME) 13*256kB (UM) 3*512kB (UM) 7*1024kB (UM) 3*2048kB (UME) 53*4096kB (UM) = 246404kB
[  443.410350][T18149] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  443.422763][T18149] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  443.432876][T18149] 41970 total pagecache pages
[  443.437692][T18149] 0 pages in swap cache
[  443.447757][T18149] Free swap  = 124996kB
[  443.453917][T18149] Total swap = 124996kB
[  443.489148][T18149] 786301 pages RAM
[  443.499723][T18149] 0 pages HighMem/MovableOnly
[  443.516160][T18149] 241318 pages reserved
[  443.546454][T18149] 0 pages cma reserved
[  445.556244][   T33] audit: type=1800 audit(1754801004.901:7): pid=18221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3598" name="file0" dev="tmpfs" ino=6319 res=0 errno=0
[  446.692934][ T5879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.862809][ T5879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.953280][ T5879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.056175][ T5879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.361177][ T5879] bridge_slave_1: left allmulticast mode
[  447.363924][ T5879] bridge_slave_1: left promiscuous mode
[  447.367567][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.457313][ T5879] bridge_slave_0: left allmulticast mode
[  447.479169][ T5879] bridge_slave_0: left promiscuous mode
[  447.481927][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.726812][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.762951][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.785482][ T5879] bond0 (unregistering): Released all slaves
[  448.984608][ T5879] IPVS: stopping master sync thread 6487 ...
[  449.341134][T18352] syz_tun: entered promiscuous mode
[  449.735180][ T5879] hsr_slave_0: left promiscuous mode
[  449.745333][ T5879] hsr_slave_1: left promiscuous mode
[  449.748555][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.751957][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.755646][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.758252][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.774627][ T5879] veth1_macvtap: left promiscuous mode
[  449.777176][ T5879] veth0_macvtap: left promiscuous mode
[  449.781169][ T5879] veth1_vlan: left allmulticast mode
[  449.783616][ T5879] veth1_vlan: left promiscuous mode
[  449.786965][ T5879] veth0_vlan: left promiscuous mode
[  449.853440][ T5879] pimreg3 (unregistering): left allmulticast mode
[  449.878796][ T5879] pim6reg9 (unregistering): left allmulticast mode
[  450.061321][ T5879] macvlan0 (unregistering): left allmulticast mode
[  450.698251][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  450.757479][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  451.511465][T18350] syz_tun: left promiscuous mode
[  452.198394][ T5879] IPVS: stop unused estimator thread 0...
[  452.845206][T18459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  452.872903][T18459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  452.910914][T18459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  452.939636][T18463] veth0: entered promiscuous mode
[  452.948457][T18463] veth0: left promiscuous mode
[  457.561209][T18647] dummy0: entered promiscuous mode
[  457.624991][T18649] veth0_to_bridge: entered promiscuous mode
[  457.652370][T18648] veth0_to_bridge: left promiscuous mode
[  458.325804][T18645] dummy0: left promiscuous mode
[  458.521152][T18668] delete_channel: no stack
[  459.182024][T18688] IPVS: set_ctl: invalid protocol: 65532 0.0.0.0:0
[  459.185123][T18688] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  462.482758][T18804] IPVS: stopping backup sync thread 15846 ...
[  464.211587][T18879] random: crng reseeded on system resumption
[  464.232653][T18878] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20004
[  464.235031][T18880] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 4, id = 0
[  464.602178][T18887] random: crng reseeded on system resumption
[  471.307631][T19104] syz.2.3823: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  471.338969][T19104] CPU: 0 UID: 0 PID: 19104 Comm: syz.2.3823 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  471.338984][T19104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.338989][T19104] Call Trace:
[  471.338994][T19104]  <TASK>
[  471.338998][T19104]  dump_stack_lvl+0x189/0x250
[  471.339013][T19104]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.339023][T19104]  ? __pfx__printk+0x10/0x10
[  471.339035][T19104]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  471.339045][T19104]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  471.339055][T19104]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  471.339066][T19104]  warn_alloc+0x214/0x310
[  471.339079][T19104]  ? stack_depot_save_flags+0x40/0x860
[  471.339089][T19104]  ? __pfx_warn_alloc+0x10/0x10
[  471.339100][T19104]  ? kasan_save_track+0x4f/0x80
[  471.339110][T19104]  ? xskq_create+0x56/0x170
[  471.339119][T19104]  ? xsk_init_queue+0xb0/0x110
[  471.339127][T19104]  ? xsk_setsockopt+0x4dc/0x8d0
[  471.339134][T19104]  ? do_sock_setsockopt+0x17c/0x1b0
[  471.339166][T19104]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  471.339177][T19104]  ? do_syscall_64+0xfa/0x3b0
[  471.339186][T19104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.339197][T19104]  __vmalloc_node_range_noprof+0x125/0x12f0
[  471.339237][T19104]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  471.339253][T19104]  ? __kasan_kmalloc+0x93/0xb0
[  471.339266][T19104]  vmalloc_user_noprof+0xad/0xf0
[  471.339277][T19104]  ? xskq_create+0xbf/0x170
[  471.339286][T19104]  xskq_create+0xbf/0x170
[  471.339296][T19104]  xsk_init_queue+0xb0/0x110
[  471.339306][T19104]  xsk_setsockopt+0x4dc/0x8d0
[  471.339315][T19104]  ? __pfx_xsk_setsockopt+0x10/0x10
[  471.339323][T19104]  ? __pfx_aa_sk_perm+0x10/0x10
[  471.339334][T19104]  ? aa_sock_opt_perm+0xff/0x1b0
[  471.339345][T19104]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  471.339355][T19104]  ? __pfx_xsk_setsockopt+0x10/0x10
[  471.339363][T19104]  do_sock_setsockopt+0x17c/0x1b0
[  471.339377][T19104]  __x64_sys_setsockopt+0x13f/0x1b0
[  471.339395][T19104]  do_syscall_64+0xfa/0x3b0
[  471.339404][T19104]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.339412][T19104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.339420][T19104]  ? exc_page_fault+0x9f/0xf0
[  471.339429][T19104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.339436][T19104] RIP: 0033:0x7f222618ebe9
[  471.339445][T19104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.339451][T19104] RSP: 002b:00007f222400c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  471.339461][T19104] RAX: ffffffffffffffda RBX: 00007f22263b6090 RCX: 00007f222618ebe9
[  471.339467][T19104] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  471.339472][T19104] RBP: 00007f2226211e19 R08: 0000000000000004 R09: 0000000000000000
[  471.339477][T19104] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.339482][T19104] R13: 00007f22263b6128 R14: 00007f22263b6090 R15: 00007ffdc40b09b8
[  471.339495][T19104]  </TASK>
[  471.339521][T19104] Mem-Info:
[  471.639064][T19104] active_anon:7742 inactive_anon:0 isolated_anon:0
[  471.639064][T19104]  active_file:1194 inactive_file:38376 isolated_file:0
[  471.639064][T19104]  unevictable:1768 dirty:52 writeback:0
[  471.639064][T19104]  slab_reclaimable:9764 slab_unreclaimable:61619
[  471.639064][T19104]  mapped:19822 shmem:2908 pagetables:1156
[  471.639064][T19104]  sec_pagetables:0 bounce:0
[  471.639064][T19104]  kernel_misc_reclaimable:0
[  471.639064][T19104]  free:278669 free_pcp:21425 free_cma:0
[  471.697508][T19104] Node 0 active_anon:15800kB inactive_anon:0kB active_file:4132kB inactive_file:22160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:21152kB dirty:196kB writeback:0kB shmem:172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5980kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  471.779048][T19104] Node 1 active_anon:16220kB inactive_anon:0kB active_file:640kB inactive_file:131344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:59356kB dirty:8kB writeback:0kB shmem:12688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8732kB pagetables:2408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  471.859740][T19104] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  471.949273][T19104] lowmem_reserve[]: 0 811 811 811 811
[  471.981317][T19104] Node 0 DMA32 free:412692kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16968kB inactive_anon:0kB active_file:4132kB inactive_file:22160kB unevictable:3536kB writepending:196kB present:1556484kB managed:831004kB mlocked:0kB bounce:0kB free_pcp:39832kB local_pcp:14068kB free_cma:0kB
[  472.079454][T19104] lowmem_reserve[]: 0 0 0 0 0
[  472.081233][T19104] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  472.188970][T19104] lowmem_reserve[]: 0 0 854 854 854
[  472.192040][T19104] Node 1 Normal free:234064kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17988kB inactive_anon:0kB active_file:640kB inactive_file:131344kB unevictable:3536kB writepending:8kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39120kB local_pcp:15128kB free_cma:0kB
[  472.390921][T19104] lowmem_reserve[]: 0 0 0 0 0
[  472.393174][T19104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  472.479084][T19104] Node 0 DMA32: 1028*4kB (UME) 673*8kB (UME) 610*16kB (UME) 459*32kB (UM) 214*64kB (UM) 76*128kB (UM) 34*256kB (UME) 20*512kB (UME) 10*1024kB (UM) 9*2048kB (UME) 75*4096kB (UME) = 412184kB
[  472.510536][T19104] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  472.516699][T19104] Node 1 Normal: 209*4kB (UE) 805*8kB (UME) 98*16kB (UE) 128*32kB (UE) 46*64kB (UE) 21*128kB (UME) 14*256kB (UM) 7*512kB (UM) 4*1024kB (M) 4*2048kB (UME) 48*4096kB (UM) = 234636kB
[  472.531897][T19104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  472.572261][T19104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  472.575738][T19104] 44857 total pagecache pages
[  472.577399][T19104] 0 pages in swap cache
[  472.581186][T19104] Free swap  = 124996kB
[  472.582644][T19104] Total swap = 124996kB
[  472.584131][T19104] 786301 pages RAM
[  472.585616][T19104] 0 pages HighMem/MovableOnly
[  472.587230][T19104] 241318 pages reserved
[  472.588690][T19104] 0 pages cma reserved
[  473.526650][T19166] veth0: entered promiscuous mode
[  473.663687][T19165] veth0: left promiscuous mode
[  473.955271][T19182] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000
[  474.494835][T19224] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  474.509575][T19223] IPVS: stopping backup sync thread 19224 ...
[  474.960744][T19236] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20004
[  475.303259][T19240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  475.306336][T19240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  475.318986][T19240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  475.324979][T19255] random: crng reseeded on system resumption
[  477.521594][T19317] IPVS: Scheduler module ip_vs_ not found
[  478.913968][T19365] sctp: [Deprecated]: syz.2.3900 (pid 19365) Use of struct sctp_assoc_value in delayed_ack socket option.
[  478.913968][T19365] Use struct sctp_sack_info instead
[  482.233422][T19465] ubi: mtd0 is already attached to ubi0
[  482.375678][T19475] pim6reg: entered allmulticast mode
[  485.008000][T19565] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000
[  487.426891][T19630] pimreg: left allmulticast mode
[  494.149405][T19825] veth1_to_bond: entered allmulticast mode
[  494.154620][T19824] veth1_to_bond: left allmulticast mode
[  494.816488][T19873] delete_channel: no stack
[  495.226973][T19884] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  496.481601][T19935] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  497.983853][T19996] team0: entered promiscuous mode
[  497.986168][T19996] team_slave_0: entered promiscuous mode
[  497.988384][T19996] team_slave_1: entered promiscuous mode
[  498.022634][T19996] ip6gre0: entered promiscuous mode
[  498.132684][T19991] ip6gre0: left promiscuous mode
[  498.146240][T19991] team0: left promiscuous mode
[  498.148253][T19991] team_slave_0: left promiscuous mode
[  498.150957][T19991] team_slave_1: left promiscuous mode
[  500.544710][T20071] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003
[  501.352261][T20071] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  501.355471][T20071] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  501.358547][T20071] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  501.362471][T20071] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  501.368702][T20071] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  501.374995][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  501.382648][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  502.679069][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout
[  503.389258][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout
[  503.392025][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  505.449311][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout
[  505.905186][T20268] ipvlan1: entered promiscuous mode
[  505.988358][T20267] ipvlan1: left promiscuous mode
[  506.037481][T20274] erspan0: entered promiscuous mode
[  506.055077][T20273] erspan0: left promiscuous mode
[  506.120769][T20280] team0: entered promiscuous mode
[  506.128064][T20280] team_slave_0: entered promiscuous mode
[  506.133831][T20280] team_slave_1: entered promiscuous mode
[  506.887792][T20275] team0: left promiscuous mode
[  506.893864][T20275] team_slave_0: left promiscuous mode
[  506.895858][T20275] team_slave_1: left promiscuous mode
[  507.529833][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout
[  513.809077][T20500] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  513.812753][T20501] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  517.605805][T20619] can: request_module (can-proto-0) failed.
[  518.683637][   T47] IPVS: starting estimator thread 0...
[  518.793527][T20668] IPVS: using max 50 ests per chain, 120000 per kthread
[  521.589092][   T33] audit: type=1800 audit(1754801080.941:8): pid=20779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4329" name="file1" dev="tmpfs" ino=7655 res=0 errno=0
[  523.759189][T20839] dvmrp1: entered allmulticast mode
[  523.763997][T20841] dvmrp1: left allmulticast mode
[  523.776871][T20841] syz_tun: left allmulticast mode
[  523.864983][T20841] dvmrp17: left allmulticast mode
[  524.954359][   T33] audit: type=1800 audit(1754801084.281:9): pid=20878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4362" name=FFFFFFFFAC1414AA dev="tmpfs" ino=1291 res=0 errno=0
[  525.447215][T20894] veth0: entered promiscuous mode
[  525.449419][T20894] veth0: left promiscuous mode
[  529.566272][T20999] vlan0: entered promiscuous mode
[  529.716847][T20995] vlan0: left promiscuous mode
[  530.039247][T21002] syz_tun: entered allmulticast mode
[  530.205210][T21001] syz_tun: left allmulticast mode
[  531.376929][ T5887] delete_channel: no stack
[  532.780218][T21066] sctp: [Deprecated]: syz.0.4422 (pid 21066) Use of struct sctp_assoc_value in delayed_ack socket option.
[  532.780218][T21066] Use struct sctp_sack_info instead
[  534.410445][T21132] sock: sock_set_timeout: `syz.3.4441' (pid 21132) tries to set negative timeout
[  534.761934][T21144] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20001
[  538.162300][T21333] veth1_to_bond: entered allmulticast mode
[  538.183611][T21332] veth1_to_bond: left allmulticast mode
[  538.974513][T21359] sctp: [Deprecated]: syz.3.4507 (pid 21359) Use of struct sctp_assoc_value in delayed_ack socket option.
[  538.974513][T21359] Use struct sctp_sack_info instead
[  540.179913][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.201713][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.204449][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.208151][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.211303][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.214378][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.216918][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.263654][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.266434][T21422] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  540.569916][T21436] dvmrp17: entered allmulticast mode
[  540.573596][T21436] dvmrp17: left allmulticast mode
[  541.327702][T21459] dummy0: entered promiscuous mode
[  541.497669][T21457] dummy0: left promiscuous mode
[  542.281270][T21474] dvmrp1: entered allmulticast mode
[  542.290366][T21473] dvmrp1: left allmulticast mode
[  544.021842][T21508] veth1_to_bond: entered allmulticast mode
[  544.469106][T21508] veth1_to_bond: left allmulticast mode
[  549.290969][   T33] audit: type=1804 audit(1754801108.651:10): pid=21652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4600" name="/newroot/1521/file0" dev="tmpfs" ino=7747 res=1 errno=0
[  549.307069][   T33] audit: type=1800 audit(1754801108.661:11): pid=21652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4600" name="file0" dev="tmpfs" ino=7747 res=0 errno=0
[  549.353988][   T33] audit: type=1800 audit(1754801108.711:12): pid=21657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4602" name=CBFB0C2DA9205417B60C213C4B2809BF3DCBF4F5662C05E98F4F2D278050DAD6EF9B034574FCB13FFD0FE89930618587C7245DE25DCE8DD3D46FCB8EF459716CE1DB3C837F7BA6054553308435B52E99EA868FB05CDF56C931CD79A71C33274B4BF11F303011A29C4154B9411CBA89DB7B65EA1A6187FB44C094E0D5F2FBD77922AED695A7986A835BCDFB dev="tmpfs" ino=1666 res=0 errno=0
[  550.116602][T21685] IPVS: Unknown mcast interface: 
[  551.708516][T21738] veth1_to_bond: entered allmulticast mode
[  551.808913][T21737] veth1_to_bond: left allmulticast mode
[  551.923352][   T33] audit: type=1800 audit(1754801111.281:13): pid=21743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4631" name="file1" dev="tmpfs" ino=8162 res=0 errno=0
[  552.368300][T21758] dvmrp17: entered allmulticast mode
[  553.434860][T21783] sock: sock_set_timeout: `syz.2.4639' (pid 21783) tries to set negative timeout
[  555.720177][T21863] sctp: [Deprecated]: syz.2.4668 (pid 21863) Use of struct sctp_assoc_value in delayed_ack socket option.
[  555.720177][T21863] Use struct sctp_sack_info instead
[  556.581046][T21877] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  556.902438][T21883] hsr0: entered promiscuous mode
[  556.945119][T21882] hsr0: left promiscuous mode
[  560.172889][ T7542] ------------[ cut here ]------------
[  560.176461][ T7542] WARNING: CPU: 1 PID: 7542 at io_uring/io_uring.c:2981 io_ring_exit_work+0x4ed/0x930
[  560.181008][ T7542] Modules linked in:
[  560.182726][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: kworker/u10:22 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  560.188355][ T7542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  560.192170][ T7542] Workqueue: iou_exit io_ring_exit_work
[  560.194071][ T7542] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[  560.196032][ T7542] Code: c6 05 08 aa 61 0e 01 48 c7 c7 00 50 e2 8b be 24 00 00 00 48 c7 c2 a0 4f e2 8b e8 ce 1d 72 00 e9 7b fe ff ff e8 74 43 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[  560.203288][ T7542] RSP: 0018:ffffc9000b2278e0 EFLAGS: 00010293
[  560.205658][ T7542] RAX: ffffffff812b683c RBX: 00000001000064f8 RCX: ffff888108b39cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  560.208742][ T7542] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000
[  560.212361][ T7542] RBP: ffffc9000b227a70 R08: ffffc9000b227867 R09: 1ffff92001644f0c
[  560.215156][ T7542] R10: dffffc0000000000 R11: fffff52001644f0d R12: 00000001000064f6
[  560.217986][ T7542] R13: ffff88803aab8310 R14: ffff88803aab8480 R15: dffffc0000000000
[  560.221881][ T7542] FS:  0000000000000000(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  560.225486][ T7542] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  560.227797][ T7542] CR2: 000055558b2e6588 CR3: 000000012389e000 CR4: 00000000000006f0
[  560.231483][ T7542] Call Trace:
[  560.232752][ T7542]  <TASK>
[  560.233989][ T7542]  ? __pfx_io_ring_exit_work+0x10/0x10
[  560.236339][ T7542]  ? _raw_spin_unlock_irq+0x23/0x50
[  560.238645][ T7542]  ? process_scheduled_works+0x9ef/0x17b0
[  560.241161][ T7542]  ? process_scheduled_works+0x9ef/0x17b0
[  560.243697][ T7542]  process_scheduled_works+0xae1/0x17b0
[  560.245979][ T7542]  ? __pfx_process_scheduled_works+0x10/0x10
[  560.249394][ T7542]  worker_thread+0x8a0/0xda0
[  560.251517][ T7542]  kthread+0x711/0x8a0
[  560.253119][ T7542]  ? __pfx_worker_thread+0x10/0x10
[  560.254916][ T7542]  ? __pfx_kthread+0x10/0x10
[  560.256595][ T7542]  ? _raw_spin_unlock_irq+0x23/0x50
[  560.258517][ T7542]  ? lockdep_hardirqs_on+0x9c/0x150
[  560.261000][ T7542]  ? __pfx_kthread+0x10/0x10
[  560.262818][ T7542]  ret_from_fork+0x3fc/0x770
[  560.264610][ T7542]  ? __pfx_ret_from_fork+0x10/0x10
[  560.266452][ T7542]  ? __switch_to_asm+0x39/0x70
[  560.268150][ T7542]  ? __switch_to_asm+0x33/0x70
[  560.270222][ T7542]  ? __pfx_kthread+0x10/0x10
[  560.271815][ T7542]  ret_from_fork_asm+0x1a/0x30
[  560.273446][ T7542]  </TASK>
[  560.274563][ T7542] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  560.277167][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: kworker/u10:22 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  560.282454][ T7542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  560.286454][ T7542] Workqueue: iou_exit io_ring_exit_work
[  560.288834][ T7542] Call Trace:
[  560.290129][ T7542]  <TASK>
[  560.291276][ T7542]  dump_stack_lvl+0x99/0x250
[  560.293051][ T7542]  ? __asan_memcpy+0x40/0x70
[  560.295009][ T7542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  560.297045][ T7542]  ? __pfx__printk+0x10/0x10
[  560.298975][ T7542]  vpanic+0x281/0x750
[  560.300692][ T7542]  ? __pfx__printk+0x10/0x10
[  560.302613][ T7542]  ? __pfx_vpanic+0x10/0x10
[  560.304351][ T7542]  ? is_bpf_text_address+0x26/0x2b0
[  560.306602][ T7542]  panic+0xb9/0xc0
[  560.308277][ T7542]  ? __pfx_panic+0x10/0x10
[  560.310385][ T7542]  __warn+0x31b/0x4b0
[  560.312232][ T7542]  ? io_ring_exit_work+0x4ed/0x930
[  560.314447][ T7542]  ? io_ring_exit_work+0x4ed/0x930
[  560.316597][ T7542]  report_bug+0x2be/0x4f0
[  560.318547][ T7542]  ? io_ring_exit_work+0x4ed/0x930
[  560.320901][ T7542]  ? io_ring_exit_work+0x4ed/0x930
[  560.323290][ T7542]  ? io_ring_exit_work+0x4ef/0x930
[  560.325740][ T7542]  handle_bug+0x84/0x160
[  560.327795][ T7542]  exc_invalid_op+0x1a/0x50
[  560.329946][ T7542]  asm_exc_invalid_op+0x1a/0x20
[  560.332171][ T7542] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[  560.334715][ T7542] Code: c6 05 08 aa 61 0e 01 48 c7 c7 00 50 e2 8b be 24 00 00 00 48 c7 c2 a0 4f e2 8b e8 ce 1d 72 00 e9 7b fe ff ff e8 74 43 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[  560.343024][ T7542] RSP: 0018:ffffc9000b2278e0 EFLAGS: 00010293
[  560.345521][ T7542] RAX: ffffffff812b683c RBX: 00000001000064f8 RCX: ffff888108b39cc0
[  560.348917][ T7542] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000
[  560.352183][ T7542] RBP: ffffc9000b227a70 R08: ffffc9000b227867 R09: 1ffff92001644f0c
[  560.355327][ T7542] R10: dffffc0000000000 R11: fffff52001644f0d R12: 00000001000064f6
[  560.358821][ T7542] R13: ffff88803aab8310 R14: ffff88803aab8480 R15: dffffc0000000000
[  560.362337][ T7542]  ? io_ring_exit_work+0x4ec/0x930
[  560.364682][ T7542]  ? __pfx_io_ring_exit_work+0x10/0x10
[  560.367177][ T7542]  ? _raw_spin_unlock_irq+0x23/0x50
[  560.369842][ T7542]  ? process_scheduled_works+0x9ef/0x17b0
[  560.372436][ T7542]  ? process_scheduled_works+0x9ef/0x17b0
[  560.374410][ T7542]  process_scheduled_works+0xae1/0x17b0
[  560.376659][ T7542]  ? __pfx_process_scheduled_works+0x10/0x10
[  560.379378][ T7542]  worker_thread+0x8a0/0xda0
[  560.381326][ T7542]  kthread+0x711/0x8a0
[  560.382804][ T7542]  ? __pfx_worker_thread+0x10/0x10
[  560.384606][ T7542]  ? __pfx_kthread+0x10/0x10
[  560.386299][ T7542]  ? _raw_spin_unlock_irq+0x23/0x50
[  560.388182][ T7542]  ? lockdep_hardirqs_on+0x9c/0x150
[  560.390209][ T7542]  ? __pfx_kthread+0x10/0x10
[  560.392255][ T7542]  ret_from_fork+0x3fc/0x770
[  560.394308][ T7542]  ? __pfx_ret_from_fork+0x10/0x10
[  560.396706][ T7542]  ? __switch_to_asm+0x39/0x70
[  560.398921][ T7542]  ? __switch_to_asm+0x33/0x70
[  560.400807][ T7542]  ? __pfx_kthread+0x10/0x10
[  560.402507][ T7542]  ret_from_fork_asm+0x1a/0x30
[  560.404227][ T7542]  </TASK>
[  560.405971][ T7542] Kernel Offset: disabled
[  560.407517][ T7542] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:45:19  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff92000024eae RBX=0000000000000001 RCX=e1ec3e98b90f5500 RDX=ffffffff8b884120
RSI=ffffffff8be325e0 RDI=ffffffff8be325a0 RBP=dffffc0000000000 RSP=ffffc90000127458
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90000127578 R11=ffffffff81ac3890
R12=ffffffff8222dd7d R13=ffffc90000127578 R14=ffffc90000127528 R15=ffffc90000127570
RIP=ffffffff8172c2af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558b2d3808 CR3=0000000123f34000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000b227090
R8 =ffff888020ec0237 R9 =1ffff110041d8046 R10=dffffc0000000000 R11=ffffffff854e7720
R12=dffffc0000000000 R13=ffffffff99af28d9 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e779c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558b2e6588 CR3=000000012389e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f917f987498 00007f917f987470 XMM03=00007f917f9874a8 00007f917f9874a0
XMM04=00007f91804ed100 00007f917f987460 XMM05=00007f917f987478 00007f917f9874c0
XMM06=00007f917f9874b8 00007f917f9874b0 XMM07=00007f917f9874a8 00007f917f9874a0
XMM08=79cd31c956df5cb0 8f86ea992eb53584 XMM09=0000000000000000 00007f917f812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
