last executing test programs:

18m20.505318853s ago: executing program 0 (id=477):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
syz_io_uring_setup(0x2963, &(0x7f0000000180)={0x0, 0xc71b, 0x4000, 0x2, 0xc3, 0x0, r0}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000240))
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0xf, 0x0, @fd_index=0x9, 0xeb23, 0x0, 0x1, 0x1, 0x0, {0x0, r5}})
syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x1, 0x3, &(0x7f0000000280)="92ffeedf223dae5e3146e7afe70cf3f39a27cc845e46b7893a86fb5624a84952e7df150cc63bfb89f991409ac35f856106b756e17e6a964b6d3604dbb904765970ff88b58499b498442d1a968091b2d9760df50435e0127a59d1c9d1332cd3586d4a496ca51e73be6592d97e2ee9997739d363b42f78999db3fb0e7c6a8d55dfa85cb6a702129a9b1a39b657592bccdea09f540e2b12e34939579a1e41f22b596d9d00bee961ff80ce5b8cc9a776a5bee73dfc1ca5e371886128b815460baf2ca5", 0x8000, 0x0, 0x1, {0x2, r5}})
syz_io_uring_setup(0x5e8d, &(0x7f0000000080)={0x0, 0x74c2, 0x20000, 0x1, 0x15f, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f00000001c0)=0x4, 0x4)
setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000000)=r0, 0x1)

18m20.437996952s ago: executing program 0 (id=479):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
close(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x80081270, &(0x7f0000000000))
r1 = io_uring_setup(0xad1, &(0x7f0000000180)={0x0, 0xe4df, 0x20000, 0x0, 0x147})
r2 = syz_io_uring_setup(0x5bf1, &(0x7f0000000600)={0x0, 0xd21, 0x0, 0x7ffe, 0x40424e, 0x0, r1}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0x3d}, &(0x7f0000000040)='./file0/file0\x00', 0xff52})
syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300))
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
clock_gettime(0x3, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r2, 0x0, 0x0, 0x0, 0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r9, 0x0, 0xf, 0x0, 0x0)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000500)={0x0, 0x8e71, 0x8000, 0x5, 0x1e0}, &(0x7f0000000200), &(0x7f00000000c0))
r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x200180, 0x0)
r11 = io_uring_setup(0x4cbf, &(0x7f00000003c0)={0x0, 0x3ad6, 0x800, 0x1, 0xa1, 0x0, r5})
io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r10, 0x23, &(0x7f0000000140)=r10, 0x1)

18m19.879180847s ago: executing program 0 (id=486):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
close(0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(0x3)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x40045431, &(0x7f0000000000))

18m19.728282778s ago: executing program 0 (id=487):
r0 = syz_io_uring_setup(0x4b47, &(0x7f0000000080)={0x0, 0xd47e, 0x200, 0x3, 0x284}, &(0x7f0000000000), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000040), 0x1)

18m19.675637226s ago: executing program 0 (id=488):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0xfffffffd, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x80108906, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, r2}, 0x14)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

18m19.616924384s ago: executing program 0 (id=489):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r4, 0xffbffffffffffffe, 0x0}) (async)
io_uring_enter(r1, 0x3512, 0x95ff, 0x0, 0x0, 0x0) (async)
close(r0) (async)
openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) (async)
r5 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0) (async)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x0, 0x20907095b00b9e4c}) (async)
r10 = socket$tipc(0x1e, 0x5, 0x0)
io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x40, 0x100, 0x0, 0x20}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x89fc, &(0x7f0000000040)={'gre0\x00'})
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x24, 0x0, 0x2}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r5}) (async)
r11 = io_uring_setup(0x50d, &(0x7f0000000000)={0x0, 0x9f57, 0x80, 0x1, 0x336})
io_uring_register$IORING_REGISTER_MEM_REGION(r11, 0x22, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1000000, 0x80000001, 0xcc5}}, 0x1)
io_uring_enter(r5, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) (async)
r12 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x24ad, 0x1000, 0xfffffffe, 0x11de, 0x0, r11}, &(0x7f00000029c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD(r12, 0x23, &(0x7f0000000040), 0x1)

18m4.583183764s ago: executing program 32 (id=489):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r4, 0xffbffffffffffffe, 0x0}) (async)
io_uring_enter(r1, 0x3512, 0x95ff, 0x0, 0x0, 0x0) (async)
close(r0) (async)
openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) (async)
r5 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0) (async)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x0, 0x20907095b00b9e4c}) (async)
r10 = socket$tipc(0x1e, 0x5, 0x0)
io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x40, 0x100, 0x0, 0x20}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x89fc, &(0x7f0000000040)={'gre0\x00'})
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x24, 0x0, 0x2}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r5}) (async)
r11 = io_uring_setup(0x50d, &(0x7f0000000000)={0x0, 0x9f57, 0x80, 0x1, 0x336})
io_uring_register$IORING_REGISTER_MEM_REGION(r11, 0x22, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1000000, 0x80000001, 0xcc5}}, 0x1)
io_uring_enter(r5, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) (async)
r12 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x24ad, 0x1000, 0xfffffffe, 0x11de, 0x0, r11}, &(0x7f00000029c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD(r12, 0x23, &(0x7f0000000040), 0x1)

9m59.642080955s ago: executing program 2 (id=6872):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x3a, 0xa, 0x2, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @loopback, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x58)
r1 = io_uring_setup(0x290d, &(0x7f0000000080)={0x0, 0x8555, 0x400, 0x1, 0x7e})
io_uring_enter(r1, 0x47dd, 0xfce6, 0xc, &(0x7f0000000100)={[0xfffffffffffffffb]}, 0x8)
r2 = socket$rds(0x15, 0x5, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x410080, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00'})
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x23)
r3 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000300)={0x9, 0x6, 0x0, 0x8}, 0x10)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x6, 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x372, @rand_addr=' \x01\x00', 0xfffffff1}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x4, @mcast2, 0x80}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in6={0xa, 0x4e24, 0x0, @private1, 0x80000001}], 0x90)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000440)=[@in6={0xa, 0x101, 0x9, @private2, 0x9}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, 0xf}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}, @in6={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @empty}], 0xc0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000500)=0x8ea93d00ac265fa, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000540)=0x9, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000580)={0x2, 0xc7, 0x5, 0x12}, 0x10)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000005c0)=0x10001, 0x4)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r4, 0xdc1de000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x0, @mcast2, 0xec}, @in6={0xa, 0x4e21, 0xa0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x74)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000006c0)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x3d, 0x0, "efd5b1745439819eab2edf7c58442d667be9e541ac9af9c1eedbe554f945bbc75ce311fa92772f072797063235abe62ee21bea68f19d99864e0ff60933134ef5073af5f457d9b658b1d618098c3a07a2"}, 0xd8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000007c0)={@remote, 0x5, 0x0, 0x795ba829e5e7240b, 0x1, 0x3, 0x1}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000800)=@req={0x200, 0x0, 0x80000000, 0x10000}, 0x10)
socket$rxrpc(0x21, 0x2, 0xa)

9m59.510429842s ago: executing program 2 (id=6874):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0xf5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xcde3}, @in6={0xa, 0x4e24, 0x1, @local, 0x101}, @in6={0xa, 0x4e24, 0xdae5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80}, @in={0x2, 0x4e21, @multicast2}], 0xa0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20)
r3 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000080)=0xe9, 0x4)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xd, {{0xa, 0x4e21, 0x638, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x1}, 0x90)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

9m59.420751827s ago: executing program 2 (id=6876):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r0)
r1 = eventfd(0x7f)
syz_io_uring_setup(0x23a, &(0x7f0000000580)={0x0, 0x778f, 0x0, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600))
r2 = syz_io_uring_setup(0xbef, &(0x7f0000000080)={0x0, 0xd452, 0x400, 0x2, 0x2bb}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@hci={0x1f, 0x3, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="f950630de3f9886db5db02efc1e5f0634667932403b231fddda30321b39dc4b1ebdab1a2f6e8b139bd5a23d2174c93fdcf654736729ab87575ad9338180fbb85fb2d9eb163d6b16b7e750905f3feb8631bd847103f13feb02df0d3ed04a2db8d82187a57fa2fc5e6276e6d36268a2cbe6c52d2c9c5b15f9e35ab8ad156557efb8c66688f4aba754f82fc2e0001f45cdffe8c5a210729c024671fa2b7d6a4461bf318f3e8a72b664965fb0bc35a9dfcf08553554ab8e96dff9edb56f48b56b2d3bc4faa51fc04282dad", 0xc9}], 0x1, &(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x12d8}, 0x0, 0x5757d1df9473e267})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x200000000000025a, &(0x7f0000000040)=[{0x35, 0x86, 0x1, 0xc20}, {0xc, 0x5, 0x8, 0x4}, {0xf037, 0x5, 0x2, 0x3}, {0xffff, 0x1, 0xca, 0x7f7f}, {0x2, 0x0, 0x4, 0x40001000}, {0x8, 0x40, 0x8, 0x4015}]}, 0x10)
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x23, &(0x7f0000000040)=r1, 0x1)

9m58.820477822s ago: executing program 2 (id=6885):
syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x8, 0x5, 0x1da}, &(0x7f0000000000), &(0x7f0000000080)) (async)
r0 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x8, 0x5, 0x1da}, &(0x7f0000000000), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000040), 0x1)

9m58.7415668s ago: executing program 2 (id=6886):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1})
socket$nl_generic(0x11, 0x3, 0x10)
r0 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c2, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r0, 0xdb4, 0xdb9b, 0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0xfffffffffffffffe, r0, 0x33, {0x5, 0x10001}, 0x6}, 0x1)
r3 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x64, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=<r4=>0x0, &(0x7f00000005c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3})
io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

9m57.351927762s ago: executing program 2 (id=6903):
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x4480, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) (async)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async)
close(0x3)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x4008af25, &(0x7f0000000000)) (async)
r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x8, 0x0, 0x2d5, 0x0, r0}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
r5 = socket(0x80000000000000a, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (async)
r6 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d8b, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=<r7=>0x0, &(0x7f0000000700)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2})
io_uring_enter(r6, 0x1d39, 0xcec, 0x0, 0x0, 0x0) (async)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x337, {{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}}, {{0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) (async)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

9m42.353675479s ago: executing program 33 (id=6903):
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x4480, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) (async)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async)
close(0x3)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x4008af25, &(0x7f0000000000)) (async)
r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x8, 0x0, 0x2d5, 0x0, r0}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
r5 = socket(0x80000000000000a, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (async)
r6 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d8b, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=<r7=>0x0, &(0x7f0000000700)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2})
io_uring_enter(r6, 0x1d39, 0xcec, 0x0, 0x0, 0x0) (async)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x337, {{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}}, {{0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) (async)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

5m56.755004799s ago: executing program 4 (id=9867):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x18)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000)={0x3c, 0x13, '\x00', [@enc_lim, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0xfff4, [0x9000000000000000, 0xbf, 0x0, 0x6, 0xfd]}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x2000, [0x100000000, 0x83, 0x96b, 0x10001, 0x1, 0x1, 0xa30, 0x8, 0x5]}}, @ra={0x5, 0x2, 0x25c}, @enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x4cff}]}, 0xa0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000700)={0x0, 0x304000, 0x0, 0x9, 0x2}, 0x20)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x180, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @local, 0x3}], 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000240)={0x10, {{0x29, 0x0, 0x37000000, @rand_addr=' \x01\x00'}}}, 0x88)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000080)=r4, 0x1)
mmap$qrtrtun(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x0, 0x30, r4, 0x100000001)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300) (async)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async)
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x18) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000)={0x3c, 0x13, '\x00', [@enc_lim, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0xfff4, [0x9000000000000000, 0xbf, 0x0, 0x6, 0xfd]}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x2000, [0x100000000, 0x83, 0x96b, 0x10001, 0x1, 0x1, 0xa30, 0x8, 0x5]}}, @ra={0x5, 0x2, 0x25c}, @enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x4cff}]}, 0xa0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000700)={0x0, 0x304000, 0x0, 0x9, 0x2}, 0x20) (async)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x180, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @local, 0x3}], 0x1c) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000240)={0x10, {{0x29, 0x0, 0x37000000, @rand_addr=' \x01\x00'}}}, 0x88) (async)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000080)=r4, 0x1) (async)
mmap$qrtrtun(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x0, 0x30, r4, 0x100000001) (async)

5m56.343706831s ago: executing program 4 (id=9871):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x1d3101, 0xb5)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000080)=[0x2, 0x74], 0x2)
madvise(&(0x7f00001ee000/0x2000)=nil, 0x2000, 0xe)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mmap(&(0x7f00008b0000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000454000/0x3000)=nil, 0x3000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

5m56.139171089s ago: executing program 4 (id=9872):
r0 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x8, 0x1, 0x1de}, &(0x7f00000029c0), &(0x7f0000000000))
r1 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, &(0x7f00000005c0)=0x3, 0x4) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) (async)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) (async)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000040), 0x1)

5m56.004900345s ago: executing program 4 (id=9874):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, 0x3}, 0x0, 0x0, 0x1})
r0 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x38, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x4b54, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4})
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)="768cb3d4f4f64d32e20a783f42e3b3ab10f484c6", 0x14)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x1)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0xf0e16000)

5m55.882712472s ago: executing program 4 (id=9877):
r0 = socket(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000002c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x38, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x4b54, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)
socket(0x2, 0x1, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async)
syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0), &(0x7f00000002c0)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x38, 0x0, 0x0, 0x4}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async)
io_uring_enter(r2, 0x4b54, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1) (async)

5m55.653143974s ago: executing program 4 (id=9883):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20842, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, 0x3}, 0x0, 0x0, 0x1}) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, 0x3}, 0x0, 0x0, 0x1})
r3 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f00000002c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x3b, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x4b54, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/locks\x00', 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r6, 0x84, 0x9, &(0x7f00000002c0)="1af3050000f2bd5b", 0x9c)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x478103, 0x60)
socket(0xa, 0x5, 0x0) (async)
r8 = socket(0xa, 0x5, 0x0)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0)
r10 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x5cd0, 0x100, 0xfffffffc, 0x1bc}, &(0x7f0000002180)=<r11=>0x0, &(0x7f00000001c0)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000000c0)={0x1, 0x8}, 0x1) (async)
io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000000c0)={0x1, 0x8}, 0x1)
io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000140)={0x0, 0xe69, 0x10, 0x1, 0x2dc}, 0x1)
setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) (async)
setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4)

5m40.6195757s ago: executing program 34 (id=9883):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20842, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, 0x3}, 0x0, 0x0, 0x1}) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, 0x3}, 0x0, 0x0, 0x1})
r3 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f00000002c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x3b, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x4b54, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/locks\x00', 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r6, 0x84, 0x9, &(0x7f00000002c0)="1af3050000f2bd5b", 0x9c)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x478103, 0x60)
socket(0xa, 0x5, 0x0) (async)
r8 = socket(0xa, 0x5, 0x0)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0)
r10 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x5cd0, 0x100, 0xfffffffc, 0x1bc}, &(0x7f0000002180)=<r11=>0x0, &(0x7f00000001c0)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000000c0)={0x1, 0x8}, 0x1) (async)
io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000000c0)={0x1, 0x8}, 0x1)
io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000140)={0x0, 0xe69, 0x10, 0x1, 0x2dc}, 0x1)
setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) (async)
setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4)

1.520275392s ago: executing program 1 (id=14515):
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x4008af83, &(0x7f0000000000))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

1.455561127s ago: executing program 1 (id=14517):
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xe836, 0x400, 0x0, 0x2e3}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x1, &(0x7f00000000c0)="010000000980ffff", 0x14)
socket$packet(0x11, 0x2, 0x300)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x101042, 0x0)
socket$kcm(0x2, 0x7cdbd2889541ff71, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@hci={0x1f, 0x3, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="f950630de3f9886db5db02efc1e5f0634667932403b231fddda30321b39dc4b1ebdab1a2f6e8b139bd5a23d2174c93fdcf654736729ab87575ad9338180fbb85fb2d9eb163d6b16b7e750905f3feb8631bd847103f13feb02df0d3ed04a2db8d82187a57fa2fc5e6276e6d36268a2cbe6c52d2c9c5b15f9e35ab8ad156557efb8c66688f4aba754f82fc2e0001f45cdffe8c5a210729c024671fa2b7d6a4461bf318f3e8a72b664965fb0bc35a9dfcf08553554ab8e96dff9edb56f48b56b2d3bc4faa51fc04282dad", 0xc9}], 0x1, &(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x12d8}})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x8000}, 0x4)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

1.17993381s ago: executing program 1 (id=14519):
r0 = eventfd(0x0)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000680)="6b0304472e685d3bfa3b901b93cf58a119f509c3580fe220c22ba23101d0ca3ad8ec281cc5acc985e018d7c97d2325d767c8b66836f44801c29450bac15d2d7ca5cd2089198246b70379143dae35b866e578eceeed9d27845f7b84e4e8d1976621e158d47bb2c71692aec01a37b51a02a0ddd317d76ab3d903ea073a057e", 0x7e)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2e4040, 0x0)
close(r1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x400454cb, &(0x7f0000001580))
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4a26, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2={0xfc, 0x2, '\x00', 0x4}, 0x4f4}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90)
r4 = io_uring_setup(0xf08, &(0x7f0000000700)={0x0, 0xfb4e, 0x38c1, 0x4, 0xf0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x20, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0xf7011, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0xc39, &(0x7f0000010400)={0x0, 0x5661, 0x1, 0x8, 0x14b}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x6907, 0x8, 0x3, 0x242}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000640)=<r9=>0x0)
syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000500)={0x8e8b, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000001800)=""/167, 0xa7}, {&(0x7f00000018c0)=""/132, 0x84}], &(0x7f0000000440), 0x5}, 0x20)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x22d2, 0x89d0, 0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040)=r0, 0x1)

1.022900921s ago: executing program 5 (id=14520):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000580)={0x0, 0xd983, 0x10000, 0x1, 0x2cf}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000240)="9a639077480c6d83c9fc46bfba1b9f02", 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x7c97, 0x0, 0x0, 0x0, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xca, 0x0, 0xf02851bd71acacdc)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

897.359807ms ago: executing program 5 (id=14521):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000ac0)=[@in6={0xa, 0x4e23, 0x7fffffff, @local, 0xb}], 0x1c)
syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x8, 0x3, 0x1df}, &(0x7f00000029c0)=<r1=>0x0, &(0x7f0000000200))
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2e4040, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
r3 = syz_io_uring_setup(0x10a, &(0x7f0000000300)={0x0, 0x5883, 0x2, 0x0, 0xfffffdfe, 0x0, r2}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
close(r2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0xaf01, &(0x7f0000001580))
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x7f, 0x4)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x4008af03, &(0x7f0000000040))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2e4040, 0x0)
close(r6)
socket(0x22, 0x2, 0x3)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x80044944, &(0x7f0000001580))
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000240), 0x0)
io_uring_setup(0x7583, &(0x7f0000000240)={0x0, 0xcfd1, 0x569f89e38325f7dd, 0x81, 0x18d, 0x0, r6})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x100, &(0x7f00000001c0)=0x1ff, 0x0, 0x4)
socket$inet(0x2, 0x1, 0x0)
syz_io_uring_setup(0x67ce, &(0x7f0000000080)={0x0, 0xe839, 0x8000, 0x2, 0x2e3, 0x0, r3}, &(0x7f00000006c0)=<r9=>0x0, &(0x7f0000000140))
close(0x3)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)

759.156062ms ago: executing program 5 (id=14523):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000580)={0x0, 0xd983, 0x10000, 0x0, 0x2cf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x7c97, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
io_uring_setup(0x41c2, &(0x7f0000000080)={0x0, 0x5f29, 0x80, 0x2, 0x259})
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xe836, 0x400, 0x0, 0x2e3}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000380)=<r6=>0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@hci={0x1f, 0x3, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="f950630de3f9886db5db02efc1e5f0634667932403b231fddda30321b39dc4b1ebdab1a2f6e8b139bd5a23d2174c93fdcf654736729ab87575ad9338180fbb85fb2d9eb163d6b16b7e750905f3feb8631bd847103f13feb02df0d3ed04a2db8d82187a57fa2fc5e6276e6d36268a2cbe6c52d2c9c5b15f9e35ab8ad156557efb8c66688f4aba754f82fc2e0001f45cdffe8c5a210729c024671fa2b7d6a4461bf318f3e8a72b664965fb0bc35a9dfcf08553554ab8e96dff9edb56f48b56b2d3bc4faa51fc04282dad", 0xc9}], 0x1, &(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x12d8}})
r8 = socket(0x10, 0x3, 0x0)
syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000240)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r11, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d414000000000000000100000024000000", 0xfe60)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_io_uring_setup(0x51c3, &(0x7f0000000380)={0x0, 0x7e4e, 0x100, 0x3, 0x18b}, &(0x7f0000000400), &(0x7f0000000440))
r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x90009427, &(0x7f0000000080)={'ip6gre0\x00'})
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

659.028047ms ago: executing program 3 (id=14524):
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r0, 0xedda5000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x300, 0x0, 0x2, 0x9, 0x0, 0x6}, 0x20)
socket$inet6_sctp(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x0, 0x1, 0x7, 0x6, 0x42cd}, 0x20) (async)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

604.100194ms ago: executing program 1 (id=14525):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt(r0, 0xff, 0x5, 0x0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x23, &(0x7f0000000040)=r1, 0x1) (async)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x23, &(0x7f0000000040)=r1, 0x1)

530.112565ms ago: executing program 3 (id=14526):
r0 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ab, 0x8, 0x1, 0x1de}, &(0x7f00000029c0), &(0x7f0000000000))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x8000000)
syz_io_uring_setup(0x782f, &(0x7f0000000140)={0x0, 0xdb0, 0x20, 0x0, 0xe8}, &(0x7f0000000080), &(0x7f00000001c0)=<r2=>0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r3, 0x0, 0x0, 0x0, 0x10020, 0x1})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x418800, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
r4 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10010, r0, 0x10000000)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0xc058565d, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000040), 0x1)
open(&(0x7f0000000480)='./file0\x00', 0x800, 0x10)
socket$phonet(0x23, 0x2, 0x1)

528.870983ms ago: executing program 1 (id=14527):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='pimreg\x00', 0x10)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x30)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x6, 0x4)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='pimreg\x00', 0x10) (async)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x30) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x6, 0x4) (async)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1) (async)

460.203339ms ago: executing program 3 (id=14528):
r0 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x8, 0x1, 0x1de}, &(0x7f00000029c0), &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
syz_io_uring_setup(0x1337, 0x0, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000040), 0x1)
syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x8, 0x1, 0x1de}, &(0x7f00000029c0), &(0x7f0000000000)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) (async)
syz_io_uring_setup(0x1337, 0x0, &(0x7f0000000080), &(0x7f00000001c0)) (async)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000040), 0x1) (async)

459.731996ms ago: executing program 1 (id=14529):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
close(r0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
close(r2)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0xffffffff, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}, {{0x2, 0x4e22, @loopback}}}, 0x108)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0xc0285700, &(0x7f00000004c0)={'pimreg\x00'})
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0xfffffffb, 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x80108906, 0x0)
close(0x3)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x4004e502, &(0x7f0000000080))
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040)=r4, 0x1)

390.185822ms ago: executing program 3 (id=14530):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
close(r0) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x400454d9, &(0x7f0000000080)) (async, rerun: 64)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f00000000c0)=r0, 0x1)

337.915767ms ago: executing program 3 (id=14531):
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x3a143e04ff9e08d3, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000080)=r0, 0x1)

335.261755ms ago: executing program 5 (id=14532):
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve1\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r1}, 0x14)
io_uring_enter(r0, 0x4452, 0xcce4, 0x1, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0x5, 0x4)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x501301, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6d7f683a2a53b66f", "362fdc3c5fc64a7f8730ad3f42f6be7b4a349536d677de2f76a1f9cab47d92bd", "fdcf4b14", "8fd060006f56ffac"}, 0x38)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x10, 0xffffffffffffffff, 0x180000000) (async)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x10, 0xffffffffffffffff, 0x180000000)
setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000180)=0x1, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000180)=0x1, 0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f00000001c0)=0x80000001, 0x4)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6}, 0x10)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000300)=""/133, 0x85}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/238, 0xee}, {&(0x7f00000015c0)=""/73, 0x49}], 0x6)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000016c0)=0x1, 0x4)
accept$packet(r2, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001740)=0x14) (async)
r4 = accept$packet(r2, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001740)=0x14)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000001780)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000017c0)={r1, 0x1, 0x6, @multicast}, 0x10)
syz_io_uring_setup(0x2c94, &(0x7f0000001800)={0x0, 0xe91b, 0x2000, 0x3, 0x19, 0x0, r2}, &(0x7f0000001880), &(0x7f00000018c0)) (async)
syz_io_uring_setup(0x2c94, &(0x7f0000001800)={0x0, 0xe91b, 0x2000, 0x3, 0x19, 0x0, r2}, &(0x7f0000001880)=<r5=>0x0, &(0x7f00000018c0))
syz_io_uring_complete(r5) (async)
r6 = syz_io_uring_complete(r5)
open(&(0x7f0000001900)='./file0\x00', 0xe01, 0x8)
openat$vsock(0xffffffffffffff9c, &(0x7f0000001940), 0x200080, 0x0) (async)
openat$vsock(0xffffffffffffff9c, &(0x7f0000001940), 0x200080, 0x0)
syz_io_uring_setup(0x59cf, &(0x7f0000001980)={0x0, 0x1, 0x10000, 0x3, 0x134, 0x0, r2}, &(0x7f0000001a00), &(0x7f0000001a40)) (async)
syz_io_uring_setup(0x59cf, &(0x7f0000001980)={0x0, 0x1, 0x10000, 0x3, 0x134, 0x0, r2}, &(0x7f0000001a00), &(0x7f0000001a40))
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000001a80)={{0xa, 0x4e24, 0x6, @local, 0x9}, {0xa, 0x4e23, 0x0, @mcast2}, 0x0, {[0x4dc0, 0x2, 0x4, 0x4, 0x40, 0x3ff, 0x101, 0x7]}}, 0x5c)
openat$hpet(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) (async)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000001b40)=r6, 0x1)
close(r0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000001bc0)={0x3, &(0x7f0000001b80)=[{0x4, 0x8, 0x3, 0x6}, {0x6, 0x9, 0x7, 0x1}, {0x9, 0x6, 0x9, 0x8}]}, 0x10)
setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0)

260.26889ms ago: executing program 3 (id=14533):
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000080)=0x9, 0x53)
r1 = socket$inet6(0xa, 0x80000, 0x101)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x100, 0x4)
close(r0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

160.123362ms ago: executing program 5 (id=14534):
r0 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x8, 0x1, 0x1de}, &(0x7f00000029c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
close(r3)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f0000002180))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, 0x0, 0x0)
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47b6, 0x800000, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x23, &(0x7f0000000040), 0x1)
r8 = syz_io_uring_setup(0x237, &(0x7f0000000080)={0x0, 0x2000d983, 0x10000, 0x2, 0x2cf}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000500)=<r10=>0x0)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000180)=@in6={0xa, 0x4e24, 0x1bf, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x0, 0x0, 0x1})
io_uring_enter(r8, 0x7c87, 0x0, 0x20, 0x0, 0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xc, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000140)="f50029b8e31c8bd8b50619d1e82da2037881e7f22bd906101172d79297f76a4f8f1336052df8aaad3b49a775d161c3982ef1ed37013c4c0aac5845340980206eecee95655c007cfa877c8d1ef4710f762bc2c2101de6a509e8b54b3b7843580b", 0x6, 0x0, 0x0, {0x3, r12}})

0s ago: executing program 5 (id=14535):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
close(0x3)
socket$inet6_udp(0x2d, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x89e2, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x1)

kernel console output (not intermixed with test programs):

ead
[  385.134135][   T25] sr 2:0:0:0: [sr0] tag#5 unaligned transfer
[  385.136734][   T25] I/O error, dev sr0, sector 262145 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2
[  385.140416][   T25] Buffer I/O error on dev sr0, logical block 262145, async page read
[  385.144076][   T25] Buffer I/O error on dev sr0, logical block 262146, async page read
[  385.147694][   T25] Buffer I/O error on dev sr0, logical block 262147, async page read
[  385.151010][   T25] Buffer I/O error on dev sr0, logical block 262148, async page read
[  385.154549][   T25] Buffer I/O error on dev sr0, logical block 262149, async page read
[  385.158636][   T25] Buffer I/O error on dev sr0, logical block 262150, async page read
[  385.161958][   T25] Buffer I/O error on dev sr0, logical block 262151, async page read
[  385.167209][T17907] sr 2:0:0:0: [sr0] tag#6 unaligned transfer
[  385.172744][T17907] I/O error, dev sr0, sector 262144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.177576][T17907] Buffer I/O error on dev sr0, logical block 262144, async page read
[  385.183219][T17907] sr 2:0:0:0: [sr0] tag#10 unaligned transfer
[  385.191719][T17907] I/O error, dev sr0, sector 262145 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.198895][T17907] Buffer I/O error on dev sr0, logical block 262145, async page read
[  385.203747][T17907] sr 2:0:0:0: [sr0] tag#7 unaligned transfer
[  385.206377][T17907] I/O error, dev sr0, sector 262146 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.210731][T17907] sr 2:0:0:0: [sr0] tag#11 unaligned transfer
[  385.216159][T17907] I/O error, dev sr0, sector 262147 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.221199][T17907] sr 2:0:0:0: [sr0] tag#12 unaligned transfer
[  385.224794][T17907] I/O error, dev sr0, sector 262148 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.231238][T17907] sr 2:0:0:0: [sr0] tag#13 unaligned transfer
[  385.233570][T17907] I/O error, dev sr0, sector 262149 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.238174][T17907] sr 2:0:0:0: [sr0] tag#14 unaligned transfer
[  385.241670][T17907] I/O error, dev sr0, sector 262150 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.247034][T17907] sr 2:0:0:0: [sr0] tag#15 unaligned transfer
[  385.649704][T17933] dvmrp8: entered allmulticast mode
[  386.122631][   T33] audit: type=1800 audit(1757560062.892:17): pid=17969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3841" name="bus" dev="tmpfs" ino=6675 res=0 errno=0
[  386.239645][T17958] cgroup: fork rejected by pids controller in /syz1
[  387.014432][T18459] IPVS: set_ctl: invalid protocol: 46231 255.255.255.255:20001
[  387.377675][T18483] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  387.384047][T18484] pim6reg: entered allmulticast mode
[  387.387860][T18483] pim6reg: left allmulticast mode
[  387.468537][T18483] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  387.516236][T18492] delete_channel: no stack
[  388.680339][   T33] audit: type=1800 audit(1757560065.452:18): pid=18557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3884" name="bus" dev="tmpfs" ino=6653 res=0 errno=0
[  388.696309][   T33] audit: type=1800 audit(1757560065.452:19): pid=18558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3884" name="bus" dev="tmpfs" ino=6653 res=0 errno=0
[  388.720417][   T33] audit: type=1804 audit(1757560065.472:20): pid=18557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3884" name="/newroot/1302/bus" dev="tmpfs" ino=6653 res=1 errno=0
[  389.059726][T18595] random: crng reseeded on system resumption
[  389.129765][T18601] team0: entered promiscuous mode
[  389.132002][T18601] team_slave_0: entered promiscuous mode
[  389.143480][T18601] team_slave_1: entered promiscuous mode
[  389.213908][T18601] team0: left promiscuous mode
[  389.220586][T18601] team_slave_0: left promiscuous mode
[  389.226878][T18601] team_slave_1: left promiscuous mode
[  389.850844][T18647] delete_channel: no stack
[  390.639222][T18688] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 1, id = 0
[  395.293090][T18876] pim6reg: entered allmulticast mode
[  396.565346][T18912] random: crng reseeded on system resumption
[  397.458302][T18944] IPVS: set_ctl: invalid protocol: 8 172.20.20.17:20004
[  398.796949][T18990] IPVS: set_ctl: invalid protocol: 103 172.20.20.52:20003
[  399.260875][T19003] veth0: entered promiscuous mode
[  399.312358][T19003] veth0: left promiscuous mode
[  399.623211][T19024] sctp: [Deprecated]: syz.1.4034 (pid 19024) Use of struct sctp_assoc_value in delayed_ack socket option.
[  399.623211][T19024] Use struct sctp_sack_info instead
[  399.858012][T19038] delete_channel: no stack
[  400.080104][T19052] random: crng reseeded on system resumption
[  400.104280][T19052] ip6gretap0: entered promiscuous mode
[  400.112835][T19051] ip6gretap0: left promiscuous mode
[  400.823763][T19079] binder: 19077:19079 ioctl c0046209 200000000380 returned -22
[  402.309547][T19168] delete_channel: no stack
[  402.379635][T19166] veth0: entered promiscuous mode
[  402.403059][T19165] veth0: left promiscuous mode
[  402.774532][T19191] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002
[  404.920363][T19305] dvmrp0: left allmulticast mode
[  404.977465][T19306] dvmrp1: left allmulticast mode
[  404.979306][T19306] dvmrp8: left allmulticast mode
[  406.994719][T19360] delete_channel: no stack
[  412.318620][T19518] IPVS: set_ctl: invalid protocol: 58 172.20.20.60:20001
[  412.962895][T19555] dvmrp0: entered allmulticast mode
[  413.895630][   T33] audit: type=1800 audit(1757560090.672:21): pid=19562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4217" name="file1" dev="tmpfs" ino=6264 res=0 errno=0
[  414.763597][T19588] dummy0: left allmulticast mode
[  415.368862][   T33] audit: type=1800 audit(1757560092.142:22): pid=19595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4226" name=E91F7189591E9233614B dev="tmpfs" ino=7242 res=0 errno=0
[  416.163336][T19636] veth0: entered promiscuous mode
[  416.168481][T19636] veth0: left promiscuous mode
[  416.384397][T19651] sctp: [Deprecated]: syz.2.4251 (pid 19651) Use of struct sctp_assoc_value in delayed_ack socket option.
[  416.384397][T19651] Use struct sctp_sack_info instead
[  416.395749][T19652] veth0: entered promiscuous mode
[  416.413513][T19651] veth0: left promiscuous mode
[  418.391758][T19720] veth0: entered promiscuous mode
[  418.646999][T19716] veth0: left promiscuous mode
[  419.098000][T19776] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  419.105402][T19776] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  419.115511][T19776] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  419.472905][T19795] dvmrp8: entered allmulticast mode
[  419.648291][T19795] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  419.651206][T19795] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  419.657708][T19795] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  421.645523][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout
[  421.718659][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout
[  421.721638][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout
[  421.894154][T19891] IPVS: Scheduler module ip_vs_ not found
[  422.449896][T19876] delete_channel: no stack
[  422.743761][T19937] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20000
[  423.584140][T19993] bond_slave_0: entered promiscuous mode
[  423.586987][T19993] bond_slave_1: entered promiscuous mode
[  423.750258][T19992] bond_slave_0: left promiscuous mode
[  423.752621][T19992] bond_slave_1: left promiscuous mode
[  426.534519][T20110] random: crng reseeded on system resumption
[  426.961304][T20139] batadv0: entered promiscuous mode
[  427.402889][T20138] batadv0: left promiscuous mode
[  428.095071][T20168] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 1, id = 0
[  432.813626][T20398] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  432.818229][T20398] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  432.820919][T20398] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  432.961578][T20402] sctp: [Deprecated]: syz.1.4492 (pid 20402) Use of struct sctp_assoc_value in delayed_ack socket option.
[  432.961578][T20402] Use struct sctp_sack_info instead
[  434.209290][T20444] dvmrp1: left allmulticast mode
[  434.211568][T20444] dvmrp8: left allmulticast mode
[  434.835596][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[  434.838002][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout
[  434.840620][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout
[  436.074460][T20508] sctp: [Deprecated]: syz.1.4523 (pid 20508) Use of struct sctp_assoc_value in delayed_ack socket option.
[  436.074460][T20508] Use struct sctp_sack_info instead
[  436.655454][T20512] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  437.430088][T20562] binder: 20561:20562 ioctl 7b9 200000000380 returned -22
[  437.533716][T20570] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20002
[  437.663674][T20579] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  438.620137][T20611] can: request_module (can-proto-0) failed.
[  439.084886][T20635] [U] 
[  439.652849][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  439.656271][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  440.857868][T20689] syz_tun: entered allmulticast mode
[  440.900014][T20689] dvmrp1: entered allmulticast mode
[  440.949540][T20689] syz_tun: left allmulticast mode
[  443.219251][T20793] random: crng reseeded on system resumption
[  445.717345][T20890] veth0: entered promiscuous mode
[  445.800779][T20886] veth0: left promiscuous mode
[  446.316171][T20915] veth0_to_bridge: entered promiscuous mode
[  446.326536][T20912] veth0_to_bridge: left promiscuous mode
[  446.955133][T20940] sctp: [Deprecated]: syz.2.4662 (pid 20940) Use of struct sctp_assoc_value in delayed_ack socket option.
[  446.955133][T20940] Use struct sctp_sack_info instead
[  447.599520][T20959] veth1_macvtap: left promiscuous mode
[  447.692171][   T33] audit: type=1800 audit(1757560124.462:23): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4668" name="file1" dev="tmpfs" ino=6977 res=0 errno=0
[  449.302711][T21008] lo: entered promiscuous mode
[  449.305949][T21007] lo: left promiscuous mode
[  451.367536][T21082] ipvlan0: entered allmulticast mode
[  451.369667][T21082] veth0_vlan: entered allmulticast mode
[  453.337037][T21183] ubi0: attaching mtd0
[  453.338865][T21183] ubi0 error: ubi_attach_mtd_dev: bad VID header (17) or data offsets (81)
[  453.641373][T21201] ipvlan0: left allmulticast mode
[  453.643928][T21201] veth0_vlan: left allmulticast mode
[  453.649084][T21201] dvmrp1: left allmulticast mode
[  453.694004][T21203] random: crng reseeded on system resumption
[  455.263589][T21289] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  457.950817][T21417] pim6reg9: entered allmulticast mode
[  458.312361][T21440] IPVS: stopping backup sync thread 12724 ...
[  458.633613][T21469] sctp: [Deprecated]: syz.2.4819 (pid 21469) Use of int in max_burst socket option deprecated.
[  458.633613][T21469] Use struct sctp_assoc_value instead
[  458.899709][T21487] veth1_to_bond: entered allmulticast mode
[  458.905782][T21486] veth1_to_bond: left allmulticast mode
[  459.062076][T21507] ubi0: attaching mtd0
[  459.063864][T21507] ubi0 error: ubi_attach_mtd_dev: bad VID header (17) or data offsets (81)
[  461.109486][T21620] veth0: entered promiscuous mode
[  461.113880][T21618] veth0: left promiscuous mode
[  462.441531][T21688] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  462.448127][T21688] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  462.452636][T21688] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  462.579879][T21694] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[  463.563253][T21740] dvmrp0: entered allmulticast mode
[  463.930108][T21766] random: crng reseeded on system resumption
[  464.212435][   T33] audit: type=1800 audit(1757560140.982:24): pid=21773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4914" name="file1" dev="tmpfs" ino=8429 res=0 errno=0
[  464.647583][T21790] random: crng reseeded on system resumption
[  465.301842][T21828] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0
[  468.372622][T21943] delete_channel: no stack
[  469.792148][T22008] veth0: entered promiscuous mode
[  469.812313][T22007] veth0: left promiscuous mode
[  470.313941][T22045] ip6gretap0: entered promiscuous mode
[  470.333246][T22044] ip6gretap0: left promiscuous mode
[  470.982803][T22066] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  472.286590][T22101] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001
[  475.327499][T22228] pim6reg: entered allmulticast mode
[  475.361190][T22228] pim6reg: left allmulticast mode
[  476.932252][T22302] random: crng reseeded on system resumption
[  477.061191][T22306] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  481.838822][T22493] random: crng reseeded on system resumption
[  483.392839][T22551] binder: 22550:22551 ioctl 80044dfe 200000000080 returned -22
[  486.934309][T22712] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[  487.390001][T22726] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  490.777593][T22829] IPVS: stopping master sync thread 18688 ...
[  490.927690][T22834] macvlan1: entered promiscuous mode
[  490.970827][T22822] macvlan1: left promiscuous mode
[  491.540469][T22847] cgroup: fork rejected by pids controller in /syz2
[  492.169884][   T33] audit: type=1800 audit(1757560168.942:25): pid=23814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5256" name=E91F7189591E9233614B dev="tmpfs" ino=8017 res=0 errno=0
[  492.960827][T24080] delete_channel: no stack
[  492.963037][T24080] sctp: [Deprecated]: syz.3.5271 (pid 24080) Use of int in maxseg socket option.
[  492.963037][T24080] Use struct sctp_assoc_value instead
[  493.513268][T24112] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20002
[  494.619845][T24174] random: crng reseeded on system resumption
[  497.973044][T24288] team0: entered promiscuous mode
[  497.974734][T24288] team_slave_0: entered promiscuous mode
[  497.986382][T24288] team_slave_1: entered promiscuous mode
[  498.012259][T24288] team0: left promiscuous mode
[  498.013840][T24288] team_slave_0: left promiscuous mode
[  498.028364][T24288] team_slave_1: left promiscuous mode
[  498.205369][T24297] sctp: [Deprecated]: syz.1.5335 (pid 24297) Use of struct sctp_assoc_value in delayed_ack socket option.
[  498.205369][T24297] Use struct sctp_sack_info instead
[  499.188548][   T33] audit: type=1800 audit(1757560175.962:26): pid=24369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5362" name="bus" dev="tmpfs" ino=9124 res=0 errno=0
[  499.257747][   T33] audit: type=1804 audit(1757560175.962:27): pid=24369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5362" name="/newroot/1787/bus" dev="tmpfs" ino=9124 res=1 errno=0
[  500.230522][T24404] pim6reg: entered allmulticast mode
[  500.247677][T24404] pim6reg: left allmulticast mode
[  500.652361][T24426] vlan0: entered allmulticast mode
[  500.657573][T24426] veth0_vlan: entered allmulticast mode
[  500.687961][T24425] vlan0: left allmulticast mode
[  500.690108][T24425] veth0_vlan: left allmulticast mode
[  501.098097][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  501.100662][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  503.628752][T24590] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  503.660996][T24589] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  509.319956][T24796] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  509.323453][T24794] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  509.849445][T24822] [U] @
[  509.850651][T24822] [U] ])6:N0dGr؂U)(jϐ4HRXꪢJ`*/87͓khq]}gy-Ssy
[  509.854547][T24822] [U] Z"uC7R>bۏ
[  509.858835][T24822] [U] 8c8
[  509.860350][T24822] [U] 
[  509.861491][T24822] [U] 
[  509.862807][T24822] [U] 
[  509.863908][T24822] [U] 
[  509.865041][T24822] [U] 
[  509.866089][T24822] [U] 
[  509.885803][T24821] [U] 
[  511.101449][T24868] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20001
[  511.730929][T24893] IPVS: ip_vs_add_dest(): server weight less than zero
[  511.799190][T24903] dummy0: entered allmulticast mode
[  511.813215][T24879] dummy0: left allmulticast mode
[  513.607308][T24958] dvmrp5: entered allmulticast mode
[  514.142418][T24992] geneve0: entered promiscuous mode
[  514.186263][T24990] geneve0: left promiscuous mode
[  514.401985][T25001] vxcan1: left allmulticast mode
[  515.127968][T25023] random: crng reseeded on system resumption
[  515.321615][T25033] random: crng reseeded on system resumption
[  515.383923][T25033] can: request_module (can-proto-0) failed.
[  517.242405][T25098] random: crng reseeded on system resumption
[  518.276080][T25135] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  518.297226][T25134] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  520.663607][T25232] IPVS: Unknown mcast interface: pimreg
[  522.005904][T25292] IPVS: set_ctl: invalid protocol: 134 172.20.20.187:20000
[  522.090614][T25304] vlan0: entered promiscuous mode
[  522.156350][T25303] vlan0: left promiscuous mode
[  523.306937][T25379] dvmrp0: left allmulticast mode
[  523.309221][T25379] dvmrp5: left allmulticast mode
[  524.169249][T25405] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  524.433921][T25408] sctp: [Deprecated]: syz.3.5685 (pid 25408) Use of struct sctp_assoc_value in delayed_ack socket option.
[  524.433921][T25408] Use struct sctp_sack_info instead
[  524.446479][T25396] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  526.262984][T25477] macvlan1: entered promiscuous mode
[  526.313029][T25480] random: crng reseeded on system resumption
[  526.467921][T25491] sctp: [Deprecated]: syz.3.5710 (pid 25491) Use of struct sctp_assoc_value in delayed_ack socket option.
[  526.467921][T25491] Use struct sctp_sack_info instead
[  526.765756][T25503] batadv0: entered promiscuous mode
[  526.774361][T25502] batadv0: left promiscuous mode
[  527.058333][T25476] macvlan1: left promiscuous mode
[  529.462585][T25595] gre0: entered promiscuous mode
[  529.464749][T25595] gre0: entered allmulticast mode
[  529.907804][T25615] vlan1: entered promiscuous mode
[  530.374533][T25634] IPVS: stopping master sync thread 16277 ...
[  530.550050][T25650] IPVS: Scheduler module ip_vs_ not found
[  530.719901][T25613] vlan1: left promiscuous mode
[  530.873242][T25688] syz_tun: entered allmulticast mode
[  530.880013][T25688] dvmrp8: entered allmulticast mode
[  530.908066][T25686] syz_tun: left allmulticast mode
[  531.199183][T25719] random: crng reseeded on system resumption
[  533.023789][T25832] syz.3.5815 (25832) used obsolete PPPIOCDETACH ioctl
[  533.172459][T25848] dvmrp0: entered allmulticast mode
[  534.093378][T25883] delete_channel: no stack
[  534.957058][   T33] audit: type=1800 audit(1757560211.732:28): pid=25941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5853" name="bus" dev="tmpfs" ino=9921 res=0 errno=0
[  535.122874][T25949] random: crng reseeded on system resumption
[  535.301024][T25959] sctp: [Deprecated]: syz.2.5860 (pid 25959) Use of int in maxseg socket option.
[  535.301024][T25959] Use struct sctp_assoc_value instead
[  535.632866][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.635944][ T7294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.953456][T25989] ipvlan0: entered promiscuous mode
[  535.978661][T25987] ipvlan0: left promiscuous mode
[  536.110512][T25999] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000
[  536.770329][T26024] erspan0: entered promiscuous mode
[  536.831720][T26004] erspan0: left promiscuous mode
[  537.620858][T26064] IPVS: set_ctl: invalid protocol: 167 0.0.0.0:20003
[  540.397904][T26220] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20003
[  541.873726][T26300] pimreg: entered allmulticast mode
[  542.056514][T26311] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000
[  542.060060][T26313] random: crng reseeded on system resumption
[  543.760848][T26393] binder: 26392:26393 ioctl 7b9 200000000380 returned -22
[  545.179960][T26469] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  545.292087][T26471] IPVS: stopping backup sync thread 26469 ...
[  545.354716][T26452] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  545.358517][T26452] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  545.361116][T26452] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  546.602363][T26536] delete_channel: no stack
[  546.686027][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  547.395133][T20457] Bluetooth: hci3: command 0x0c1a tx timeout
[  547.395521][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout
[  547.575835][T26568] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  549.371536][T26629] geneve0: entered promiscuous mode
[  549.383434][T26628] geneve0: left promiscuous mode
[  552.211433][T26794] IPVS: stopping master sync thread 7614 ...
[  552.380635][T26807] macvlan1: entered promiscuous mode
[  552.383308][T26802] macvlan1: left promiscuous mode
[  552.745319][T26826] veth0: entered promiscuous mode
[  552.747793][T26826] veth0: left promiscuous mode
[  554.290445][T26865] IPVS: ip_vs_edit_dest(): server weight less than zero
[  554.589204][T26879] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000
[  555.759640][T26933] team_slave_0: entered promiscuous mode
[  555.762035][T26933] team_slave_1: entered promiscuous mode
[  555.785097][T26932] delete_channel: no stack
[  555.787746][T26931] team_slave_0: left promiscuous mode
[  555.790001][T26931] team_slave_1: left promiscuous mode
[  558.183060][T27071] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  558.224725][T27076] veth0: entered promiscuous mode
[  558.229706][T27077] veth0: left promiscuous mode
[  558.767128][T27123] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 4, id = 0
[  560.474292][T27199] veth0_to_bridge: entered promiscuous mode
[  560.479250][T27197] veth0_to_bridge: left promiscuous mode
[  562.531954][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  562.534642][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  563.604774][T27307] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0
[  564.475691][T27338] random: crng reseeded on system resumption
[  565.348262][T27404] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  565.361997][T27403] IPVS: stopping master sync thread 27404 ...
[  566.981985][T27456] sctp: [Deprecated]: syz.2.6338 (pid 27456) Use of struct sctp_assoc_value in delayed_ack socket option.
[  566.981985][T27456] Use struct sctp_sack_info instead
[  571.271035][T27626] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  571.279838][T27626] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  571.289996][T27626] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  571.457573][T27636] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  571.460596][T27635] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  571.518216][T27636] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004
[  571.574044][T27635] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  571.578288][T27635] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  571.581107][T27635] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  572.761467][T27695] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  573.555305][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout
[  573.645401][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout
[  573.648738][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout
[  573.662738][T27756] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
[  574.426549][T27756] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  574.428929][T27756] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  574.431437][T27756] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  574.501667][T27773] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000
[  575.228059][T27844] syz_tun: entered promiscuous mode
[  575.239438][T27843] syz_tun: left promiscuous mode
[  575.715097][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  576.082533][T27904] macvlan1: entered promiscuous mode
[  576.112806][T27894] macvlan1: left promiscuous mode
[  576.439162][T20457] Bluetooth: hci3: command 0x0c1a tx timeout
[  576.441811][T20457] Bluetooth: hci2: command 0x0c1a tx timeout
[  576.500892][T27924] sctp: [Deprecated]: syz.3.6489 (pid 27924) Use of struct sctp_assoc_value in delayed_ack socket option.
[  576.500892][T27924] Use struct sctp_sack_info instead
[  576.510321][T27924] sctp: [Deprecated]: syz.3.6489 (pid 27924) Use of struct sctp_assoc_value in delayed_ack socket option.
[  576.510321][T27924] Use struct sctp_sack_info instead
[  576.539201][T27925] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  576.631402][T27928] pim6reg: entered allmulticast mode
[  576.643968][T27928] pim6reg: left allmulticast mode
[  576.709848][T27922] dvmrp0: left allmulticast mode
[  576.711844][T27922] dvmrp5: left allmulticast mode
[  576.713653][T27922] dvmrp8: left allmulticast mode
[  580.078932][T28053] macvlan1: entered promiscuous mode
[  580.084137][T28051] macvlan1: left promiscuous mode
[  581.647713][T28141] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  581.654807][T28141] pim6reg: left allmulticast mode
[  581.757183][T28138] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  583.182441][T28247] random: crng reseeded on system resumption
[  583.385600][T28253] sctp: [Deprecated]: syz.1.6598 (pid 28253) Use of struct sctp_assoc_value in delayed_ack socket option.
[  583.385600][T28253] Use struct sctp_sack_info instead
[  586.381037][T28354] random: crng reseeded on system resumption
[  586.766743][T28365] binder: 28364:28365 ioctl c0046209 200000000380 returned -22
[  586.931219][T28374] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  586.936808][T28374] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  586.943544][T28374] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  588.692004][T28435] dvmrp0: left allmulticast mode
[  588.936545][T28447] tipc: Trying to set illegal importance in message
[  589.613082][T28492] dvmrp5: entered allmulticast mode
[  595.326856][T28698] syzkaller0: entered allmulticast mode
[  595.340981][T28698] syzkaller0: entered promiscuous mode
[  595.377061][T28697] syzkaller0: left promiscuous mode
[  595.380029][T28697] syzkaller0: left allmulticast mode
[  597.180155][T28751] gre0: left promiscuous mode
[  597.182192][T28751] gre0: left allmulticast mode
[  598.340814][T28819] bond_slave_0: entered promiscuous mode
[  598.343212][T28819] bond_slave_1: entered promiscuous mode
[  598.348732][T28819] bond_slave_0: left promiscuous mode
[  598.351056][T28819] bond_slave_1: left promiscuous mode
[  599.944483][T28901] macvlan1: entered promiscuous mode
[  600.135067][ T5904] macvlan1: left promiscuous mode
[  600.730780][T28940] binder: binder_mmap: 28939 200000ffc000-200000fff000 bad vm_flags failed -1
[  603.030857][T29007] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  606.770784][T29151] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002
[  607.139401][T29161] random: crng reseeded on system resumption
[  607.440487][T29172] IPVS: stopping backup sync thread 20168 ...
[  609.285437][T29210] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  609.495341][T29214] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0
[  611.377187][T29284] GUP no longer grows the stack in syz.3.6933 (29284): 200000003000-20000000a000 (200000001000)
[  611.381923][T29284] CPU: 0 UID: 0 PID: 29284 Comm: syz.3.6933 Not tainted syzkaller #0 PREEMPT(full) 
[  611.381969][T29284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  611.381981][T29284] Call Trace:
[  611.381988][T29284]  <TASK>
[  611.381995][T29284]  dump_stack_lvl+0x189/0x250
[  611.382019][T29284]  ? __pfx_dump_stack_lvl+0x10/0x10
[  611.382036][T29284]  ? __pfx__printk+0x10/0x10
[  611.382054][T29284]  ? find_vma+0xe7/0x160
[  611.382081][T29284]  __get_user_pages+0x2470/0x2a00
[  611.382112][T29284]  ? __gup_longterm_locked+0x307/0x1660
[  611.382129][T29284]  ? down_read_killable+0x1d1/0x350
[  611.382149][T29284]  __gup_longterm_locked+0x3dc/0x1660
[  611.382179][T29284]  ? gup_fast_fallback+0x1b86/0x22d0
[  611.382200][T29284]  gup_fast_fallback+0x1d65/0x22d0
[  611.382243][T29284]  ? __pfx_gup_fast_fallback+0x10/0x10
[  611.382261][T29284]  ? rcu_is_watching+0x15/0xb0
[  611.382286][T29284]  ? __kvmalloc_node_noprof+0x5ed/0x910
[  611.382306][T29284]  ? is_valid_gup_args+0x11f/0x200
[  611.382325][T29284]  ? pin_user_pages_fast+0x4d/0xb0
[  611.382378][T29284]  io_pin_pages+0xba/0x1b0
[  611.382397][T29284]  io_sqe_buffer_register+0x16f/0x20a0
[  611.382434][T29284]  ? __pfx_io_sqe_buffer_register+0x10/0x10
[  611.382455][T29284]  ? trace_kmalloc+0x1f/0xd0
[  611.382472][T29284]  ? __kvmalloc_node_noprof+0x5ed/0x910
[  611.382492][T29284]  ? io_sqe_buffers_register+0x138/0x8e0
[  611.382508][T29284]  ? iovec_from_user+0x1ba/0x250
[  611.382527][T29284]  io_sqe_buffers_register+0x3b9/0x8e0
[  611.382551][T29284]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  611.382570][T29284]  ? __fget_files+0x3a0/0x420
[  611.382589][T29284]  ? __fget_files+0x2a/0x420
[  611.382611][T29284]  ? io_is_uring_fops+0xd/0x50
[  611.382632][T29284]  __se_sys_io_uring_register+0x9d3/0x11f0
[  611.382647][T29284]  ? __se_sys_futex+0x36f/0x400
[  611.382664][T29284]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  611.382682][T29284]  ? rcu_is_watching+0x15/0xb0
[  611.382709][T29284]  ? do_syscall_64+0xbe/0xfa0
[  611.382725][T29284]  do_syscall_64+0xfa/0xfa0
[  611.382736][T29284]  ? lockdep_hardirqs_on+0x9c/0x150
[  611.382756][T29284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.382768][T29284]  ? exc_page_fault+0xab/0x100
[  611.382789][T29284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.382810][T29284] RIP: 0033:0x7fa5aab8eba9
[  611.382826][T29284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.382841][T29284] RSP: 002b:00007fa5a8df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  611.382858][T29284] RAX: ffffffffffffffda RBX: 00007fa5aadd5fa0 RCX: 00007fa5aab8eba9
[  611.382869][T29284] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000005
[  611.382879][T29284] RBP: 00007fa5aac11e19 R08: 0000000000000000 R09: 0000000000000000
[  611.382888][T29284] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000
[  611.382899][T29284] R13: 00007fa5aadd6038 R14: 00007fa5aadd5fa0 R15: 00007ffeff2efe28
[  611.382924][T29284]  </TASK>
[  611.507051][    C0] hpet: Lost 7 RTC interrupts
[  613.448774][T29350] IPVS: set_ctl: invalid protocol: 0 172.20.20.33:20004
[  614.113939][T29371] gre0: entered promiscuous mode
[  614.116197][T29371] gre0: entered allmulticast mode
[  614.950418][T29390] syz_tun: entered allmulticast mode
[  615.022053][T29389] syz_tun: left allmulticast mode
[  615.972370][   T33] audit: type=1800 audit(1757560292.742:29): pid=29430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6981" name="file1" dev="tmpfs" ino=10880 res=0 errno=0
[  616.321202][T29448] random: crng reseeded on system resumption
[  616.678689][T29457] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  616.683129][T29454] IPVS: stopping master sync thread 29457 ...
[  620.291195][T29554] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004
[  621.808790][T29608] pimreg: left allmulticast mode
[  621.811184][T29608] dvmrp5: left allmulticast mode
[  622.339355][T29626] IPVS: set_ctl: invalid protocol: 4 172.20.20.21:20003
[  622.486618][T29628] sit0: entered promiscuous mode
[  622.490812][T29627] sit0: left promiscuous mode
[  623.061394][T20457] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  623.066616][T20457] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  623.085321][T20457] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  623.098026][T20457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  623.101641][T20457] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  623.453452][T29647] chnl_net:caif_netlink_parms(): no params data found
[  623.772770][T29647] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.775771][T29647] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.778724][T29647] bridge_slave_0: entered allmulticast mode
[  623.786980][T29647] bridge_slave_0: entered promiscuous mode
[  623.816998][T29647] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.820146][T29647] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.823162][T29647] bridge_slave_1: entered allmulticast mode
[  623.849514][T29647] bridge_slave_1: entered promiscuous mode
[  623.975270][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  623.977868][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  623.982045][T29647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  624.009046][T29647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  624.210625][T29647] team0: Port device team_slave_0 added
[  624.218176][T29647] team0: Port device team_slave_1 added
[  624.377459][T29647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  624.381711][T29647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  624.410582][T29647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  624.518388][T29647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  624.521206][T29647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  624.532229][T29647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  624.666970][T29696] veth0: entered promiscuous mode
[  624.745742][T29695] veth0: left promiscuous mode
[  624.753835][T29647] hsr_slave_0: entered promiscuous mode
[  624.760612][T29647] hsr_slave_1: entered promiscuous mode
[  624.763557][T29647] debugfs: 'hsr0' already exists in 'hsr'
[  624.766255][T29647] Cannot create hsr debugfs directory
[  625.163411][ T5845] Bluetooth: hci1: command tx timeout
[  625.420228][T29647] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  625.444729][T29647] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  625.467417][T29647] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  625.484462][T29647] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  625.857944][T29647] 8021q: adding VLAN 0 to HW filter on device bond0
[  625.904052][T29647] 8021q: adding VLAN 0 to HW filter on device team0
[  625.937795][T25165] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.940635][T25165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  625.948961][T25165] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.951729][T25165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  626.432057][T29647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  626.941380][T29647] veth0_vlan: entered promiscuous mode
[  626.960020][T29647] veth1_vlan: entered promiscuous mode
[  627.032161][T29647] veth0_macvtap: entered promiscuous mode
[  627.042330][T29647] veth1_macvtap: entered promiscuous mode
[  627.064757][T29647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  627.092987][T29647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  627.144738][ T5870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  627.165723][ T5870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.207841][ T5870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.247651][ T5845] Bluetooth: hci1: command tx timeout
[  627.271045][ T5870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  627.385949][T12975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.389109][T12975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  627.498439][T29773] pim6reg: entered allmulticast mode
[  627.502244][T12975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.507906][T12975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  627.847757][T29781] hsr0: entered allmulticast mode
[  627.850947][T29781] hsr_slave_0: entered allmulticast mode
[  627.853509][T29781] hsr_slave_1: entered allmulticast mode
[  627.932605][T29782] veth0: entered promiscuous mode
[  627.937196][T29782] veth0: left promiscuous mode
[  629.248741][T25472] IPVS: starting estimator thread 0...
[  629.325012][ T5845] Bluetooth: hci1: command tx timeout
[  629.365635][T29819] IPVS: using max 43 ests per chain, 103200 per kthread
[  629.603034][T29838] tipc: Trying to set illegal importance in message
[  629.941299][T29848] delete_channel: no stack
[  630.335833][T29856] random: crng reseeded on system resumption
[  630.884647][T29879] veth0: entered promiscuous mode
[  630.895311][T29878] veth0: left promiscuous mode
[  631.411938][ T5845] Bluetooth: hci1: command tx timeout
[  632.078934][T29904] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001
[  632.772239][T29932] veth1_to_bond: entered allmulticast mode
[  632.798171][T29932] veth1_to_bond: left allmulticast mode
[  634.839186][T30006] veth0_to_bridge: entered promiscuous mode
[  635.023028][T30012] ubi0: attaching mtd0
[  635.026895][T30012] ubi0 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  635.115829][T30012] ubi0 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  635.130209][T30003] veth0_to_bridge: left promiscuous mode
[  635.137710][T30012] ubi0 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  635.144329][T30012] ubi0 error: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read 0 bytes
[  635.149096][T30012] CPU: 1 UID: 0 PID: 30012 Comm: syz.1.7158 Not tainted syzkaller #0 PREEMPT(full) 
[  635.149119][T30012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  635.149137][T30012] Call Trace:
[  635.149144][T30012]  <TASK>
[  635.149151][T30012]  dump_stack_lvl+0x189/0x250
[  635.149175][T30012]  ? __pfx_ubi_err+0x10/0x10
[  635.149212][T30012]  ? __pfx_dump_stack_lvl+0x10/0x10
[  635.149232][T30012]  ? __pfx_do_sched_yield+0x10/0x10
[  635.149258][T30012]  ubi_io_read+0x68d/0xb00
[  635.149290][T30012]  ? __pfx_ubi_io_read+0x10/0x10
[  635.149311][T30012]  ? rcu_is_watching+0x15/0xb0
[  635.149332][T30012]  ubi_io_read_ec_hdr+0x9d/0x630
[  635.149343][T30012]  ? ubi_io_is_bad+0xc5/0x280
[  635.149355][T30012]  ubi_attach+0x78a/0x5c00
[  635.149371][T30012]  ? __vmalloc_node_range_noprof+0x1249/0x12f0
[  635.149413][T30012]  ? __pfx_ubi_attach+0x10/0x10
[  635.149441][T30012]  ? vmalloc_noprof+0xb2/0xf0
[  635.149465][T30012]  ubi_attach_mtd_dev+0x1b75/0x37e0
[  635.149505][T30012]  ctrl_cdev_ioctl+0x28b/0x3e0
[  635.149527][T30012]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  635.149544][T30012]  ? __fget_files+0x3a0/0x420
[  635.149564][T30012]  ? __fget_files+0x2a/0x420
[  635.149587][T30012]  ? bpf_lsm_file_ioctl+0x9/0x20
[  635.149604][T30012]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  635.149623][T30012]  __se_sys_ioctl+0xfc/0x170
[  635.149666][T30012]  do_syscall_64+0xfa/0xfa0
[  635.149683][T30012]  ? lockdep_hardirqs_on+0x9c/0x150
[  635.149705][T30012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.149721][T30012]  ? exc_page_fault+0xab/0x100
[  635.149745][T30012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.149758][T30012] RIP: 0033:0x7f7fb5f8eba9
[  635.149772][T30012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  635.149785][T30012] RSP: 002b:00007f7fb6d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  635.149803][T30012] RAX: ffffffffffffffda RBX: 00007f7fb61d5fa0 RCX: 00007f7fb5f8eba9
[  635.149814][T30012] RDX: 0000200000001580 RSI: 0000000040186f40 RDI: 0000000000000007
[  635.149824][T30012] RBP: 00007f7fb6011e19 R08: 0000000000000000 R09: 0000000000000000
[  635.149834][T30012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  635.149844][T30012] R13: 00007f7fb61d6038 R14: 00007f7fb61d5fa0 R15: 00007ffd54bc28d8
[  635.149871][T30012]  </TASK>
[  635.384509][T30012] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  635.451507][T30018] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  636.784028][T30053] binder_alloc: binder_alloc_mmap_handler: 30051 200000ffc000-200000ffd000 already mapped failed -16
[  637.866596][T30058] syz.1.7175: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  637.880374][T30058] CPU: 0 UID: 0 PID: 30058 Comm: syz.1.7175 Not tainted syzkaller #0 PREEMPT(full) 
[  637.880396][T30058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  637.880407][T30058] Call Trace:
[  637.880413][T30058]  <TASK>
[  637.880420][T30058]  dump_stack_lvl+0x189/0x250
[  637.880481][T30058]  ? __pfx_dump_stack_lvl+0x10/0x10
[  637.880501][T30058]  ? __pfx__printk+0x10/0x10
[  637.880523][T30058]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  637.880540][T30058]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  637.880557][T30058]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  637.880576][T30058]  warn_alloc+0x214/0x310
[  637.880603][T30058]  ? __pfx_warn_alloc+0x10/0x10
[  637.880632][T30058]  ? __get_vm_area_node+0x28f/0x300
[  637.880652][T30058]  ? packet_set_ring+0x6f4/0x2350
[  637.880672][T30058]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  637.880710][T30058]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  637.880730][T30058]  ? alloc_pages_mpol+0x3cd/0x4a0
[  637.880751][T30058]  ? packet_set_ring+0x6f4/0x2350
[  637.880767][T30058]  vzalloc_noprof+0xb2/0xf0
[  637.880783][T30058]  ? packet_set_ring+0x6f4/0x2350
[  637.880805][T30058]  packet_set_ring+0x6f4/0x2350
[  637.880838][T30058]  ? __pfx_packet_set_ring+0x10/0x10
[  637.880866][T30058]  ? _copy_from_user+0x94/0xb0
[  637.880886][T30058]  packet_setsockopt+0xc5a/0x12c0
[  637.880907][T30058]  ? __pfx_packet_setsockopt+0x10/0x10
[  637.880925][T30058]  ? file_init_path+0x3b/0x590
[  637.880946][T30058]  ? aa_sk_perm+0x81e/0x950
[  637.880969][T30058]  ? __pfx_aa_sk_perm+0x10/0x10
[  637.880990][T30058]  ? aa_sock_opt_perm+0xff/0x1b0
[  637.881015][T30058]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  637.881028][T30058]  ? __pfx_packet_setsockopt+0x10/0x10
[  637.881049][T30058]  do_sock_setsockopt+0x17c/0x1b0
[  637.881071][T30058]  __x64_sys_setsockopt+0x13f/0x1b0
[  637.881091][T30058]  do_syscall_64+0xfa/0xfa0
[  637.881106][T30058]  ? lockdep_hardirqs_on+0x9c/0x150
[  637.881138][T30058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.881153][T30058]  ? exc_page_fault+0xab/0x100
[  637.881178][T30058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.881193][T30058] RIP: 0033:0x7f7fb5f8eba9
[  637.881207][T30058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  637.881221][T30058] RSP: 002b:00007f7fb6d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  637.881237][T30058] RAX: ffffffffffffffda RBX: 00007f7fb61d5fa0 RCX: 00007f7fb5f8eba9
[  637.881249][T30058] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005
[  637.881258][T30058] RBP: 00007f7fb6011e19 R08: 000000000000001c R09: 0000000000000000
[  637.881268][T30058] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  637.881278][T30058] R13: 00007f7fb61d6038 R14: 00007f7fb61d5fa0 R15: 00007ffd54bc28d8
[  637.881304][T30058]  </TASK>
[  637.881310][T30058] Mem-Info:
[  638.008886][T30058] active_anon:14176 inactive_anon:0 isolated_anon:0
[  638.008886][T30058]  active_file:1798 inactive_file:38471 isolated_file:0
[  638.008886][T30058]  unevictable:1768 dirty:29 writeback:0
[  638.008886][T30058]  slab_reclaimable:10095 slab_unreclaimable:60014
[  638.008886][T30058]  mapped:33430 shmem:10308 pagetables:1149
[  638.008886][T30058]  sec_pagetables:0 bounce:0
[  638.008886][T30058]  kernel_misc_reclaimable:0
[  638.008886][T30058]  free:249839 free_pcp:24457 free_cma:0
[  638.027660][T30058] Node 0 active_anon:30472kB inactive_anon:0kB active_file:2512kB inactive_file:8964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:69440kB dirty:60kB writeback:0kB shmem:22840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5680kB pagetables:2868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  638.055005][T30058] Node 1 active_anon:27184kB inactive_anon:0kB active_file:4680kB inactive_file:144920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:57004kB dirty:56kB writeback:0kB shmem:19412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9492kB pagetables:1728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  638.068287][T30058] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  638.085007][T30058] lowmem_reserve[]: 0 810 810 810 810
[  638.087320][T30058] Node 0 DMA32 free:305468kB boost:0kB min:33600kB low:42000kB high:50400kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30472kB inactive_anon:0kB active_file:2512kB inactive_file:8964kB unevictable:3536kB writepending:60kB zspages:0kB present:1556484kB managed:830208kB mlocked:0kB bounce:0kB free_pcp:36484kB local_pcp:20764kB free_cma:0kB
[  638.148979][T30058] lowmem_reserve[]: 0 0 0 0 0
[  638.151052][T30058] Node 1 DMA32 free:440184kB boost:0kB min:19212kB low:24012kB high:28812kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18432kB local_pcp:8192kB free_cma:0kB
[  638.228500][T30058] lowmem_reserve[]: 0 0 854 854 854
[  638.230589][T30058] Node 1 Normal free:236980kB boost:0kB min:36652kB low:45812kB high:54972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25620kB inactive_anon:0kB active_file:4680kB inactive_file:144920kB unevictable:3536kB writepending:56kB zspages:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:45076kB local_pcp:19736kB free_cma:0kB
[  638.305881][T30058] lowmem_reserve[]: 0 0 0 0 0
[  638.307945][T30058] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB
[  638.354328][T30058] Node 0 DMA32: 241*4kB (UME) 151*8kB (UME) 18*16kB (ME) 8*32kB (ME) 36*64kB (UME) 29*128kB (ME) 23*256kB (UM) 33*512kB (UM) 29*1024kB (UM) 9*2048kB (UM) 58*4096kB (UM) = 317212kB
[  638.381364][T30058] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 9*2048kB (UM) 102*4096kB (UM) = 440184kB
[  638.415337][T30058] Node 1 Normal: 776*4kB (UME) 889*8kB (UME) 230*16kB (UME) 85*32kB (UME) 80*64kB (UM) 49*128kB (UME) 81*256kB (UME) 50*512kB (UME) 32*1024kB (UM) 5*2048kB (UM) 31*4096kB (UM) = 244328kB
[  638.450484][T30058] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  638.455921][T30058] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  638.465192][T30058] 45869 total pagecache pages
[  638.472624][T30058] 0 pages in swap cache
[  638.474392][T30058] Free swap  = 124996kB
[  638.485310][T30058] Total swap = 124996kB
[  638.487076][T30058] 786301 pages RAM
[  638.488700][T30058] 0 pages HighMem/MovableOnly
[  638.501291][T30058] 241517 pages reserved
[  638.520818][T30058] 0 pages cma reserved
[  639.883625][T30115] pim6reg: left allmulticast mode
[  640.423670][T30137] [U] 
[  641.347193][T30160] delete_channel: no stack
[  643.443788][T30247] erspan0: entered promiscuous mode
[  643.471552][T30246] erspan0: left promiscuous mode
[  643.862573][T30262] dvmrp1: entered allmulticast mode
[  644.387736][T30278] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  644.391932][T30277] IPVS: stopping backup sync thread 30278 ...
[  644.540212][T30280] binder: 30279:30280 ioctl c0306201 200000000380 returned -14
[  644.985096][T30273] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  644.987897][T30273] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  644.990510][T30273] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  644.993045][T30273] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  644.995689][T30273] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  645.044622][T30273] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  646.578950][T30364] random: crng reseeded on system resumption
[  646.678209][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  647.075217][T20457] Bluetooth: hci1: command 0x0c1a tx timeout
[  647.075492][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout
[  647.078886][T19884] Bluetooth: hci2: command 0x0c1a tx timeout
[  647.673961][T30420] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  648.155153][ T5870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.231474][ T5870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.333693][T30453] delete_channel: no stack
[  648.344595][ T5870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.586571][ T5870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.669493][T30465] bond0: entered promiscuous mode
[  648.671816][T30465] bond_slave_0: entered promiscuous mode
[  648.673770][T30465] bond_slave_1: entered promiscuous mode
[  648.931630][ T5870] bridge_slave_1: left allmulticast mode
[  648.933933][ T5870] bridge_slave_1: left promiscuous mode
[  648.952074][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.049301][ T5870] bridge_slave_0: left allmulticast mode
[  649.051619][ T5870] bridge_slave_0: left promiscuous mode
[  649.082961][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.165392][T20457] Bluetooth: hci1: command 0x0c1a tx timeout
[  649.700261][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  649.709805][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  649.721388][ T5870] bond0 (unregistering): Released all slaves
[  649.736671][T30468] bond0: left promiscuous mode
[  649.739393][T30468] bond_slave_0: left promiscuous mode
[  649.741704][T30468] bond_slave_1: left promiscuous mode
[  650.233508][ T5870] hsr_slave_0: left promiscuous mode
[  650.240247][ T5870] hsr_slave_1: left promiscuous mode
[  650.243091][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  650.246920][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  650.264225][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  650.267534][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.316044][ T5870] veth1_macvtap: left promiscuous mode
[  650.333109][ T5870] veth0_macvtap: left promiscuous mode
[  650.339671][ T5870] veth1_vlan: left promiscuous mode
[  650.357527][ T5870] veth0_vlan: left promiscuous mode
[  650.506824][ T5870] pim6reg9 (unregistering): left allmulticast mode
[  651.236015][T20457] Bluetooth: hci1: command 0x0c1a tx timeout
[  651.372321][ T5870] team0 (unregistering): Port device team_slave_1 removed
[  651.456811][ T5870] team0 (unregistering): Port device team_slave_0 removed
[  652.693839][ T5870] IPVS: stop unused estimator thread 0...
[  654.277358][T30707] batadv0: entered promiscuous mode
[  654.289807][T30704] batadv0: left promiscuous mode
[  654.562862][T30731] binder: binder_mmap: 30728 200000000000-200000b36000 bad vm_flags failed -1
[  655.154723][T30757] random: crng reseeded on system resumption
[  655.679489][T30789] [U] @
[  655.680527][T30789] [U] ])6:N0dGr؂U)(jϐ4HRXꪢJ`*/87͓khq]}gy-Ssy
[  655.683820][T30789] [U] Z"uC7R>bۏ
[  655.687115][T30789] [U] 8c8
[  655.689086][T30789] [U] 
[  655.690251][T30789] [U] 
[  655.691551][T30789] [U] 
[  655.692758][T30789] [U] 
[  655.693954][T30789] [U] 
[  655.695124][T30789] [U] 
[  655.698688][T30789] [U] 
[  655.700004][T30789] [U] 
[  655.701226][T30789] [U] 
[  655.702370][T30789] [U] 
[  655.704270][T30789] [U] 
[  655.705260][T30789] [U] 
[  655.706056][T30789] [U] 
[  655.706876][T30789] [U] 
[  655.709319][T30789] [U] 
[  655.710419][T30789] [U] 
[  655.711547][T30789] [U] 
[  655.712705][T30789] [U] 
[  655.714541][T30789] [U] 
[  655.715757][T30789] [U] 
[  655.717073][T30789] [U] 
[  655.718216][T30789] [U] 
[  655.720595][T30789] [U] 
[  655.721723][T30789] [U] 
[  655.722551][T30789] [U] 
[  655.723402][T30789] [U] 
[  655.724653][T30789] [U] 
[  655.725751][T30789] [U] 
[  655.726867][T30789] [U] 
[  655.727997][T30789] [U] 
[  655.732014][T30789] [U] 
[  655.732878][T30789] [U] 
[  655.733686][T30789] [U] 
[  655.734506][T30789] [U] 
[  655.761131][T30790] [U] 
[  656.977223][T30889] dvmrp8: entered allmulticast mode
[  657.121391][T30893] can: request_module (can-proto-4) failed.
[  657.994209][T30932] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000
[  658.038282][T30934] IPVS: Unknown mcast interface: /hpet
[  658.990418][T30984] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 2, id = 0
[  659.229593][T30996] macvtap0: entered allmulticast mode
[  659.232422][T30996] veth0_macvtap: entered allmulticast mode
[  659.326613][T30996] IPVS: set_ctl: invalid protocol: 0 1.0.0.0:16128
[  660.566003][T31056] random: crng reseeded on system resumption
[  661.378410][   T33] audit: type=1804 audit(1757560338.152:30): pid=31117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7506" name="/newroot/2333/bus" dev="tmpfs" ino=11896 res=1 errno=0
[  661.869303][T31133] veth0: entered promiscuous mode
[  662.013279][T31130] veth0: left promiscuous mode
[  662.155059][T31147] IPVS: set_ctl: invalid protocol: 65535 255.255.255.255:0
[  662.164786][T31147] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  665.119559][T31249] sock: sock_timestamping_bind_phc: sock not bind to device
[  667.162393][T31325] random: crng reseeded on system resumption
[  673.986595][   T33] audit: type=1800 audit(1757560350.742:31): pid=31556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7643" name=627EA99936D0FC8A52F0CECC1FE27914E4B0C43918FD4AD7BA289AC3A648498A73F4B71E6AA4ED03EA4759EC0F91436A572AF2633AF63D6434690FA165A40E5C283C8601200C dev="tmpfs" ino=12130 res=0 errno=0
[  674.972325][T31579] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001
[  675.146115][T31603] can: request_module (can-proto-0) failed.
[  678.553624][T31753] geneve0: entered promiscuous mode
[  678.560880][T31752] geneve0: left promiscuous mode
[  680.803896][T31849] veth0: entered promiscuous mode
[  680.810735][T31849] vlan0: entered promiscuous mode
[  680.853159][T31851] macvtap0: left allmulticast mode
[  680.860599][T31851] veth0_macvtap: left allmulticast mode
[  680.920266][T31845] vlan0: left promiscuous mode
[  680.927085][T31845] veth0: left promiscuous mode
[  681.094850][T31865] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002
[  681.106880][T31867] IPVS: set_ctl: invalid protocol: 59 172.20.20.41:20004
[  681.653985][T31900] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  682.631740][T31941] gre0: left promiscuous mode
[  682.633735][T31941] gre0: left allmulticast mode
[  683.063320][T31948] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  683.252916][T31953] random: crng reseeded on system resumption
[  684.822428][T32030] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  685.411736][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  685.414361][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  686.777895][T32132] pim6reg: entered allmulticast mode
[  688.700927][T32188] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  689.132167][T32210] random: crng reseeded on system resumption
[  689.786053][T32231] bond0: entered promiscuous mode
[  689.788115][T32231] bond_slave_0: entered promiscuous mode
[  689.797873][T32231] bond_slave_1: entered promiscuous mode
[  689.806080][T32230] bond0: left promiscuous mode
[  689.808097][T32230] bond_slave_0: left promiscuous mode
[  689.810431][T32230] bond_slave_1: left promiscuous mode
[  692.123947][T32417] random: crng reseeded on system resumption
[  692.179723][T32417] random: crng reseeded on system resumption
[  692.771052][T32452] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20003
[  693.159242][T32470] sock: sock_timestamping_bind_phc: sock not bind to device
[  693.570777][T32481] bridge0: entered promiscuous mode
[  693.591351][T32481] bridge0: left promiscuous mode
[  693.872083][T32489] IPVS: Unknown mcast interface: /vcs
[  695.088445][T32521] delete_channel: no stack
[  695.906712][T32567] IPVS: set_ctl: invalid protocol: 233 172.20.20.170:20001
[  695.912713][T32567] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002
[  696.239604][T32582] pim6reg: left allmulticast mode
[  696.437709][T32590] delete_channel: no stack
[  698.574177][T32709] binder: 32708:32709 ioctl 7b9 200000000380 returned -22
[  699.131448][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.136575][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.140167][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.143789][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.147733][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.151312][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.154741][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.159150][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.163170][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  699.166984][T32744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  701.209904][T32731] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  702.036373][  T521] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  702.036411][  T518] IPVS: stopping master sync thread 521 ...
[  702.878003][  T561] dummy0: entered allmulticast mode
[  703.036691][  T571] random: crng reseeded on system resumption
[  703.444480][  T587] pim6reg: entered allmulticast mode
[  703.476920][  T587] pim6reg: left allmulticast mode
[  706.541595][  T704] veth0: entered promiscuous mode
[  706.578220][  T708] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002
[  706.653289][  T702] veth0: left promiscuous mode
[  706.720042][  T717] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 2, id = 0
[  707.153257][  T734] delete_channel: no stack
[  707.613080][  T757] veth0: entered promiscuous mode
[  707.625726][  T756] veth0: left promiscuous mode
[  710.774597][  T863] random: crng reseeded on system resumption
[  711.398111][  T902] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20003
[  711.400958][  T902] IPVS: stopping backup sync thread 717 ...
[  712.141411][  T950] binder: binder_mmap: 940 200000000000-200000b36000 bad vm_flags failed -1
[  713.638272][  T975] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  713.641555][  T975] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  713.643672][  T975] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  713.962682][ T1033] ip6tnl0: entered promiscuous mode
[  713.965872][ T1033] ip6tnl0: left promiscuous mode
[  713.970998][ T1039] binder: 1030:1039 ioctl 8933 2000000001c0 returned -22
[  715.075734][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  715.725138][T19884] Bluetooth: hci1: command 0x0c1a tx timeout
[  715.728337][T20457] Bluetooth: hci3: command 0x0c1a tx timeout
[  715.891910][    C0] hpet: Lost 4 RTC interrupts
[  716.896705][ T1134] IPVS: stopping master sync thread 27123 ...
[  717.045495][ T1124] delete_channel: no stack
[  717.047520][ T1124] delete_channel: no stack
[  718.750303][ T1204] net_ratelimit: 55 callbacks suppressed
[  718.750359][ T1204] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  719.017584][ T1216] team_slave_0: entered promiscuous mode
[  719.020212][ T1216] team_slave_1: entered promiscuous mode
[  719.034459][ T1215] team_slave_0: left promiscuous mode
[  719.036804][ T1215] team_slave_1: left promiscuous mode
[  720.880667][ T1299] IPVS: stopping backup sync thread 30984 ...
[  722.014069][ T1337] bridge0: entered promiscuous mode
[  722.059274][ T1341] geneve0: entered promiscuous mode
[  722.064583][ T1337] bridge0: left promiscuous mode
[  722.109526][ T1340] geneve0: left promiscuous mode
[  722.436369][ T1360] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004
[  722.777634][ T1372] lo: entered promiscuous mode
[  722.804142][ T1367] lo: left promiscuous mode
[  724.566525][ T1456] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000
[  724.575784][ T1456] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000
[  725.259549][ T1491] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003
[  725.407352][ T1495] pim6reg: entered allmulticast mode
[  725.420248][ T1494] pim6reg: left allmulticast mode
[  725.758964][ T1505] tipc: Trying to set illegal importance in message
[  726.592508][ T1507] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  726.601329][ T1507] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  726.604730][ T1507] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  726.751678][ T1530] IPVS: ip_vs_edit_dest(): server weight less than zero
[  727.955160][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  728.675420][T20457] Bluetooth: hci1: command 0x0c1a tx timeout
[  728.675489][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[  729.182608][ T1658] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000
[  730.198122][ T1709] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:0
[  731.559842][ T1793] IPVS: set_ctl: invalid protocol: 143 172.20.20.170:20004
[  733.780856][ T1852] random: crng reseeded on system resumption
[  737.093451][ T1974] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  737.168612][ T1973] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  742.624472][ T2089] delete_channel: no stack
[  742.687894][   T33] audit: type=1800 audit(1757560419.462:32): pid=2093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8532" name=627EA99936D0FC8A52F0CECC1FE27914E4B0C43918FD4AD7BA289AC3A648498A73F4B71E6AA4ED03EA4759EC0F91436A572AF2633AF63D6434690FA165A40E5C283C dev="tmpfs" ino=15064 res=0 errno=0
[  743.085737][ T2126] delete_channel: no stack
[  743.282614][ T2145] tipc: Trying to set illegal importance in message
[  743.294791][ T2149] macvlan1: entered promiscuous mode
[  743.300487][ T2148] macvlan1: left promiscuous mode
[  743.487582][ T2162] bridge0: entered promiscuous mode
[  743.519221][ T2152] bridge0: left promiscuous mode
[  746.281709][ T2306] dvmrp1: entered allmulticast mode
[  746.298347][ T2308] can: request_module (can-proto-0) failed.
[  746.841350][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  746.844047][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  747.728863][ T2357] IPVS: ip_vs_add_dest(): server weight less than zero
[  751.228830][ T2519] erspan0: entered promiscuous mode
[  751.233226][ T2517] erspan0: left promiscuous mode
[  752.639517][ T2612] random: crng reseeded on system resumption
[  753.479240][ T2664] ip6gre0: entered promiscuous mode
[  753.512302][ T2666] ip6gre0: left promiscuous mode
[  753.597838][   T33] audit: type=1800 audit(1757560430.372:33): pid=2674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8709" name=0C dev="tmpfs" ino=15395 res=0 errno=0
[  754.986755][ T2730] IPVS: sync thread started: state = MASTER, mcast_ifn = dvmrp1, syncid = 3, id = 0
[  759.064786][ T2870] can: request_module (can-proto-0) failed.
[  759.196233][ T2903] hsr0: left allmulticast mode
[  759.199006][ T2903] hsr_slave_0: left allmulticast mode
[  759.201178][ T2903] hsr_slave_1: left allmulticast mode
[  759.203411][ T2903] dvmrp1: left allmulticast mode
[  759.205700][ T2903] dvmrp8: left allmulticast mode
[  760.677845][ T2971] team_slave_0: entered promiscuous mode
[  760.680332][ T2971] team_slave_1: entered promiscuous mode
[  760.701796][ T2971] team_slave_0: left promiscuous mode
[  760.704143][ T2971] team_slave_1: left promiscuous mode
[  761.269834][ T2993] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20000
[  761.893065][ T3015] dvmrp0: entered allmulticast mode
[  762.102881][ T3036] IPVS: Unknown mcast interface: pimreg
[  762.399311][ T3057] veth0_to_bridge: entered promiscuous mode
[  762.430311][ T3056] veth0_to_bridge: left promiscuous mode
[  762.615766][ T3067] dvmrp0: left allmulticast mode
[  762.618070][ T3067] dummy0: left allmulticast mode
[  764.090854][   T33] audit: type=1800 audit(1757560440.862:34): pid=3128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8837" name=0F dev="tmpfs" ino=14016 res=0 errno=0
[  768.399173][ T3234] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20004
[  778.631525][ T3456] QAT: Invalid ioctl 35123
[  780.568293][ T3529] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001
[  783.728318][ T3621] binder: binder_mmap: 3620 200000000000-200000b36000 bad vm_flags failed -1
[  785.480129][ T3735] bridge0: entered promiscuous mode
[  785.483494][ T3734] bridge0: left promiscuous mode
[  786.209481][ T3731] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  786.212469][ T3731] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  786.218988][ T3731] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  786.369950][ T3753] dvmrp8: entered allmulticast mode
[  787.476976][T19884] Bluetooth: hci0: command 0x0c1a tx timeout
[  788.252809][ T3848] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004
[  788.277682][T19884] Bluetooth: hci1: command 0x0c1a tx timeout
[  788.277908][T20457] Bluetooth: hci3: command 0x0c1a tx timeout
[  790.955411][ T3958] random: crng reseeded on system resumption
[  796.669035][ T4166] IPVS: set_ctl: invalid protocol: 179 0.0.0.0:20004
[  797.058363][ T4174] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20002
[  797.176804][ T4181] binder: 4180:4181 ioctl 4018620d 200000000380 returned -22
[  797.675537][ T4201] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  798.036716][   T33] audit: type=1800 audit(1757560474.802:35): pid=4224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9181" name="bus" dev="tmpfs" ino=3752 res=0 errno=0
[  801.001361][ T4320] IPVS: ip_vs_edit_dest(): server weight less than zero
[  801.501637][ T4352] binder: 4351:4352 ioctl 40046205 200000000380 returned -22
[  803.828118][ T4456] sctp: [Deprecated]: syz.4.9257 (pid 4456) Use of int in max_burst socket option deprecated.
[  803.828118][ T4456] Use struct sctp_assoc_value instead
[  808.278312][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  808.280892][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  810.510855][ T4717] ubi0: attaching mtd0
[  810.512586][ T4717] ubi0 error: ubi_attach_mtd_dev: bad VID header (17) or data offsets (81)
[  811.633586][ T4774] dvmrp5: entered allmulticast mode
[  811.653162][ T4774] pimreg: entered allmulticast mode
[  813.262194][ T4865] binder: 4864:4865 ioctl 7b9 200000000380 returned -22
[  816.573402][ T4967] macvtap0: entered allmulticast mode
[  816.638123][ T4967] veth0_macvtap: entered allmulticast mode
[  817.571768][ T4975] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  817.574386][ T4975] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  817.583676][ T4975] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  818.566935][ T5041] IPVS: set_ctl: invalid protocol: 181 224.0.0.1:20003
[  818.569800][ T5041] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002
[  818.835265][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  819.204244][ T5072] lo: entered promiscuous mode
[  819.635392][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[  819.638393][T20457] Bluetooth: hci1: command 0x0c1a tx timeout
[  819.805283][ T5097] random: crng reseeded on system resumption
[  819.973740][ T5070] lo: left promiscuous mode
[  824.578913][ T5240] dvmrp0: entered allmulticast mode
[  824.957240][ T5239] dvmrp0: left allmulticast mode
[  825.311670][ T5251] delete_channel: no stack
[  827.353489][ T5386] IPVS: Scheduler module ip_vs_ not found
[  828.458381][ T5433] dummy0: entered promiscuous mode
[  828.469794][ T5432] dummy0: left promiscuous mode
[  829.164718][ T5465] pim6reg: entered allmulticast mode
[  829.255870][ T5465] pim6reg: left allmulticast mode
[  830.196082][ T5509] dummy0: entered promiscuous mode
[  830.215551][ T5507] dummy0: left promiscuous mode
[  835.472442][ T5736] dvmrp5: entered allmulticast mode
[  835.479076][ T5736] pimreg: entered allmulticast mode
[  835.493861][ T5730] [U] 
[  835.815126][ T5774] bridge0: entered promiscuous mode
[  835.849306][ T5772] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  835.851807][ T5772] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  835.854138][ T5772] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  836.188912][ T5773] bridge0: left promiscuous mode
[  836.840127][ T5838] IPVS: set_ctl: invalid protocol: 44 172.20.20.31:20002
[  837.895085][T20457] Bluetooth: hci1: command 0x0c1a tx timeout
[  837.897719][T20457] Bluetooth: hci3: command 0x0c1a tx timeout
[  837.900299][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  838.283983][ T1069] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  838.295025][ T1069] sr 2:0:0:0: [sr0] tag#7 Sense Key : Not Ready [current] 
[  838.297474][ T1069] sr 2:0:0:0: [sr0] tag#7 Add. Sense: Medium not present
[  838.300136][ T1069] sr 2:0:0:0: [sr0] tag#7 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[  838.302768][ T1069] blk_print_req_error: 1 callbacks suppressed
[  838.302819][ T1069] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2
[  840.598957][ T6007] binder: binder_mmap: 6004 200000000000-200000b36000 bad vm_flags failed -1
[  841.260470][ T6050] IPVS: Scheduler module ip_vs_ not found
[  841.592939][ T6069] binder: 6068:6069 ioctl c0046209 200000000380 returned -22
[  841.928836][ T6089] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  844.075544][ T6184] syz_tun: entered promiscuous mode
[  844.078815][ T6183] syz_tun: left promiscuous mode
[  845.213371][ T6232] IPVS: set_ctl: invalid protocol: 0 172.20.20.15:20002
[  845.300459][ T6238] IPVS: set_ctl: invalid protocol: 0 172.20.20.15:20002
[  845.394045][ T6241] binder: binder_mmap: 6240 200000000000-200000b36000 bad vm_flags failed -1
[  848.296211][ T6402] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002
[  848.866852][ T6423] pimreg: left allmulticast mode
[  848.868682][ T6423] dvmrp5: left allmulticast mode
[  848.900993][ T6419] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000
[  849.900712][ T6479] veth0: entered promiscuous mode
[  849.903292][ T6479] veth0: left promiscuous mode
[  850.943505][ T6511] binder_alloc: binder_alloc_mmap_handler: 6508 200000ffc000-200000ffd000 already mapped failed -16
[  853.682872][ T6613] IPVS: ip_vs_edit_dest(): server weight less than zero
[  854.401651][ T6638] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  856.427570][ T6730] syz_tun: entered promiscuous mode
[  856.564751][ T6729] syz_tun: left promiscuous mode
[  856.759713][ T6735] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000
[  857.920434][ T6772] pimreg: left allmulticast mode
[  857.922673][ T6772] dvmrp1: left allmulticast mode
[  857.924849][ T6772] dvmrp5: left allmulticast mode
[  857.977080][ T6773] pim6reg: entered allmulticast mode
[  857.980158][ T6773] pim6reg: left allmulticast mode
[  858.451461][ T6779] IPVS: Unknown mcast interface: pimreg
[  859.345915][ T6795] macvlan1: entered promiscuous mode
[  859.368639][ T6794] macvlan1: left promiscuous mode
[  864.893901][T20457] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  864.911693][T20457] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  864.918802][T20457] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  864.923349][T20457] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  864.932096][T20457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  865.396981][ T6917] chnl_net:caif_netlink_parms(): no params data found
[  865.648022][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state
[  865.663828][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.697122][ T6917] bridge_slave_0: entered allmulticast mode
[  865.715698][ T6917] bridge_slave_0: entered promiscuous mode
[  865.726511][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state
[  865.729641][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.732708][ T6917] bridge_slave_1: entered allmulticast mode
[  865.752137][ T6917] bridge_slave_1: entered promiscuous mode
[  866.106271][ T6917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  866.178848][ T6917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  866.638629][T25850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.698803][ T6917] team0: Port device team_slave_0 added
[  866.724194][ T6917] team0: Port device team_slave_1 added
[  866.867030][T25850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.890181][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  866.892859][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.922225][ T6917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  866.933075][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.936398][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.946718][ T6917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  866.984728][T25850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.995446][T20457] Bluetooth: hci2: command tx timeout
[  867.057125][ T6917] hsr_slave_0: entered promiscuous mode
[  867.059639][ T6917] hsr_slave_1: entered promiscuous mode
[  867.061851][ T6917] debugfs: 'hsr0' already exists in 'hsr'
[  867.064284][ T6917] Cannot create hsr debugfs directory
[  867.119211][T25850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.319640][T25850] bridge_slave_1: left allmulticast mode
[  867.321396][T25850] bridge_slave_1: left promiscuous mode
[  867.323238][T25850] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.412680][T25850] bridge_slave_0: left allmulticast mode
[  867.418216][T25850] bridge_slave_0: left promiscuous mode
[  867.435128][T25850] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.233316][T25850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  868.243895][T25850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  868.253176][T25850] bond0 (unregistering): Released all slaves
[  868.496485][ T6917] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  868.517306][ T6917] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  868.615809][ T6917] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  868.630726][ T6917] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  868.720580][T25850] hsr_slave_0: left promiscuous mode
[  868.727950][T25850] hsr_slave_1: left promiscuous mode
[  868.741814][T25850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  868.747232][T25850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  868.768117][T25850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  868.771209][T25850] batman_adv: batadv0: Removing interface: batadv_slave_1
[  868.810679][T25850] veth1_macvtap: left promiscuous mode
[  868.812769][T25850] veth0_macvtap: left promiscuous mode
[  868.814662][T25850] veth1_vlan: left promiscuous mode
[  868.835747][T25850] veth0_vlan: left promiscuous mode
[  869.075153][T20457] Bluetooth: hci2: command tx timeout
[  869.409062][T25850] team0 (unregistering): Port device team_slave_1 removed
[  869.443141][T25850] team0 (unregistering): Port device team_slave_0 removed
[  869.718751][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  869.721546][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  869.980713][ T6917] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.002030][ T6917] 8021q: adding VLAN 0 to HW filter on device team0
[  870.021377][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.023829][ T6314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  870.038195][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.040675][ T6314] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.308215][T25850] IPVS: stop unused estimator thread 0...
[  870.505286][ T6917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.803352][ T6917] veth0_vlan: entered promiscuous mode
[  870.832457][ T6917] veth1_vlan: entered promiscuous mode
[  870.922568][ T6917] veth0_macvtap: entered promiscuous mode
[  870.955875][ T6917] veth1_macvtap: entered promiscuous mode
[  870.987672][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  871.000994][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  871.017393][T25850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  871.021537][T25850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.034411][T25850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  871.065510][T30518] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  871.155589][T20457] Bluetooth: hci2: command tx timeout
[  871.216938][ T6314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.220086][ T6314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.328301][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.332946][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.835837][   T10] IPVS: starting estimator thread 0...
[  871.942990][ T7130] IPVS: using max 37 ests per chain, 88800 per kthread
[  872.065373][ T7145] geneve1: entered promiscuous mode
[  872.238860][ T7142] geneve1: left promiscuous mode
[  872.908028][ T7180] veth0: entered promiscuous mode
[  872.923058][ T7178] veth0: left promiscuous mode
[  873.180792][ T7199] binder: 7194:7199 ioctl c0306201 200000000380 returned -14
[  873.195443][ T7199] binder: 7194:7199 ioctl c0306201 200000000380 returned -14
[  873.235282][T20457] Bluetooth: hci2: command tx timeout
[  873.350290][ T7213] random: crng reseeded on system resumption
[  875.082080][ T7310] sock: sock_timestamping_bind_phc: sock not bind to device
[  875.232341][ T7322] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
[  876.231741][ T7353] pim6reg: entered allmulticast mode
[  876.253855][ T7352] pim6reg: left allmulticast mode
[  876.549252][ T7343] gre0: entered promiscuous mode
[  876.561863][ T7343] gre0: entered allmulticast mode
[  877.060211][ T7377] delete_channel: no stack
[  877.263518][ T7385] pimreg3: entered allmulticast mode
[  878.120752][ T7424] binder: binder_mmap: 7423 200000000000-200000b36000 bad vm_flags failed -1
[  878.128094][ T7424] binder: 7423:7424 ioctl af01 200000001580 returned -22
[  878.131151][ T7424] binder: 7423:7424 ioctl 0 200000000040 returned -22
[  878.641128][ T7441] lo: entered allmulticast mode
[  878.644244][ T7440] lo: left allmulticast mode
[  881.318208][ T7542] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 4, id = 0
[  884.610531][ T7725] delete_channel: no stack
[  885.392848][ T7751] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20000
[  885.870636][ T7770] random: crng reseeded on system resumption
[  888.431897][ T7872] random: crng reseeded on system resumption
[  888.491974][ T7872] Unrecognized hibernate image header format!
[  888.494756][ T7872] PM: hibernation: Image mismatch: architecture specific data
[  888.754724][ T7899] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 2, id = 0
[  889.192492][ T7922] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20000
[  889.564025][ T7940] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20004
[  889.819156][ T7946] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  889.858697][ T7944] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  890.807317][ T7987] vlan0: entered allmulticast mode
[  890.809784][ T7987] veth0_vlan: entered allmulticast mode
[  891.684843][ T7986] vlan0: left allmulticast mode
[  891.705024][ T7986] veth0_vlan: left allmulticast mode
[  891.926697][ T8023] hsr0: entered promiscuous mode
[  891.984168][ T8021] hsr0: left promiscuous mode
[  894.873853][ T8121] random: crng reseeded on system resumption
[  895.540026][ T8133] delete_channel: no stack
[  895.542022][ T8133] delete_channel: no stack
[  895.544262][ T8133] delete_channel: no stack
[  895.546471][ T8133] delete_channel: no stack
[  896.842795][ T8232] delete_channel: no stack
[  900.654852][ T8388] delete_channel: no stack
[  900.752180][ T8397] sctp: [Deprecated]: syz.1.10484 (pid 8397) Use of struct sctp_assoc_value in delayed_ack socket option.
[  900.752180][ T8397] Use struct sctp_sack_info instead
[  900.868522][ T8412] vlan1: entered promiscuous mode
[  900.880611][ T8415] vlan1: left promiscuous mode
[  901.177737][ T8442] vlan0: entered allmulticast mode
[  901.181857][ T8442] veth0_vlan: entered allmulticast mode
[  901.189488][ T8442] random: crng reseeded on system resumption
[  901.207996][ T8441] vlan0: left allmulticast mode
[  901.211965][ T8441] veth0_vlan: left allmulticast mode
[  901.292152][ T8446] delete_channel: no stack
[  901.496693][ T8456] IPVS: set_ctl: invalid protocol: 255 172.20.20.38:20002
[  901.500913][ T8456] dummy0: entered allmulticast mode
[  901.506792][ T8456] dummy0: left allmulticast mode
[  903.156694][ T8529] random: crng reseeded on system resumption
[  904.052016][ T8587] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  904.058338][ T8588] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  905.591243][ T8655] lo: entered allmulticast mode
[  905.629968][ T8654] lo: left allmulticast mode
[  905.816361][ T8666] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  905.902907][ T8676] IPVS: stopping master sync thread 2730 ...
[  905.944208][   T33] audit: type=1800 audit(1757560582.712:36): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10575" name=627EA99936D0FC8A52F0CECC1FE27914E4B0C43918FD4AD7BA289AC3A648498A73F4B71E6AA4ED03EA4759EC0F91436A572AF2633AF63D6434690FA165A40E5C283C dev="tmpfs" ino=17077 res=0 errno=0
[  906.228808][ T8701] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 4, id = 0
[  908.608904][ T8794] delete_channel: no stack
[  908.620664][ T8794] delete_channel: no stack
[  909.035708][ T8814] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20002
[  910.610946][ T8865] pim6reg: entered allmulticast mode
[  910.617967][ T8865] vlan0: entered allmulticast mode
[  910.620035][ T8865] veth0_vlan: entered allmulticast mode
[  910.630595][ T8863] pim6reg: left allmulticast mode
[  910.632872][ T8863] vlan0: left allmulticast mode
[  910.634768][ T8863] veth0_vlan: left allmulticast mode
[  910.773557][ T8881] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000
[  910.830903][ T8888] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20004
[  910.964658][ T8903] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  911.065524][ T8911] delete_channel: no stack
[  915.676674][ T9043] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002
[  916.484890][ T9077] bond_slave_1: entered promiscuous mode
[  916.501508][ T9073] bond_slave_1: left promiscuous mode
[  917.247653][ T9114] IPVS: stopping master sync thread 7542 ...
[  918.641034][ T9197] pimreg: entered allmulticast mode
[  918.646311][ T9197] pimreg: left allmulticast mode
[  920.009356][   T33] audit: type=1804 audit(1757560596.782:37): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10765" name="/newroot/3414/bus" dev="tmpfs" ino=17394 res=1 errno=0
[  920.184815][ T9252] macvlan1: entered promiscuous mode
[  920.456760][ T9251] macvlan1: left promiscuous mode
[  921.469653][ T9301] bridge0: entered promiscuous mode
[  921.485164][ T9300] bridge0: left promiscuous mode
[  923.906828][ T1069] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  923.915192][ T1069] sr 2:0:0:0: [sr0] tag#18 Sense Key : Not Ready [current] 
[  923.918233][ T1069] sr 2:0:0:0: [sr0] tag#18 Add. Sense: Medium not present
[  923.935149][ T1069] sr 2:0:0:0: [sr0] tag#18 CDB: Read(10) 28 00 00 00 ff e0 00 00 40 00
[  923.939665][ T1069] I/O error, dev sr0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  923.949792][ T9374] sr 2:0:0:0: [sr0] tag#19 unaligned transfer
[  923.952761][ T9374] I/O error, dev sr0, sector 262144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  923.975015][ T9374] buffer_io_error: 6 callbacks suppressed
[  923.975031][ T9374] Buffer I/O error on dev sr0, logical block 262144, async page read
[  923.981085][ T9374] sr 2:0:0:0: [sr0] tag#20 unaligned transfer
[  923.991429][ T9374] I/O error, dev sr0, sector 262145 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  923.995709][ T9374] Buffer I/O error on dev sr0, logical block 262145, async page read
[  924.002464][ T9374] sr 2:0:0:0: [sr0] tag#21 unaligned transfer
[  924.006724][ T9374] I/O error, dev sr0, sector 262146 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  924.010678][ T9374] Buffer I/O error on dev sr0, logical block 262146, async page read
[  924.014288][ T9374] sr 2:0:0:0: [sr0] tag#22 unaligned transfer
[  924.024539][ T9374] I/O error, dev sr0, sector 262147 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  924.045352][ T9374] Buffer I/O error on dev sr0, logical block 262147, async page read
[  924.055327][ T9374] sr 2:0:0:0: [sr0] tag#23 unaligned transfer
[  924.057994][ T9374] I/O error, dev sr0, sector 262148 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  924.061898][ T9374] Buffer I/O error on dev sr0, logical block 262148, async page read
[  924.075243][ T9374] sr 2:0:0:0: [sr0] tag#24 unaligned transfer
[  924.077943][ T9374] I/O error, dev sr0, sector 262149 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  924.083675][ T9374] Buffer I/O error on dev sr0, logical block 262149, async page read
[  924.090292][ T9374] sr 2:0:0:0: [sr0] tag#25 unaligned transfer
[  924.092902][ T9374] I/O error, dev sr0, sector 262150 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  924.097875][ T9374] Buffer I/O error on dev sr0, logical block 262150, async page read
[  924.101682][ T9374] sr 2:0:0:0: [sr0] tag#26 unaligned transfer
[  924.105318][ T9374] I/O error, dev sr0, sector 262151 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  924.109085][ T9374] Buffer I/O error on dev sr0, logical block 262151, async page read
[  924.112968][ T9374] sr 2:0:0:0: [sr0] tag#27 unaligned transfer
[  924.116236][ T9374] I/O error, dev sr0, sector 262144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  924.120001][ T9374] Buffer I/O error on dev sr0, logical block 262144, async page read
[  924.123883][ T9374] sr 2:0:0:0: [sr0] tag#28 unaligned transfer
[  924.126562][ T9374] Buffer I/O error on dev sr0, logical block 262145, async page read
[  924.129996][ T9374] sr 2:0:0:0: [sr0] tag#29 unaligned transfer
[  924.132158][ T9374] sr 2:0:0:0: [sr0] tag#30 unaligned transfer
[  924.134861][ T9374] sr 2:0:0:0: [sr0] tag#0 unaligned transfer
[  924.137616][ T9374] sr 2:0:0:0: [sr0] tag#1 unaligned transfer
[  924.140355][ T9374] sr 2:0:0:0: [sr0] tag#2 unaligned transfer
[  924.144192][ T9374] sr 2:0:0:0: [sr0] tag#3 unaligned transfer
[  924.995926][ T9437] delete_channel: no stack
[  925.010012][ T9436] delete_channel: no stack
[  925.011508][ T9436] delete_channel: no stack
[  925.013287][ T9436] delete_channel: no stack
[  925.017635][ T9436] delete_channel: no stack
[  925.019110][ T9436] delete_channel: no stack
[  925.020660][ T9436] delete_channel: no stack
[  925.022597][ T9436] delete_channel: no stack
[  925.024293][ T9436] delete_channel: no stack
[  925.034429][ T9436] delete_channel: no stack
[  925.071452][ T9436] delete_channel: no stack
[  925.073030][ T9436] delete_channel: no stack
[  925.074482][ T9436] delete_channel: no stack
[  925.091252][ T9436] delete_channel: no stack
[  925.092808][ T9436] delete_channel: no stack
[  925.094332][ T9436] delete_channel: no stack
[  925.096942][ T9436] delete_channel: no stack
[  925.099079][ T9436] delete_channel: no stack
[  925.100989][ T9436] delete_channel: no stack
[  925.113112][ T9436] delete_channel: no stack
[  925.124578][ T9436] delete_channel: no stack
[  925.128266][ T9436] delete_channel: no stack
[  925.130460][ T9436] delete_channel: no stack
[  925.132758][ T9436] delete_channel: no stack
[  925.143525][ T9436] delete_channel: no stack
[  925.150815][ T9436] delete_channel: no stack
[  925.153066][ T9436] delete_channel: no stack
[  925.154808][ T9436] delete_channel: no stack
[  925.158193][ T9436] delete_channel: no stack
[  925.160443][ T9436] delete_channel: no stack
[  925.162618][ T9436] delete_channel: no stack
[  925.164823][ T9436] delete_channel: no stack
[  925.167319][ T9436] delete_channel: no stack
[  925.180004][ T9436] delete_channel: no stack
[  925.182192][ T9436] delete_channel: no stack
[  925.190939][ T9436] delete_channel: no stack
[  925.193088][ T9436] delete_channel: no stack
[  925.194696][ T9436] delete_channel: no stack
[  925.198510][ T9436] delete_channel: no stack
[  925.200460][ T9436] delete_channel: no stack
[  925.202312][ T9436] delete_channel: no stack
[  925.204168][ T9436] delete_channel: no stack
[  925.206230][ T9436] delete_channel: no stack
[  925.207629][ T9436] delete_channel: no stack
[  925.209198][ T9436] delete_channel: no stack
[  925.210902][ T9436] delete_channel: no stack
[  925.212576][ T9436] delete_channel: no stack
[  925.214564][ T9436] delete_channel: no stack
[  925.217837][ T9436] delete_channel: no stack
[  925.219804][ T9436] delete_channel: no stack
[  925.221615][ T9436] delete_channel: no stack
[  925.223591][ T9436] delete_channel: no stack
[  925.226797][ T9436] delete_channel: no stack
[  925.228807][ T9436] delete_channel: no stack
[  925.231620][ T9436] delete_channel: no stack
[  925.233659][ T9436] delete_channel: no stack
[  925.237817][ T9436] delete_channel: no stack
[  925.239817][ T9436] delete_channel: no stack
[  925.241575][ T9436] delete_channel: no stack
[  925.243572][ T9436] delete_channel: no stack
[  925.257494][ T9436] delete_channel: no stack
[  925.258992][ T9436] delete_channel: no stack
[  925.260629][ T9436] delete_channel: no stack
[  925.262719][ T9436] delete_channel: no stack
[  925.266813][ T9436] delete_channel: no stack
[  926.468323][ T9491] delete_channel: no stack
[  930.788446][   T33] audit: type=1800 audit(1757560607.562:38): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10907" name=04 dev="tmpfs" ino=19271 res=0 errno=0
[  931.175477][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  931.178274][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  931.817828][ T9751] veth0_to_bridge: entered promiscuous mode
[  931.838134][ T9750] veth0_to_bridge: left promiscuous mode
[  933.734243][ T9807] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  933.737487][ T9807] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  935.109087][ T9886] ipvlan0: entered allmulticast mode
[  935.115567][ T9886] veth0_vlan: entered allmulticast mode
[  937.378364][ T9985] IPVS: set_ctl: invalid protocol: 92 172.20.20.47:20000
[  940.682884][T10164] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  941.507743][T10215] ipvlan0: left allmulticast mode
[  941.509360][T10215] veth0_vlan: left allmulticast mode
[  941.758355][   T33] audit: type=1800 audit(1757560618.532:39): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11079" name=BA920822FC6A0A5F8BC8BADFAC2E3E243B0C499819AC11EEAFB4D5BA34FC5A24BE1482FDC0A7741E142BDE15DA2A39F61EB5A18A99C0ECE974E749D48A5A7AC6E1823F2EF0E1BE1A1BA2029FF4AAB5F7E1A2BFCD342B9C940E891E5A454727F85125F75DE6CFEA6812752A745C18B0C80FBC7C8011CCC1B9E6647382454BE0B81F4CFE165621EBF6B943075E4607F98A7D193EED2A2A0C0F50DB0F880A23E37D88559E4D492779E04717583189A6C98D9187979645EA2A8B01 dev="tmpfs" ino=19601 res=0 errno=0
[  942.076152][T10243] dummy0: entered promiscuous mode
[  942.083488][T10243] dummy0: left promiscuous mode
[  942.094132][T10243] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20001
[  942.403147][T10262] dvmrp0: entered allmulticast mode
[  942.919814][T10279] dummy0: entered allmulticast mode
[  942.962980][T10280] dummy0: left allmulticast mode
[  944.918160][T10365] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20001
[  945.993644][T10421] cgroup: fork rejected by pids controller in /syz3
[  950.100071][T10679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  950.106022][T10680] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  950.719435][T10696] team_slave_0: entered promiscuous mode
[  950.725652][T10696] team_slave_1: entered promiscuous mode
[  950.786060][T10695] team_slave_0: left promiscuous mode
[  950.788362][T10695] team_slave_1: left promiscuous mode
[  952.474998][T10768] geneve0: entered promiscuous mode
[  952.530533][T10764] geneve0: left promiscuous mode
[  953.743641][T10812] IPVS: stopping backup sync thread 7899 ...
[  959.275422][T11011] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  959.298750][T11010] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  960.358519][   T33] audit: type=1804 audit(1757560637.092:40): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11322" name="/newroot/3936/bus" dev="tmpfs" ino=20066 res=1 errno=0
[  962.477586][T11168] random: crng reseeded on system resumption
[  963.574068][T11193] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  963.576760][T11193] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  963.579413][T11193] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  963.581872][T11193] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  963.585727][T11193] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  964.753768][T11230] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  964.758476][T11230] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  964.761426][T11230] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  966.018812][T11312] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  966.041799][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  966.207281][T11329] sctp: [Deprecated]: syz.5.11413 (pid 11329) Use of int in maxseg socket option.
[  966.207281][T11329] Use struct sctp_assoc_value instead
[  966.835360][T20457] Bluetooth: hci2: command 0x0c1a tx timeout
[  966.837916][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[  966.898945][T11320] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  966.901455][T11320] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  966.904345][T11320] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  968.196206][T19884] Bluetooth: hci0: command 0x0c1a tx timeout
[  968.915173][T19884] Bluetooth: hci2: command 0x0c1a tx timeout
[  968.917799][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[  969.171009][T11474] macvtap0: left allmulticast mode
[  969.173189][T11474] veth0_macvtap: left allmulticast mode
[  969.179313][T11474] dvmrp8: left allmulticast mode
[  970.995022][T20457] Bluetooth: hci2: command 0x0c1a tx timeout
[  971.044304][T11585] random: crng reseeded on system resumption
[  971.767953][   T33] audit: type=1804 audit(1757560648.542:41): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11505" name="/newroot/444/bus" dev="tmpfs" ino=2273 res=1 errno=0
[  972.532665][T11621] pim6reg9: entered allmulticast mode
[  972.590308][T11631] IPVS: ip_vs_add_dest(): server weight less than zero
[  975.438602][T11747] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  976.289560][T11781] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  976.346188][T11780] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  977.433043][T11818] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  977.786797][T11849] delete_channel: no stack
[  981.475363][T11964] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[  981.486536][T11964] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20002
[  982.237477][T11995] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  982.244243][T11995] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  983.038207][   T33] audit: type=1800 audit(1757560659.812:42): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11640" name="bus" dev="tmpfs" ino=18851 res=0 errno=0
[  983.472887][T12035] delete_channel: no stack
[  984.220185][T12057] dvmrp1: entered allmulticast mode
[  987.364632][T12161] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000
[  989.637479][T12214] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  989.653202][T12214] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  989.667012][T12214] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  990.029480][T12240] ipvlan0: entered promiscuous mode
[  990.032414][T12237] ipvlan0: left promiscuous mode
[  990.920988][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[  991.308952][T12266] binder: binder_mmap: 12263 200000000000-200000b36000 bad vm_flags failed -1
[  991.715241][T20457] Bluetooth: hci2: command 0x0c1a tx timeout
[  991.715828][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[  992.601495][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  992.604224][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  993.083393][T12306] hsr0: entered promiscuous mode
[  993.517288][T12305] hsr0: left promiscuous mode
[  995.092516][T12386] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001
[  995.544609][T12401] geneve0: entered promiscuous mode
[  995.908444][T12410] IPVS: stopping backup sync thread 31948 ...
[  996.093441][T12417] veth0_to_bridge: entered promiscuous mode
[  996.126592][T12415] veth0_to_bridge: left promiscuous mode
[  996.345214][T12399] geneve0: left promiscuous mode
[  997.521342][T12478] veth0: entered promiscuous mode
[  997.523557][T12478] veth0: left promiscuous mode
[  998.139053][T12505] team0: entered promiscuous mode
[  998.141281][T12505] team_slave_0: entered promiscuous mode
[  998.143678][T12505] team_slave_1: entered promiscuous mode
[  998.163237][T12504] team0: left promiscuous mode
[  998.167031][T12504] team_slave_0: left promiscuous mode
[  998.169678][T12504] team_slave_1: left promiscuous mode
[  998.475659][T12524] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  998.537311][T12527] sctp: [Deprecated]: syz.1.11797 (pid 12527) Use of struct sctp_assoc_value in delayed_ack socket option.
[  998.537311][T12527] Use struct sctp_sack_info instead
[  998.598576][T12527] sctp: [Deprecated]: syz.1.11797 (pid 12527) Use of struct sctp_assoc_value in delayed_ack socket option.
[  998.598576][T12527] Use struct sctp_sack_info instead
[  999.153649][T12550] dvmrp8: entered allmulticast mode
[ 1004.877938][T12665] random: crng reseeded on system resumption
[ 1005.504524][T12676] pim6reg: entered allmulticast mode
[ 1006.817379][T12726] dvmrp1: left allmulticast mode
[ 1008.491467][T12782] dvmrp0: entered allmulticast mode
[ 1009.479821][T12808] tipc: Trying to set illegal importance in message
[ 1010.597032][T12823] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1010.601733][T12823] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1010.604607][T12823] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1011.008945][T12870] macsec0: entered promiscuous mode
[ 1011.016573][T12870] macsec0: left promiscuous mode
[ 1011.963455][T19884] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1012.680779][T19884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1012.681050][T20457] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1013.603237][T13013] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 1013.651026][T13017] binder: 13016:13017 ioctl c0306201 200000000380 returned -14
[ 1017.656379][T13149] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1017.658981][T13149] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1017.662423][T13149] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1018.198967][T13183] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 1, id = 0
[ 1018.915111][T20457] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1019.715228][T20457] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1019.715384][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1020.064612][T13296] dvmrp0: left allmulticast mode
[ 1020.069491][T13296] dvmrp8: left allmulticast mode
[ 1021.250065][T13354] binder: binder_mmap: 13353 200000000000-200000b36000 bad vm_flags failed -1
[ 1023.071574][   T33] audit: type=1800 audit(1757560699.842:43): pid=13457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12094" name="bus" dev="tmpfs" ino=3264 res=0 errno=0
[ 1024.141550][T13498] binder: 13497:13498 ioctl 40046205 200000000380 returned -22
[ 1024.212607][T13502] [U] 
[ 1024.615961][T13539] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[ 1024.949991][T13564] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
[ 1025.919258][T13618] IPVS: Scheduler module ip_vs_ not found
[ 1026.174142][T13624] dummy0: entered allmulticast mode
[ 1026.570338][T13664] syz_tun: entered allmulticast mode
[ 1026.602772][T13670] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004
[ 1026.603113][T13663] syz_tun: left allmulticast mode
[ 1026.682909][T13672] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1026.688844][T13674] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20003
[ 1026.738007][T13681] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
[ 1028.175930][T13725] delete_channel: no stack
[ 1029.005893][T13744] pim6reg: entered allmulticast mode
[ 1030.077418][T13788] bond0: entered promiscuous mode
[ 1030.081609][T13788] bond_slave_0: entered promiscuous mode
[ 1030.084041][T13788] bond_slave_1: entered promiscuous mode
[ 1030.382627][T13799] IPVS: set_ctl: invalid protocol: 9 172.20.20.187:20003
[ 1030.444230][T13791] bond0: left promiscuous mode
[ 1030.448113][T13791] bond_slave_0: left promiscuous mode
[ 1030.450412][T13791] bond_slave_1: left promiscuous mode
[ 1031.695815][T13855] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004
[ 1032.900402][T13910] gre0: left promiscuous mode
[ 1032.902408][T13910] gre0: left allmulticast mode
[ 1036.904343][T14156] IPVS: set_ctl: invalid protocol: 92 172.30.1.6:20001
[ 1040.396861][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.400117][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.402641][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.428297][T14305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.431640][T14305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.434599][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.455083][T14305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.467551][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.470796][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.473752][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.505225][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.507895][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.510509][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.521352][T14305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.530058][T14305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.547042][T14305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.566472][T14305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.596842][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.626106][T14305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1040.628667][T14304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1041.299328][T14342] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001
[ 1041.417590][T14347] team_slave_0: entered promiscuous mode
[ 1041.420025][T14347] team_slave_1: entered promiscuous mode
[ 1041.423026][T14346] team_slave_0: left promiscuous mode
[ 1041.425470][T14346] team_slave_1: left promiscuous mode
[ 1042.330892][T14355] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1042.333127][T14355] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1042.336801][T14355] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1043.715190][T19884] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1044.365236][T19884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1044.367553][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1044.559004][T14459] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[ 1044.855810][T14466] batadv0: entered promiscuous mode
[ 1044.857900][T14466] batadv0: entered allmulticast mode
[ 1044.861907][T14466] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1044.869750][T14466] team_slave_0: entered promiscuous mode
[ 1044.871865][T14466] team_slave_1: entered promiscuous mode
[ 1044.877259][T14466] team0: entered promiscuous mode
[ 1044.881573][T14465] team0: left promiscuous mode
[ 1044.883608][T14465] team_slave_0: left promiscuous mode
[ 1044.887939][T14465] team_slave_1: left promiscuous mode
[ 1045.084693][T14490] dummy0: entered allmulticast mode
[ 1046.532000][T14544] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1046.541959][T14544] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1046.552756][T14544] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1048.216515][T14608] IPVS: Unknown mcast interface: pimreg
[ 1049.945541][T14672] random: crng reseeded on system resumption
[ 1050.161416][T14676] pim6reg: left allmulticast mode
[ 1050.918191][T14698] delete_channel: no stack
[ 1051.588337][T14727] hsr0: entered promiscuous mode
[ 1051.591687][T14727] hsr0: left promiscuous mode
[ 1051.947733][T14735] IPVS: set_ctl: invalid protocol: 25647 47.118.99.115:29952
[ 1053.297436][T14778] macvlan1: entered promiscuous mode
[ 1053.319741][T14775] macvlan1: left promiscuous mode
[ 1053.540375][T14786] IPVS: stopping backup sync thread 12524 ...
[ 1054.077303][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.079936][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.652802][T14812] QAT: failed to copy from user cfg_data.
[ 1056.363560][T14868] IPVS: Unknown mcast interface: 
[ 1057.348065][T14923] macvlan1: entered promiscuous mode
[ 1057.355786][T14922] macvlan1: left promiscuous mode
[ 1059.925155][T15049] batadv0: entered promiscuous mode
[ 1059.927400][T15049] batadv0: entered allmulticast mode
[ 1060.714151][T15103] random: crng reseeded on system resumption
[ 1063.546980][T15217] veth0: entered promiscuous mode
[ 1063.564180][T15216] veth0: left promiscuous mode
[ 1063.735892][T15227] dvmrp0: left allmulticast mode
[ 1063.738088][T15227] dummy0: left allmulticast mode
[ 1065.759193][T15353] QAT: Device 0 not found
[ 1066.998394][T15383] delete_channel: no stack
[ 1071.138125][T15519] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[ 1071.151505][T15519] pim6reg: entered allmulticast mode
[ 1071.175720][T15519] pim6reg: left allmulticast mode
[ 1071.242351][T15518] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[ 1071.868337][   T33] audit: type=1800 audit(1757560748.642:44): pid=15542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12776" name="bus" dev="tmpfs" ino=4585 res=0 errno=0
[ 1071.882155][   T33] audit: type=1804 audit(1757560748.642:45): pid=15542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.12776" name="/newroot/897/bus" dev="tmpfs" ino=4585 res=1 errno=0
[ 1072.204446][T15568] batadv0: entered promiscuous mode
[ 1072.208003][T15568] batadv0: entered allmulticast mode
[ 1072.211089][T15568] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1072.361738][T15575] pim6reg: entered allmulticast mode
[ 1072.364541][T15575] pim6reg: left allmulticast mode
[ 1072.527744][T15586] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1072.530619][T15586] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1072.533417][T15586] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1072.688046][T15595] veth1_to_bond: entered allmulticast mode
[ 1072.734493][T15595] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[ 1072.738490][T15595] bond_slave_1: entered promiscuous mode
[ 1072.742482][T15593] bond_slave_1: left promiscuous mode
[ 1072.744839][T15593] veth1_to_bond: left allmulticast mode
[ 1072.914629][   T33] audit: type=1804 audit(1757560749.682:46): pid=15603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12798" name="/newroot/4454/bus" dev="tmpfs" ino=22692 res=1 errno=0
[ 1073.736875][T15644] random: crng reseeded on system resumption
[ 1073.764237][T15644] random: crng reseeded on system resumption
[ 1074.010010][T15658] batadv0: left promiscuous mode
[ 1074.012082][T15658] batadv0: left allmulticast mode
[ 1074.606494][T19884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1074.606559][T20457] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1074.608990][T19884] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1074.904434][T15696] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1074.922943][T15694] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[ 1075.136016][T15711] sctp: [Deprecated]: syz.5.12834 (pid 15711) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1075.136016][T15711] Use struct sctp_sack_info instead
[ 1076.002782][T15761] batadv0: entered promiscuous mode
[ 1076.004705][T15761] batadv0: entered allmulticast mode
[ 1076.009044][T15761] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1076.599411][T15799] random: crng reseeded on system resumption
[ 1078.460449][T15866] vlan0: entered promiscuous mode
[ 1078.462909][T15865] vlan0: left promiscuous mode
[ 1078.542787][T15868] hsr0: entered allmulticast mode
[ 1078.545043][T15868] hsr_slave_0: entered allmulticast mode
[ 1078.547335][T15868] hsr_slave_1: entered allmulticast mode
[ 1080.048264][T15907] sctp: [Deprecated]: syz.3.12896 (pid 15907) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1080.048264][T15907] Use struct sctp_sack_info instead
[ 1081.720608][T15968] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002
[ 1085.106888][T16070] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20002
[ 1088.587860][T16196] IPVS: set_ctl: invalid protocol: 133 127.0.0.1:20000
[ 1088.858049][T16208] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1090.217085][T16272] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1090.221472][T16271] random: crng reseeded on system resumption
[ 1090.875243][T16304] veth0_to_bridge: entered promiscuous mode
[ 1090.904697][T16303] veth0_to_bridge: left promiscuous mode
[ 1091.132927][T16312] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1091.145795][T16312] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1092.082453][T16338] syz_tun: entered allmulticast mode
[ 1092.262737][T16348] dvmrp5: entered allmulticast mode
[ 1092.632638][T16363] delete_channel: no stack
[ 1093.414107][T16394] dvmrp1: entered allmulticast mode
[ 1093.768088][T16418] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[ 1093.783821][T16412] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[ 1094.373025][T16457] team0: entered promiscuous mode
[ 1094.375396][T16457] team_slave_0: entered promiscuous mode
[ 1094.377943][T16457] team_slave_1: entered promiscuous mode
[ 1094.478755][T16447] team0: left promiscuous mode
[ 1094.480952][T16447] team_slave_0: left promiscuous mode
[ 1094.483280][T16447] team_slave_1: left promiscuous mode
[ 1095.734165][T16511] IPVS: stopping backup sync thread 8701 ...
[ 1095.912482][T16525] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[ 1097.222749][T16581] dvmrp1: entered allmulticast mode
[ 1099.615091][T16725] binder: 16723:16725 ioctl c0306201 200000000380 returned -14
[ 1100.734641][T16775] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
[ 1101.445118][T16790] can: request_module (can-proto-3) failed.
[ 1103.328582][T16825] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1103.331546][T16825] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1103.335991][T16825] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1104.366773][ T1069] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1104.374991][ T1069] sr 2:0:0:0: [sr0] tag#6 Sense Key : Not Ready [current] 
[ 1104.377308][ T1069] sr 2:0:0:0: [sr0] tag#6 Add. Sense: Medium not present
[ 1104.385283][ T1069] sr 2:0:0:0: [sr0] tag#6 CDB: Read(10) 28 00 00 01 00 00 00 00 20 00
[ 1104.388788][ T1069] blk_print_req_error: 7 callbacks suppressed
[ 1104.388801][ T1069] I/O error, dev sr0, sector 262144 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2
[ 1104.447788][ T1069] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1104.450706][ T1069] sr 2:0:0:0: [sr0] tag#5 Sense Key : Not Ready [current] 
[ 1104.453147][ T1069] sr 2:0:0:0: [sr0] tag#5 Add. Sense: Medium not present
[ 1104.465004][ T1069] sr 2:0:0:0: [sr0] tag#5 CDB: Read(10) 28 00 00 00 ff e0 00 00 20 00
[ 1104.467568][ T1069] I/O error, dev sr0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2
[ 1104.608651][T19884] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1105.405396][T19884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1105.405451][T11338] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1107.388105][T17036] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:3654
[ 1110.688120][T17209] ip6_vti0: entered promiscuous mode
[ 1110.741427][T17208] ip6_vti0: left promiscuous mode
[ 1113.280220][T17315] pim6reg: entered allmulticast mode
[ 1113.298488][T17315] pim6reg: left allmulticast mode
[ 1114.952963][T17382] sctp: [Deprecated]: syz.5.13367 (pid 17382) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1114.952963][T17382] Use struct sctp_sack_info instead
[ 1115.477909][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.480189][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.864874][T17425] [U] 
[ 1115.958286][T17432] can: request_module (can-proto-0) failed.
[ 1115.981650][T17438] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20001
[ 1118.044336][T17499] [U] 6T<V%%
[ 1118.047035][T17499] [U] ])6:N0dGr؂U)(jϐ4HRXꪢJ`*/87͓khq]}gy-Ssyʙ$+}o1}xe`EOV
[ 1118.053898][T17499] [U] Z"uC7R>bۏ
[ 1118.088742][T17498] [U] 8cw0FֺbjBh?OE@|77Y<DmLiɅJ&Do2JXam6;6me^N3rs^VZjYp\u.F#u<@uG* Je_sFzyWddVz?ZZM=Q?G	Ag4$]P@pQ~5Kh
[ 1118.702713][T17534] IPVS: Error connecting to the multicast addr
[ 1119.690456][T17587] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[ 1119.715584][T17585] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[ 1121.732513][T17676] bridge0: entered allmulticast mode
[ 1121.734707][T17676] pim6reg: left allmulticast mode
[ 1121.747062][T17676] bridge0: left allmulticast mode
[ 1122.691928][T17681] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1122.696747][T17681] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1122.699686][T17681] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1123.955396][T11338] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1124.755289][T11338] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1124.756019][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1125.694244][T17837] delete_channel: no stack
[ 1125.973122][T17850] random: crng reseeded on system resumption
[ 1126.345146][T17841] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1126.348753][T17841] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1126.359255][T17841] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1128.447064][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1128.449560][T19884] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1128.452064][T19884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1129.353903][T17941] ip6tnl0: entered promiscuous mode
[ 1129.433903][T17940] ip6tnl0: left promiscuous mode
[ 1129.960731][T17957] pim6reg: entered allmulticast mode
[ 1130.003013][T17956] pim6reg: left allmulticast mode
[ 1130.452289][T17993] delete_channel: no stack
[ 1130.552931][T17997] delete_channel: no stack
[ 1130.556211][T17997] delete_channel: no stack
[ 1130.559835][T17997] delete_channel: no stack
[ 1130.561824][T17997] delete_channel: no stack
[ 1130.563690][T17997] delete_channel: no stack
[ 1130.587001][T17997] delete_channel: no stack
[ 1130.588978][T17997] delete_channel: no stack
[ 1130.591000][T17997] delete_channel: no stack
[ 1130.592927][T17997] delete_channel: no stack
[ 1130.594828][T17997] delete_channel: no stack
[ 1130.601649][T17997] delete_channel: no stack
[ 1130.603511][T17997] delete_channel: no stack
[ 1130.605879][T17997] delete_channel: no stack
[ 1130.607781][T17997] delete_channel: no stack
[ 1130.609757][T17997] delete_channel: no stack
[ 1130.612042][T17997] delete_channel: no stack
[ 1130.613916][T17997] delete_channel: no stack
[ 1130.618279][T17997] delete_channel: no stack
[ 1130.620217][T17997] delete_channel: no stack
[ 1130.622189][T17997] delete_channel: no stack
[ 1130.624125][T17997] delete_channel: no stack
[ 1130.626906][T17997] delete_channel: no stack
[ 1130.628901][T17997] delete_channel: no stack
[ 1130.630819][T17997] delete_channel: no stack
[ 1130.632783][T17997] delete_channel: no stack
[ 1130.634582][T17997] delete_channel: no stack
[ 1130.639181][T17997] delete_channel: no stack
[ 1130.642186][T17997] delete_channel: no stack
[ 1130.644662][T17997] delete_channel: no stack
[ 1130.649068][T17997] delete_channel: no stack
[ 1130.651032][T17997] delete_channel: no stack
[ 1130.654336][T17997] delete_channel: no stack
[ 1130.660173][T17997] delete_channel: no stack
[ 1130.662061][T17997] delete_channel: no stack
[ 1130.663910][T17997] delete_channel: no stack
[ 1130.670667][T17997] delete_channel: no stack
[ 1130.673111][T17997] delete_channel: no stack
[ 1130.677545][T17997] delete_channel: no stack
[ 1130.679557][T17997] delete_channel: no stack
[ 1130.681479][T17997] delete_channel: no stack
[ 1130.683387][T17997] delete_channel: no stack
[ 1130.696889][T17997] delete_channel: no stack
[ 1130.698954][T17997] delete_channel: no stack
[ 1130.701093][T17997] delete_channel: no stack
[ 1130.702980][T17997] delete_channel: no stack
[ 1130.705868][T17997] delete_channel: no stack
[ 1130.707948][T18006] IPVS: set_ctl: invalid protocol: 50 172.20.20.46:20004
[ 1130.708939][T17997] delete_channel: no stack
[ 1130.712277][T18006] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004
[ 1130.714404][T17997] delete_channel: no stack
[ 1130.715819][T18007] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004
[ 1130.719785][T17997] delete_channel: no stack
[ 1130.721654][T17997] delete_channel: no stack
[ 1130.723788][T17997] delete_channel: no stack
[ 1130.726076][T17997] delete_channel: no stack
[ 1130.728822][T17997] delete_channel: no stack
[ 1130.731198][T17997] delete_channel: no stack
[ 1130.733394][T18006] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001
[ 1130.733461][T17997] delete_channel: no stack
[ 1130.740637][T17997] delete_channel: no stack
[ 1130.743078][T17997] delete_channel: no stack
[ 1130.744835][T17997] delete_channel: no stack
[ 1130.748446][T17997] delete_channel: no stack
[ 1130.752150][T17997] delete_channel: no stack
[ 1130.754272][T17997] delete_channel: no stack
[ 1130.758366][T17997] delete_channel: no stack
[ 1130.759901][T17997] delete_channel: no stack
[ 1130.761784][T17997] delete_channel: no stack
[ 1131.621925][T18060] geneve1: entered promiscuous mode
[ 1132.015227][T18056] geneve1: left promiscuous mode
[ 1133.703547][T18136] sctp: [Deprecated]: syz.5.13606 (pid 18136) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1133.703547][T18136] Use struct sctp_sack_info instead
[ 1133.928146][T18144] binder: binder_mmap: 18143 200000000000-200000b36000 bad vm_flags failed -1
[ 1134.753294][T18189] bridge0: entered promiscuous mode
[ 1134.785755][T18189] bridge0: left promiscuous mode
[ 1136.747037][   T33] audit: type=1800 audit(1757560813.522:47): pid=18309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13658" name="file1" dev="tmpfs" ino=5791 res=0 errno=0
[ 1137.045684][T18321] random: crng reseeded on system resumption
[ 1138.370646][T18373] delete_channel: no stack
[ 1139.295059][T18418] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1139.774810][T18452] IPVS: stopping backup sync thread 13183 ...
[ 1140.137562][T18474] macvlan1: entered promiscuous mode
[ 1140.358692][T18475] macvlan1: left promiscuous mode
[ 1142.854740][T18574] sctp: [Deprecated]: syz.3.13744 (pid 18574) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1142.854740][T18574] Use struct sctp_sack_info instead
[ 1144.193303][T18627] random: crng reseeded on system resumption
[ 1151.115550][T18904] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1151.128976][T18904] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1151.133791][T18904] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1151.251447][T18907] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1151.808891][T18906] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 1152.988517][T18963] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20001
[ 1153.165223][T11338] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1153.166776][T19884] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1153.167844][T11338] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1153.489107][T18992] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[ 1153.909132][   T33] audit: type=1800 audit(1757560830.682:48): pid=19015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13890" name="bus" dev="tmpfs" ino=6121 res=0 errno=0
[ 1154.592256][T19037] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1154.638281][T19038] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1155.306674][T19072] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1156.475980][T19119] random: crng reseeded on system resumption
[ 1156.902121][T19128] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20003
[ 1159.368570][T19207] [U] 6T<V%%
[ 1159.370379][T19207] [U] ])6:N0dGr؂U)(jϐ4HRXꪢJ`*/87͓khq]}gy-Ssyʙ$+}o1}xe`EOV
[ 1159.379621][T19207] [U] Z"uC7R>bۏ
[ 1159.400610][T19207] [U] 8cw0FֺbjBh?OE@|77Y<DmLiɅJ&Do2JXam6;6me^N3rs^VZjYp\u.F#u<@uG* Je_sFzyWddVz?ZZM=Q?G	Ag4$]P@pQ~5Kh
[ 1159.632989][T19226] pim6reg: entered allmulticast mode
[ 1159.643695][T19226] pim6reg: left allmulticast mode
[ 1159.936314][T19235] veth1_to_bond: entered allmulticast mode
[ 1159.939280][T19235] bond_slave_1: entered promiscuous mode
[ 1159.987908][T19210] bond_slave_1: left promiscuous mode
[ 1159.990037][T19210] veth1_to_bond: left allmulticast mode
[ 1161.371863][T19297] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20003
[ 1166.889498][T19418] delete_channel: no stack
[ 1167.042385][T19417] delete_channel: no stack
[ 1170.030933][T19453] macvlan1: entered promiscuous mode
[ 1170.034031][T19452] macvlan1: left promiscuous mode
[ 1170.968639][T19474] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1172.122981][T19492] delete_channel: no stack
[ 1176.430561][T19679] veth1_macvtap: left promiscuous mode
[ 1176.747097][T19699] delete_channel: no stack
[ 1176.920866][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.923400][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.271621][T19754] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 4, id = 0
[ 1185.211591][T20049] veth0: entered promiscuous mode
[ 1185.230177][T20048] veth0: left promiscuous mode
[ 1185.446987][T20059] veth0: entered promiscuous mode
[ 1185.534746][T20046] veth0: left promiscuous mode
[ 1185.618850][T20069] dvmrp0: entered allmulticast mode
[ 1186.335421][T20100] veth0: entered promiscuous mode
[ 1186.356940][T20099] veth0: left promiscuous mode
[ 1189.756290][T20330] team0: entered promiscuous mode
[ 1189.758428][T20330] team_slave_0: entered promiscuous mode
[ 1189.760953][T20330] team_slave_1: entered promiscuous mode
[ 1189.802995][T20329] team0: left promiscuous mode
[ 1189.806565][T20329] team_slave_0: left promiscuous mode
[ 1189.808956][T20329] team_slave_1: left promiscuous mode
[ 1191.676455][T20422] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001
[ 1192.262352][T20461] delete_channel: no stack
[ 1193.520404][T20519] geneve0: entered promiscuous mode
[ 1193.547992][T20518] geneve0: left promiscuous mode
[ 1195.670545][T20626] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 1197.425498][T25553] delete_channel: no stack
[ 1197.592805][T20687] syz_tun: left allmulticast mode
[ 1197.595189][T20687] dvmrp1: left allmulticast mode
[ 1198.523195][T20730] hsr0: left allmulticast mode
[ 1198.532618][T20730] hsr_slave_0: left allmulticast mode
[ 1198.541124][T20730] hsr_slave_1: left allmulticast mode
[ 1198.553835][T20730] dvmrp1: left allmulticast mode
[ 1198.556222][T20730] dvmrp5: left allmulticast mode
[ 1198.784833][T20744] hsr0: entered allmulticast mode
[ 1198.790109][T20744] hsr_slave_0: entered allmulticast mode
[ 1198.792574][T20744] hsr_slave_1: entered allmulticast mode
[ 1198.932701][T20750] ipvlan0: entered allmulticast mode
[ 1198.939268][T20750] veth0_vlan: entered allmulticast mode
[ 1200.860015][T20833] dvmrp0: left allmulticast mode
[ 1200.862175][T20833] dummy0: left allmulticast mode
[ 1201.852099][T20862] vlan0: entered allmulticast mode
[ 1201.875415][T20861] vlan0: left allmulticast mode
[ 1202.569080][T20887] delete_channel: no stack
[ 1203.554316][   T33] audit: type=1800 audit(1757560880.322:49): pid=20923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14516" name="bus" dev="tmpfs" ino=23654 res=0 errno=0
[ 1203.572941][   T33] audit: type=1804 audit(1757560880.322:50): pid=20923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.14516" name="/newroot/4644/bus" dev="tmpfs" ino=23654 res=1 errno=0
[ 1204.367857][T20954] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1205.005888][ T8502] ------------[ cut here ]------------
[ 1205.008438][ T8502] WARNING: io_uring/io_uring.c:3047 at io_ring_exit_work+0x4ed/0x930, CPU#0: kworker/u9:57/8502
[ 1205.012653][ T8502] Modules linked in:
[ 1205.014771][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: kworker/u9:57 Not tainted syzkaller #0 PREEMPT(full) 
[ 1205.020056][ T8502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1205.024212][ T8502] Workqueue: iou_exit io_ring_exit_work
[ 1205.026664][ T8502] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1205.029021][ T8502] Code: c6 05 4a 31 82 0e 01 48 c7 c7 60 62 02 8c be 24 00 00 00 48 c7 c2 00 62 02 8c e8 be 17 72 00 e9 7b fe ff ff e8 94 4b 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1205.036740][ T8502] RSP: 0018:ffffc9000767f8c0 EFLAGS: 00010293
[ 1205.039264][ T8502] RAX: ffffffff812b71ac RBX: 00000001000160f9 RCX: ffff88802329ba00
[ 1205.042614][ T8502] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[ 1205.046262][ T8502] RBP: ffffc9000767fa50 R08: ffffc9000767f847 R09: 1ffff92000ecff08
[ 1205.049647][ T8502] R10: dffffc0000000000 R11: fffff52000ecff09 R12: 00000001000160f8
[ 1205.052882][ T8502] R13: ffff888033e6e310 R14: ffff888033e6e480 R15: dffffc0000000000
[ 1205.056067][ T8502] FS:  0000000000000000(0000) GS:ffff8880b83f0000(0000) knlGS:0000000000000000
[ 1205.059667][ T8502] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1205.062361][ T8502] CR2: 00007f3489fd7dac CR3: 0000000134f90000 CR4: 00000000000006f0
[ 1205.065914][ T8502] Call Trace:
[ 1205.067352][ T8502]  <TASK>
[ 1205.068600][ T8502]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1205.070826][ T8502]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1205.072894][ T8502]  ? process_scheduled_works+0x9ef/0x17b0
[ 1205.075422][ T8502]  ? process_scheduled_works+0x9ef/0x17b0
[ 1205.077752][ T8502]  process_scheduled_works+0xae1/0x17b0
[ 1205.080016][ T8502]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1205.082650][ T8502]  worker_thread+0x8a0/0xda0
[ 1205.084424][ T8502]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1205.087322][ T8502]  ? __kthread_parkme+0x7b/0x200
[ 1205.089952][ T8502]  kthread+0x711/0x8a0
[ 1205.092115][ T8502]  ? __pfx_worker_thread+0x10/0x10
[ 1205.094380][ T8502]  ? __pfx_kthread+0x10/0x10
[ 1205.096401][ T8502]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1205.098571][ T8502]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1205.100602][ T8502]  ? __pfx_kthread+0x10/0x10
[ 1205.102521][ T8502]  ret_from_fork+0x47f/0x820
[ 1205.104410][ T8502]  ? __pfx_ret_from_fork+0x10/0x10
[ 1205.106647][ T8502]  ? __switch_to_asm+0x39/0x70
[ 1205.108643][ T8502]  ? __switch_to_asm+0x33/0x70
[ 1205.110704][ T8502]  ? __pfx_kthread+0x10/0x10
[ 1205.112684][ T8502]  ret_from_fork_asm+0x1a/0x30
[ 1205.114717][ T8502]  </TASK>
[ 1205.116133][ T8502] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1205.119114][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: kworker/u9:57 Not tainted syzkaller #0 PREEMPT(full) 
[ 1205.122910][ T8502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1205.127002][ T8502] Workqueue: iou_exit io_ring_exit_work
[ 1205.129251][ T8502] Call Trace:
[ 1205.130610][ T8502]  <TASK>
[ 1205.131825][ T8502]  dump_stack_lvl+0x99/0x250
[ 1205.133717][ T8502]  ? __asan_memcpy+0x40/0x70
[ 1205.135706][ T8502]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1205.137893][ T8502]  ? __pfx__printk+0x10/0x10
[ 1205.139876][ T8502]  vpanic+0x237/0x6d0
[ 1205.141595][ T8502]  ? __pfx_vpanic+0x10/0x10
[ 1205.143469][ T8502]  ? is_bpf_text_address+0x292/0x2b0
[ 1205.145614][ T8502]  ? is_bpf_text_address+0x26/0x2b0
[ 1205.147756][ T8502]  panic+0xb9/0xc0
[ 1205.149318][ T8502]  ? __pfx_panic+0x10/0x10
[ 1205.151166][ T8502]  ? ret_from_fork_asm+0x1a/0x30
[ 1205.153165][ T8502]  __warn+0x334/0x4c0
[ 1205.155169][ T8502]  ? io_ring_exit_work+0x4ed/0x930
[ 1205.157247][ T8502]  ? io_ring_exit_work+0x4ed/0x930
[ 1205.159403][ T8502]  report_bug+0x2be/0x4f0
[ 1205.161229][ T8502]  ? io_ring_exit_work+0x4ed/0x930
[ 1205.163238][ T8502]  ? io_ring_exit_work+0x4ed/0x930
[ 1205.165264][ T8502]  ? io_ring_exit_work+0x4ef/0x930
[ 1205.167345][ T8502]  handle_bug+0x84/0x160
[ 1205.169083][ T8502]  exc_invalid_op+0x1a/0x50
[ 1205.170924][ T8502]  asm_exc_invalid_op+0x1a/0x20
[ 1205.173242][ T8502] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1205.175594][ T8502] Code: c6 05 4a 31 82 0e 01 48 c7 c7 60 62 02 8c be 24 00 00 00 48 c7 c2 00 62 02 8c e8 be 17 72 00 e9 7b fe ff ff e8 94 4b 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1205.184776][ T8502] RSP: 0018:ffffc9000767f8c0 EFLAGS: 00010293
[ 1205.187225][ T8502] RAX: ffffffff812b71ac RBX: 00000001000160f9 RCX: ffff88802329ba00
[ 1205.190443][ T8502] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[ 1205.193690][ T8502] RBP: ffffc9000767fa50 R08: ffffc9000767f847 R09: 1ffff92000ecff08
[ 1205.196956][ T8502] R10: dffffc0000000000 R11: fffff52000ecff09 R12: 00000001000160f8
[ 1205.200144][ T8502] R13: ffff888033e6e310 R14: ffff888033e6e480 R15: dffffc0000000000
[ 1205.203356][ T8502]  ? io_ring_exit_work+0x4ec/0x930
[ 1205.205465][ T8502]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1205.207920][ T8502]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1205.210883][ T8502]  ? process_scheduled_works+0x9ef/0x17b0
[ 1205.213346][ T8502]  ? process_scheduled_works+0x9ef/0x17b0
[ 1205.215658][ T8502]  process_scheduled_works+0xae1/0x17b0
[ 1205.218018][ T8502]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1205.221418][ T8502]  worker_thread+0x8a0/0xda0
[ 1205.223406][ T8502]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1205.226053][ T8502]  ? __kthread_parkme+0x7b/0x200
[ 1205.228129][ T8502]  kthread+0x711/0x8a0
[ 1205.229790][ T8502]  ? __pfx_worker_thread+0x10/0x10
[ 1205.231879][ T8502]  ? __pfx_kthread+0x10/0x10
[ 1205.233795][ T8502]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1205.235900][ T8502]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1205.238076][ T8502]  ? __pfx_kthread+0x10/0x10
[ 1205.239948][ T8502]  ret_from_fork+0x47f/0x820
[ 1205.241855][ T8502]  ? __pfx_ret_from_fork+0x10/0x10
[ 1205.244040][ T8502]  ? __switch_to_asm+0x39/0x70
[ 1205.246104][ T8502]  ? __switch_to_asm+0x33/0x70
[ 1205.248149][ T8502]  ? __pfx_kthread+0x10/0x10
[ 1205.250046][ T8502]  ret_from_fork_asm+0x1a/0x30
[ 1205.252019][ T8502]  </TASK>
[ 1205.254019][ T8502] Kernel Offset: disabled
[ 1205.255725][ T8502] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:21:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000767f070
R8 =ffff888107ec0237 R9 =1ffff11020fd8046 R10=dffffc0000000000 R11=ffffffff85531a70
R12=dffffc0000000000 R13=ffffffff99d25930 R14=ffffffff9a038060 R15=0000000000000000
RIP=ffffffff85531aec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83f0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3489fd7dac CR3=0000000134f90000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=b9f6eb215616fe4c 1fb8e04b45827364 XMM09=0000000000000000 00007f7fb6012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4492b RBX=1ffff11009608355 RCX=ffff8881062bd700 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000771f700 RSP=ffffc9000771f578
R8 =ffffffff8fc3ce37 R9 =1ffffffff1f879c6 R10=dffffc0000000000 R11=fffffbfff1f879c7
R12=ffff88804b041aa8 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81bfbd48 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39f0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34523ffc CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3489fa7498 00007f3489fa7470 XMM03=00007f3489fa74a8 00007f3489fa74a0
XMM04=00007f348ab0d100 00007f3489fa7460 XMM05=00007f3489fa7478 00007f3489fa74c0
XMM06=00007f3489fa74b8 00007f3489fa74b0 XMM07=00007f3489fa74a8 00007f3489fa74a0
XMM08=0000000000000000 00007f3489e12ee7 XMM09=0000000000000000 00007f3489e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
