last executing test programs:

3m9.177765378s ago: executing program 0 (id=47):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
dup(r0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)
landlock_create_ruleset(0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16)
r5 = dup(r3)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d0d, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')

3m8.64654801s ago: executing program 0 (id=51):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
socket$inet6_sctp(0xa, 0x801, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
getpriority(0x0, r0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f})
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0xb5, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x0, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xdec1, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x8, 0x101, 0x80, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x8, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x8, 0x8, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xed6, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x75, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x4, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x20000080, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1e17]})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)

3m3.861290289s ago: executing program 0 (id=59):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r5 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x4}}, 0xe4)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000200009, 0x0)

2m59.093949043s ago: executing program 4 (id=63):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r5 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x4}}, 0xe4)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000200009, 0x0)

2m58.767556071s ago: executing program 0 (id=65):
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
open$dir(0x0, 0x8400, 0x2)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x282a40, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1b)
close(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m56.222914616s ago: executing program 0 (id=67):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
pread64(r5, &(0x7f0000002240)=""/236, 0xec, 0x4eb)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0xc, [[0x9ef8, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x1], [0x10000, 0x1, 0x0, 0xfffffffe, 0x8001], [0x20000006, 0xba6, 0x100001, 0x0, 0x0, 0x0, 0x100000, 0xffffffff]], '\x00', [{0x0, 0xdc8}, {0xfffffffd}, {0x7, 0x100}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000002, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xa}, {0x8000004, 0x8f96, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x65}], '\x00', 0x1002})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x0)
r7 = fanotify_init(0x1a, 0x1)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r7, 0x1, 0x1023, r8, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r9, 0x0, 0x0)
setsockopt$sock_int(r9, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

2m56.184692907s ago: executing program 4 (id=68):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300))
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x28)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='\x00', 0x1}, {0x0}], 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x68e, 0x20002)
write(r0, &(0x7f0000000340)="04f4cc5a525043e2129d7a492d6819bcb0f8ac5dbcc8f4d05322fac2150e188e87076c1a3bf918835f13626bb0ec5fceb0b9a991d25d6067589dfcb55aac90472aee8cab85000da43397c00f45b09195e5ff79287524d6", 0x57)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r4, 0xc0106440, &(0x7f0000000180)={0x2, 0x6, &(0x7f0000000140)})
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a9b2f200af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b6f0be129305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f141f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0b231d6f040dc19283b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80425d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203715ba49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a3289d24825642891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568009d4afb96d6861aca73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb57412500005488efeee327415cc19451432c6f14c27693100c3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603f56935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb06afa88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee80000000000f9ffffff00", 0x1000}}, 0x1006)
r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
preadv(r6, 0x0, 0x0, 0x5, 0x6)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r7 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

2m54.071828337s ago: executing program 0 (id=69):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"})
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdb, 0x0, 0x100000000})
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r8)
fallocate(r6, 0x71, 0x80000001, 0xcfc9)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)

2m52.96887908s ago: executing program 4 (id=73):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
dup(r0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)
landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16)
r5 = dup(r3)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d0d, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')

2m51.032005809s ago: executing program 4 (id=74):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r5 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x4}}, 0xe4)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000200009, 0x0)

2m49.526008125s ago: executing program 4 (id=76):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
pread64(r5, &(0x7f0000002240)=""/236, 0xec, 0x4eb)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0xc, [[0x9ef8, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x1], [0x10000, 0x1, 0x0, 0xfffffffe, 0x8001], [0x20000006, 0xba6, 0x100001, 0x0, 0x0, 0x0, 0x100000, 0xffffffff]], '\x00', [{0x0, 0xdc8}, {0xfffffffd}, {0x7, 0x100}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000002, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xa}, {0x8000004, 0x8f96, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x65}], '\x00', 0x1002})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
r7 = fanotify_init(0x1a, 0x1)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r7, 0x1, 0x1023, r8, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r9, 0x0, 0x0)
setsockopt$sock_int(r9, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

2m45.68400366s ago: executing program 4 (id=79):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080))
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

2m37.982512967s ago: executing program 32 (id=69):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17})
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"})
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdb, 0x0, 0x100000000})
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r8)
fallocate(r6, 0x71, 0x80000001, 0xcfc9)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)

2m29.961748317s ago: executing program 33 (id=79):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080))
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

15.271727435s ago: executing program 2 (id=241):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, 0x0, 0x0, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r5 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x4}}, 0xe4)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000200009, 0x0)

11.39283085s ago: executing program 2 (id=243):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200), 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./fi', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='loop\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r6, &(0x7f00000009c0), 0x100)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r7, &(0x7f0000000a80), 0x100)

9.559253282s ago: executing program 1 (id=245):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17})
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"})
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdb, 0x0, 0x100000000})
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7)
fallocate(r5, 0x71, 0x80000001, 0xcfc9)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)

8.325347518s ago: executing program 3 (id=246):
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000180)={0x2, 0x6, &(0x7f0000000140)})
r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
preadv(r1, 0x0, 0x0, 0x5, 0x6)
landlock_restrict_self(0xffffffffffffffff, 0xc)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

8.161105668s ago: executing program 3 (id=247):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200), 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./file', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='loop\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r6, &(0x7f00000009c0), 0x100)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r7, &(0x7f0000000a80), 0x100)

7.418610942s ago: executing program 2 (id=248):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./file0\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='loop\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r6, &(0x7f00000009c0), 0x100)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r7, &(0x7f0000000a80), 0x100)

7.122436536s ago: executing program 1 (id=249):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
socket$inet6_sctp(0xa, 0x801, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
getpriority(0x0, r0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0xb5, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x0, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xdec1, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x8, 0x101, 0x80, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x8, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x8, 0x8, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xed6, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x75, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x4, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x20000080, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1e17]})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)

7.100651883s ago: executing program 3 (id=250):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r5 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x4}}, 0xe4)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000200009, 0x0)

5.756995738s ago: executing program 2 (id=251):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r5 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x4}}, 0xe4)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000200009, 0x0)

5.643400859s ago: executing program 1 (id=252):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080))
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

3.182028489s ago: executing program 3 (id=253):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080))
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

3.10614324s ago: executing program 1 (id=254):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200), 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./file0\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='loop\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r6, &(0x7f00000009c0), 0x100)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r7, &(0x7f0000000a80), 0x100)

2.874632803s ago: executing program 2 (id=255):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./fi', 0x4)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='loop\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r6, &(0x7f00000009c0), 0x100)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r7, &(0x7f0000000a80), 0x100)

1.701552101s ago: executing program 3 (id=256):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./file0\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='loop\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r6, &(0x7f00000009c0), 0x100)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r7, &(0x7f0000000a80), 0x100)

1.4050967s ago: executing program 1 (id=257):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
socket$inet6_sctp(0xa, 0x801, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
getpriority(0x0, r0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f})
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, 0x0})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)

1.177748002s ago: executing program 2 (id=258):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='./file0\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='loop\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r6, &(0x7f00000009c0), 0x100)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0)
read(r7, &(0x7f0000000a80), 0x100)

84.964765ms ago: executing program 1 (id=259):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
dup(r0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)
landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16)
r5 = dup(r3)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d0d, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')

0s ago: executing program 3 (id=260):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
socket$inet6_sctp(0xa, 0x801, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
getpriority(0x0, r0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f})
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0xb5, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x0, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xdec1, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x8, 0x101, 0x80, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x8, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x8, 0x8, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xed6, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x75, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x4, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x20000080, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1e17]})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)

kernel console output (not intermixed with test programs):

4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  110.699934][ T6026] lowmem_reserve[]: 0 0 0 0 0
[  110.699976][ T6026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  110.700101][ T6026] Node 0 DMA32: 1377*4kB (UM) 706*8kB (UME) 159*16kB (UME) 138*32kB (UM) 138*64kB (UME) 105*128kB (UME) 75*256kB (UME) 26*512kB (UM) 22*1024kB (UM) 11*2048kB (ME) 287*4096kB (M) = 1293508kB
[  110.700279][ T6026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  110.700592][ T6026] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938632kB
[  110.700816][ T6026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  110.700831][ T6026] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  110.700859][ T6026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  110.700889][ T6026] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  110.700903][ T6026] 63928 total pagecache pages
[  110.700911][ T6026] 0 pages in swap cache
[  110.700918][ T6026] Free swap  = 124996kB
[  110.700926][ T6026] Total swap = 124996kB
[  110.700935][ T6026] 2097051 pages RAM
[  110.700942][ T6026] 0 pages HighMem/MovableOnly
[  110.700949][ T6026] 428748 pages reserved
[  110.700957][ T6026] 0 pages cma reserved
[  114.875579][ T6054] netlink: 'syz.2.35': attribute type 11 has an invalid length.
[  114.875659][ T6054] netlink: 220 bytes leftover after parsing attributes in process `syz.2.35'.
[  118.347624][ T6099] overlayfs: failed to resolve './file1': -2
[  118.377992][ T6099] netlink: 'syz.4.41': attribute type 11 has an invalid length.
[  118.378150][ T6099] netlink: 220 bytes leftover after parsing attributes in process `syz.4.41'.
[  119.641414][ T6102] overlayfs: conflicting options: nfs_export=on,index=off
[  119.706716][ T6107] nvmet: disable ns before setting buffered_io value.
[  119.727763][ T6108] netlink: 'syz.3.38': attribute type 11 has an invalid length.
[  119.727791][ T6108] netlink: 220 bytes leftover after parsing attributes in process `syz.3.38'.
[  119.763437][ T6111] overlayfs: missing 'lowerdir'
[  119.794717][ T6104] overlayfs: conflicting options: nfs_export=on,index=off
[  119.821504][ T6113] netlink: 'syz.2.42': attribute type 11 has an invalid length.
[  119.821551][ T6113] netlink: 220 bytes leftover after parsing attributes in process `syz.2.42'.
[  119.866172][ T6109] Zero length message leads to an empty skb
[  119.897667][ T6107] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  120.025752][ T6114] nvmet: disable ns before setting buffered_io value.
[  120.227730][ T6114] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  120.812897][  T137] nvmet: Created nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  120.830884][ T6107] nvme nvme7: creating 2 I/O queues.
[  120.847002][ T6107] nvme nvme7: new ctrl: "testsubsys"
[  121.135809][   T83] nvmet: Created nvm controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  121.162982][ T6114] nvme nvme8: creating 2 I/O queues.
[  121.171261][ T6114] nvme nvme8: new ctrl: "testsubsys"
[  121.319362][ T6130] nvmet: disable ns before setting buffered_io value.
[  121.319456][ T6131] nvmet: disable ns before setting buffered_io value.
[  121.383924][ T6131] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  121.398312][ T6130] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  121.552987][  T137] IPVS: starting estimator thread 0...
[  121.648839][ T6140] IPVS: using max 26 ests per chain, 62400 per kthread
[  121.664282][   T83] nvmet: Created nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  121.682289][ T6131] nvme nvme9: creating 2 I/O queues.
[  121.694122][ T6131] nvme nvme9: new ctrl: "testsubsys"
[  121.878471][ T1038] nvmet: Created nvm controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  121.926463][ T6130] nvme nvme10: creating 2 I/O queues.
[  121.950774][ T6130] nvme nvme10: new ctrl: "testsubsys"
[  122.114114][ T6146] syz.4.52: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  122.114275][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.4.52 Not tainted syzkaller #0 PREEMPT(full) 
[  122.114297][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  122.114307][ T6146] Call Trace:
[  122.114313][ T6146]  <TASK>
[  122.114320][ T6146]  dump_stack_lvl+0xe8/0x150
[  122.114355][ T6146]  warn_alloc+0x24d/0x270
[  122.114385][ T6146]  ? __pfx_warn_alloc+0x10/0x10
[  122.114417][ T6146]  ? __mutex_trylock_common+0x15f/0x270
[  122.114441][ T6146]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  122.114464][ T6146]  __vmalloc_node_range_noprof+0x127/0x1540
[  122.114488][ T6146]  ? rcu_is_watching+0x16/0xb0
[  122.114513][ T6146]  ? trace_contention_end+0x3d/0x140
[  122.114535][ T6146]  ? __mutex_lock+0x30b/0x1550
[  122.114563][ T6146]  ? tomoyo_path_number_perm+0x219/0x5f0
[  122.114589][ T6146]  ? tomoyo_path_number_perm+0x219/0x5f0
[  122.114612][ T6146]  ? dvb_dvr_do_ioctl+0x76/0x220
[  122.114637][ T6146]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  122.114667][ T6146]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  122.114707][ T6146]  vmalloc_noprof+0xb2/0xe0
[  122.114741][ T6146]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  122.114764][ T6146]  dvb_dvr_do_ioctl+0x12b/0x220
[  122.114790][ T6146]  dvb_usercopy+0x199/0x2e0
[  122.114809][ T6146]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  122.114830][ T6146]  ? __pfx_dvb_usercopy+0x10/0x10
[  122.114856][ T6146]  ? __fget_files+0x3a2/0x420
[  122.114877][ T6146]  ? __fget_files+0x2a/0x420
[  122.114900][ T6146]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  122.114921][ T6146]  dvb_dvr_ioctl+0x29/0x40
[  122.114943][ T6146]  __se_sys_ioctl+0xfc/0x170
[  122.114961][ T6146]  do_syscall_64+0x166/0x520
[  122.114982][ T6146]  ? trace_irq_disable+0x3b/0x140
[  122.114998][ T6146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.115016][ T6146]  ? clear_bhb_loop+0x70/0xc0
[  122.115035][ T6146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.115051][ T6146] RIP: 0033:0x7f262ad9e0d9
[  122.115070][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.115083][ T6146] RSP: 002b:00007f262bbfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.115099][ T6146] RAX: ffffffffffffffda RBX: 00007f262b025fa0 RCX: 00007f262ad9e0d9
[  122.115110][ T6146] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  122.115120][ T6146] RBP: 00007f262ae35024 R08: 0000000000000000 R09: 0000000000000000
[  122.115130][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.115139][ T6146] R13: 00007f262b026038 R14: 00007f262b025fa0 R15: 00007ffe68694238
[  122.115163][ T6146]  </TASK>
[  122.115186][ T6146] Mem-Info:
[  122.115196][ T6146] active_anon:10232 inactive_anon:0 isolated_anon:0
[  122.115196][ T6146]  active_file:0 inactive_file:54690 isolated_file:0
[  122.115196][ T6146]  unevictable:0 dirty:172 writeback:0
[  122.115196][ T6146]  slab_reclaimable:10119 slab_unreclaimable:94217
[  122.115196][ T6146]  mapped:33926 shmem:4991 pagetables:1180
[  122.115196][ T6146]  sec_pagetables:0 bounce:0
[  122.115196][ T6146]  kernel_misc_reclaimable:0
[  122.115196][ T6146]  free:1322322 free_pcp:6543 free_cma:0
[  122.115250][ T6146] Node 0 active_anon:40928kB inactive_anon:0kB active_file:0kB inactive_file:218560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135704kB dirty:684kB writeback:0kB shmem:19964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12496kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  122.115292][ T6146] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  122.115332][ T6146] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  122.115378][ T6146] lowmem_reserve[]: 0 2487 2487 2487 2487
[  122.115421][ T6146] Node 0 DMA32 free:1335296kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40928kB inactive_anon:0kB active_file:0kB inactive_file:218560kB unevictable:0kB writepending:684kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:26172kB local_pcp:11880kB free_cma:0kB
[  122.115469][ T6146] lowmem_reserve[]: 0 0 0 0 0
[  122.115527][ T6146] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  122.115568][ T6146] lowmem_reserve[]: 0 0 0 0 0
[  122.115607][ T6146] Node 1 Normal free:3938632kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  122.115650][ T6146] lowmem_reserve[]: 0 0 0 0 0
[  122.115689][ T6146] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  122.115806][ T6146] Node 0 DMA32: 2068*4kB (UM) 1070*8kB (UME) 408*16kB (UM) 318*32kB (UME) 264*64kB (UME) 168*128kB (UME) 97*256kB (ME) 33*512kB (M) 23*1024kB (M) 15*2048kB (UME) 285*4096kB (M) = 1335296kB
[  122.116001][ T6146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  122.116112][ T6146] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938632kB
[  122.116291][ T6146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  122.116305][ T6146] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  122.116320][ T6146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  122.116334][ T6146] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  122.116348][ T6146] 59677 total pagecache pages
[  122.116356][ T6146] 0 pages in swap cache
[  122.116364][ T6146] Free swap  = 124996kB
[  122.116372][ T6146] Total swap = 124996kB
[  122.116380][ T6146] 2097051 pages RAM
[  122.116387][ T6146] 0 pages HighMem/MovableOnly
[  122.116395][ T6146] 428748 pages reserved
[  122.116403][ T6146] 0 pages cma reserved
[  126.163278][ T6163] nvmet: disable ns before setting buffered_io value.
[  126.195280][ T6163] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  126.426939][ T5850] nvmet: Created nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  126.457237][ T6163] nvme nvme11: creating 2 I/O queues.
[  126.864478][ T6163] nvme nvme11: new ctrl: "testsubsys"
[  127.055913][ T6185] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  127.661686][ T6188] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  129.538276][ T5858] nvmet: Created nvm controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  129.669807][ T6185] nvme nvme12: creating 2 I/O queues.
[  129.694208][ T6185] nvme nvme12: new ctrl: "testsubsys"
[  132.934637][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  132.934781][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  133.948816][ T6236] netlink: 'syz.3.66': attribute type 11 has an invalid length.
[  133.949730][ T6236] netlink: 220 bytes leftover after parsing attributes in process `syz.3.66'.
[  134.553002][ T6235] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  136.325727][ T5855] nvmet: Created nvm controller 14 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  136.355782][ T6235] nvme nvme13: creating 2 I/O queues.
[  136.367866][ T6235] nvme nvme13: new ctrl: "testsubsys"
[  136.783723][ T5848] IPVS: starting estimator thread 0...
[  136.879219][ T6253] IPVS: using max 25 ests per chain, 60000 per kthread
[  143.818754][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  144.542409][ T6293] overlayfs: missing 'lowerdir'
[  144.596042][ T6294] netlink: 'syz.1.77': attribute type 11 has an invalid length.
[  144.596144][ T6294] netlink: 220 bytes leftover after parsing attributes in process `syz.1.77'.
[  145.316803][ T6298] Invalid ELF header magic: != ELF
[  146.378717][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  146.570520][ T6303] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  147.198726][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  147.743667][ T6308] overlayfs: missing 'lowerdir'
[  147.809857][ T6309] netlink: 'syz.2.81': attribute type 11 has an invalid length.
[  147.809986][ T6309] netlink: 220 bytes leftover after parsing attributes in process `syz.2.81'.
[  149.658041][ T6322] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  155.348635][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  155.357417][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  155.369093][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  155.377547][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  155.389402][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  157.087040][ T6356] Invalid ELF header magic: != ELF
[  157.708638][ T5622] Bluetooth: hci5: command tx timeout
[  157.930242][ T6351] overlayfs: conflicting options: nfs_export=on,index=off
[  159.985166][ T5622] Bluetooth: hci5: command tx timeout
[  160.345842][ T6372] overlayfs: missing 'lowerdir'
[  160.406373][ T6374] netlink: 'syz.4.79': attribute type 11 has an invalid length.
[  160.406486][ T6374] netlink: 220 bytes leftover after parsing attributes in process `syz.4.79'.
[  162.400582][ T5622] Bluetooth: hci5: command tx timeout
[  163.354562][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  163.364801][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  163.374990][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  163.386292][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  163.389267][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  163.437232][ T6386] nvmet: disable ns before setting buffered_io value.
[  163.460657][ T6386] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  163.519636][ T5850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.625547][ T6392] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  163.705195][ T5850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.716787][ T1007] nvmet: Created nvm controller 15 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  163.738639][ T6386] nvme nvme14: creating 2 I/O queues.
[  163.750257][ T6386] nvme nvme14: new ctrl: "testsubsys"
[  163.945937][ T1007] nvmet: Created nvm controller 16 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  163.963750][ T5850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.986380][ T6392] nvme nvme15: creating 2 I/O queues.
[  163.997461][ T6392] nvme nvme15: new ctrl: "testsubsys"
[  164.128249][ T5850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.271576][ T6406] nvmet: disable ns before setting buffered_io value.
[  164.459852][ T5624] Bluetooth: hci5: command tx timeout
[  164.472219][ T6406] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  164.678142][ T6417] overlayfs: missing 'lowerdir'
[  165.433560][ T5624] Bluetooth: hci0: command tx timeout
[  166.033050][   T83] nvmet: Created nvm controller 17 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  166.068656][ T6406] nvme nvme16: creating 2 I/O queues.
[  166.155574][ T6406] nvme nvme16: new ctrl: "testsubsys"
[  166.328291][ T6433] nvmet: disable ns before setting buffered_io value.
[  166.392900][ T6433] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  166.415541][ T5850] bridge_slave_1: left allmulticast mode
[  166.415610][ T5850] bridge_slave_1: left promiscuous mode
[  166.420857][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.485202][ T5850] bridge_slave_0: left allmulticast mode
[  166.499024][ T5850] bridge_slave_0: left promiscuous mode
[  166.505860][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.906959][ T5624] Bluetooth: hci0: command tx timeout
[  168.070498][   T13] nvmet: Created nvm controller 18 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  168.109768][ T6433] nvme nvme17: creating 2 I/O queues.
[  168.126598][ T6433] nvme nvme17: new ctrl: "testsubsys"
[  168.797058][ T6461] syz.2.105: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  168.798625][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) 
[  168.798699][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.798731][ T6461] Call Trace:
[  168.798752][ T6461]  <TASK>
[  168.798774][ T6461]  dump_stack_lvl+0xe8/0x150
[  168.798868][ T6461]  warn_alloc+0x24d/0x270
[  168.798972][ T6461]  ? __pfx_warn_alloc+0x10/0x10
[  168.799083][ T6461]  ? __mutex_trylock_common+0x15f/0x270
[  168.799193][ T6461]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  168.799272][ T6461]  __vmalloc_node_range_noprof+0x127/0x1540
[  168.799362][ T6461]  ? rcu_is_watching+0x16/0xb0
[  168.799438][ T6461]  ? trace_contention_end+0x3d/0x140
[  168.799504][ T6461]  ? __mutex_lock+0x30b/0x1550
[  168.799606][ T6461]  ? dvb_dvr_do_ioctl+0x76/0x220
[  168.799689][ T6461]  ? memset_orig+0x33/0xb0
[  168.799776][ T6461]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  168.799877][ T6461]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  168.799956][ T6461]  vmalloc_noprof+0xb2/0xe0
[  168.800035][ T6461]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  168.800101][ T6461]  dvb_dvr_do_ioctl+0x12b/0x220
[  168.800192][ T6461]  dvb_usercopy+0x199/0x2e0
[  168.800261][ T6461]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  168.800340][ T6461]  ? __pfx_dvb_usercopy+0x10/0x10
[  168.800434][ T6461]  ? __fget_files+0x3a2/0x420
[  168.800520][ T6461]  ? __fget_files+0x2a/0x420
[  168.800621][ T6461]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  168.800700][ T6461]  dvb_dvr_ioctl+0x29/0x40
[  168.800774][ T6461]  __se_sys_ioctl+0xfc/0x170
[  168.800825][ T6461]  do_syscall_64+0x166/0x520
[  168.800904][ T6461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.800964][ T6461]  ? clear_bhb_loop+0x70/0xc0
[  168.801033][ T6461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.801086][ T6461] RIP: 0033:0x7f64b0f9e0d9
[  168.801143][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.801192][ T6461] RSP: 002b:00007f64b1da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.801261][ T6461] RAX: ffffffffffffffda RBX: 00007f64b1226090 RCX: 00007f64b0f9e0d9
[  168.801299][ T6461] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  168.801336][ T6461] RBP: 00007f64b1035024 R08: 0000000000000000 R09: 0000000000000000
[  168.801365][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.801394][ T6461] R13: 00007f64b1226128 R14: 00007f64b1226090 R15: 00007fff23bdeff8
[  168.801478][ T6461]  </TASK>
[  168.801695][ T6461] Mem-Info:
[  168.801723][ T6461] active_anon:14607 inactive_anon:0 isolated_anon:0
[  168.801723][ T6461]  active_file:0 inactive_file:61685 isolated_file:0
[  168.801723][ T6461]  unevictable:0 dirty:193 writeback:0
[  168.801723][ T6461]  slab_reclaimable:10413 slab_unreclaimable:94169
[  168.801723][ T6461]  mapped:29470 shmem:9549 pagetables:1084
[  168.801723][ T6461]  sec_pagetables:0 bounce:0
[  168.801723][ T6461]  kernel_misc_reclaimable:0
[  168.801723][ T6461]  free:1306292 free_pcp:9443 free_cma:0
[  168.801865][ T6461] Node 0 active_anon:58428kB inactive_anon:0kB active_file:0kB inactive_file:246540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117880kB dirty:772kB writeback:0kB shmem:38196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12588kB pagetables:4208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  168.802043][ T6461] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  168.802197][ T6461] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.802358][ T6461] lowmem_reserve[]: 0 2487 2487 2487 2487
[  168.802478][ T6461] Node 0 DMA32 free:1271180kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:58428kB inactive_anon:0kB active_file:0kB inactive_file:246540kB unevictable:0kB writepending:772kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:37772kB local_pcp:16440kB free_cma:0kB
[  168.802713][ T6461] lowmem_reserve[]: 0 0 0 0 0
[  168.802804][ T6461] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.802955][ T6461] lowmem_reserve[]: 0 0 0 0 0
[  168.803055][ T6461] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.803193][ T6461] lowmem_reserve[]: 0 0 0 0 0
[  168.803309][ T6461] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  168.803696][ T6461] Node 0 DMA32: 851*4kB (UM) 980*8kB (UME) 487*16kB (UM) 345*32kB (UME) 188*64kB (UME) 102*128kB (UME) 58*256kB (UME) 38*512kB (UME) 26*1024kB (UME) 12*2048kB (M) 276*4096kB (UM) = 1271164kB
[  168.809595][ T6461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  168.809922][ T6461] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  168.810405][ T6461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  168.810501][ T6461] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  168.810550][ T6461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  168.810591][ T6461] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  168.810633][ T6461] 71230 total pagecache pages
[  168.810702][ T6461] 0 pages in swap cache
[  168.810723][ T6461] Free swap  = 124996kB
[  168.810744][ T6461] Total swap = 124996kB
[  168.810772][ T6461] 2097051 pages RAM
[  168.810788][ T6461] 0 pages HighMem/MovableOnly
[  168.810809][ T6461] 428748 pages reserved
[  168.810822][ T6461] 0 pages cma reserved
[  169.979039][ T5624] Bluetooth: hci0: command tx timeout
[  171.631357][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.744345][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.759149][ T5850] bond0 (unregistering): Released all slaves
[  172.532993][ T6466] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  173.384747][ T5624] Bluetooth: hci0: command tx timeout
[  174.629549][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  176.361267][ T6484] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  176.734764][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.742472][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.750726][ T6339] bridge_slave_0: entered allmulticast mode
[  176.773180][ T6339] bridge_slave_0: entered promiscuous mode
[  176.789212][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.798669][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.802999][ T6339] bridge_slave_1: entered allmulticast mode
[  176.826697][ T6339] bridge_slave_1: entered promiscuous mode
[  176.872061][ T6510] nvmet: disable ns before setting buffered_io value.
[  176.886152][ T6510] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  177.094304][ T1007] nvmet: Created nvm controller 19 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  177.116708][ T6510] nvme nvme18: creating 2 I/O queues.
[  177.156742][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.157369][ T6510] nvme nvme18: new ctrl: "testsubsys"
[  177.274740][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.361412][ T5850] hsr_slave_0: left promiscuous mode
[  177.375334][ T5850] hsr_slave_1: left promiscuous mode
[  177.381758][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.390663][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.401539][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.410150][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.472957][ T5850] veth1_macvtap: left promiscuous mode
[  177.473050][ T5850] veth0_macvtap: left promiscuous mode
[  177.473433][ T5850] veth1_vlan: left promiscuous mode
[  177.473684][ T5850] veth0_vlan: left promiscuous mode
[  178.268024][ T6533] overlayfs: conflicting options: nfs_export=on,index=off
[  180.049572][ T6535] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  180.592956][ T5850] team0 (unregistering): Port device team_slave_1 removed
[  180.688262][ T5850] team0 (unregistering): Port device team_slave_0 removed
[  180.719205][ T6549] overlayfs: conflicting options: nfs_export=on,index=off
[  180.733185][ T6549] netlink: 'syz.3.116': attribute type 11 has an invalid length.
[  180.741264][ T6549] netlink: 220 bytes leftover after parsing attributes in process `syz.3.116'.
[  181.893515][ T6550] Invalid ELF header magic: != ELF
[  181.958603][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  181.981212][ T6339] team0: Port device team_slave_0 added
[  181.997289][ T6552] nvmet: disable ns before setting buffered_io value.
[  182.028186][ T6339] team0: Port device team_slave_1 added
[  182.088764][ T6552] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  182.261511][ T5841] nvmet: Created nvm controller 20 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  182.277142][ T6552] nvme nvme19: creating 2 I/O queues.
[  182.311296][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.311334][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.311363][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.323733][ T6552] nvme nvme19: new ctrl: "testsubsys"
[  182.383019][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.383055][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.383082][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.868328][ T6339] hsr_slave_0: entered promiscuous mode
[  182.875961][ T6339] hsr_slave_1: entered promiscuous mode
[  185.301924][ T5850] IPVS: stop unused estimator thread 0...
[  185.564438][ T6606] overlayfs: conflicting options: nfs_export=on,index=off
[  185.618237][ T6607] netlink: 'syz.2.119': attribute type 11 has an invalid length.
[  185.626315][ T6607] netlink: 220 bytes leftover after parsing attributes in process `syz.2.119'.
[  187.748920][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  188.099248][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.107393][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.115108][ T6384] bridge_slave_0: entered allmulticast mode
[  188.123229][ T6384] bridge_slave_0: entered promiscuous mode
[  188.225192][ T6616] nvmet: disable ns before setting buffered_io value.
[  188.271581][ T6616] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  188.291717][ T5850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.388532][ T1007] nvmet: Created nvm controller 21 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  188.410128][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.410510][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.410894][ T6384] bridge_slave_1: entered allmulticast mode
[  188.446231][ T6384] bridge_slave_1: entered promiscuous mode
[  188.452305][ T6616] nvme nvme20: creating 2 I/O queues.
[  188.469373][ T6616] nvme nvme20: new ctrl: "testsubsys"
[  188.714510][ T6628] syz.1.123: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  188.715935][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT(full) 
[  188.715971][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  188.715983][ T6628] Call Trace:
[  188.715992][ T6628]  <TASK>
[  188.716007][ T6628]  dump_stack_lvl+0xe8/0x150
[  188.716058][ T6628]  warn_alloc+0x24d/0x270
[  188.716100][ T6628]  ? __pfx_warn_alloc+0x10/0x10
[  188.716144][ T6628]  ? __mutex_trylock_common+0x15f/0x270
[  188.716168][ T6628]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  188.716191][ T6628]  __vmalloc_node_range_noprof+0x127/0x1540
[  188.716216][ T6628]  ? rcu_is_watching+0x16/0xb0
[  188.716236][ T6628]  ? trace_contention_end+0x3d/0x140
[  188.716258][ T6628]  ? __mutex_lock+0x30b/0x1550
[  188.716286][ T6628]  ? tomoyo_path_number_perm+0x219/0x5f0
[  188.716312][ T6628]  ? tomoyo_path_number_perm+0x219/0x5f0
[  188.716340][ T6628]  ? dvb_dvr_do_ioctl+0x76/0x220
[  188.716366][ T6628]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  188.716395][ T6628]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  188.716417][ T6628]  vmalloc_noprof+0xb2/0xe0
[  188.716441][ T6628]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  188.716464][ T6628]  dvb_dvr_do_ioctl+0x12b/0x220
[  188.716490][ T6628]  dvb_usercopy+0x199/0x2e0
[  188.716508][ T6628]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  188.716530][ T6628]  ? __pfx_dvb_usercopy+0x10/0x10
[  188.716557][ T6628]  ? __fget_files+0x3a2/0x420
[  188.716578][ T6628]  ? __fget_files+0x2a/0x420
[  188.716601][ T6628]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  188.716622][ T6628]  dvb_dvr_ioctl+0x29/0x40
[  188.716660][ T6628]  __se_sys_ioctl+0xfc/0x170
[  188.716688][ T6628]  do_syscall_64+0x166/0x520
[  188.716719][ T6628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.716743][ T6628]  ? clear_bhb_loop+0x70/0xc0
[  188.716770][ T6628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.716796][ T6628] RIP: 0033:0x7f2a99f9e0d9
[  188.716811][ T6628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.716824][ T6628] RSP: 002b:00007f2a9aea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  188.716842][ T6628] RAX: ffffffffffffffda RBX: 00007f2a9a226180 RCX: 00007f2a99f9e0d9
[  188.716854][ T6628] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  188.716865][ T6628] RBP: 00007f2a9a035024 R08: 0000000000000000 R09: 0000000000000000
[  188.716875][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.716884][ T6628] R13: 00007f2a9a226218 R14: 00007f2a9a226180 R15: 00007fff922a6588
[  188.716908][ T6628]  </TASK>
[  188.716962][ T6628] Mem-Info:
[  188.717030][ T6628] active_anon:20464 inactive_anon:0 isolated_anon:0
[  188.717030][ T6628]  active_file:0 inactive_file:61693 isolated_file:0
[  188.717030][ T6628]  unevictable:0 dirty:159 writeback:0
[  188.717030][ T6628]  slab_reclaimable:10452 slab_unreclaimable:93024
[  188.717030][ T6628]  mapped:29459 shmem:15373 pagetables:1095
[  188.717030][ T6628]  sec_pagetables:0 bounce:0
[  188.717030][ T6628]  kernel_misc_reclaimable:0
[  188.717030][ T6628]  free:1291991 free_pcp:18665 free_cma:0
[  188.717119][ T6628] Node 0 active_anon:81856kB inactive_anon:0kB active_file:0kB inactive_file:246572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117836kB dirty:636kB writeback:0kB shmem:61492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12396kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  188.717218][ T6628] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  188.717301][ T6628] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  188.717442][ T6628] lowmem_reserve[]: 0 2487 2487 2487 2487
[  188.717686][ T6628] Node 0 DMA32 free:1213976kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:81856kB inactive_anon:0kB active_file:0kB inactive_file:246572kB unevictable:0kB writepending:636kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:74660kB local_pcp:35612kB free_cma:0kB
[  188.717808][ T6628] lowmem_reserve[]: 0 0 0 0 0
[  188.718048][ T6628] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  188.718163][ T6628] lowmem_reserve[]: 0 0 0 0 0
[  188.718453][ T6628] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  188.718576][ T6628] lowmem_reserve[]: 0 0 0 0 0
[  188.718940][ T6628] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  188.719672][ T6628] Node 0 DMA32: 2*4kB (UM) 2*8kB (UE) 30*16kB (UE) 145*32kB (UE) 6*64kB (UM) 5*128kB (U) 50*256kB (UM) 44*512kB (UME) 23*1024kB (ME) 9*2048kB (UM) 276*4096kB (UM) = 1213976kB
[  188.720670][ T6628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  188.721162][ T6628] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  188.722271][ T6628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  188.722314][ T6628] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  188.722360][ T6628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  188.722406][ T6628] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  188.722453][ T6628] 77062 total pagecache pages
[  188.722466][ T6628] 0 pages in swap cache
[  188.722548][ T6628] Free swap  = 124996kB
[  188.722612][ T6628] Total swap = 124996kB
[  188.722659][ T6628] 2097051 pages RAM
[  188.722689][ T6628] 0 pages HighMem/MovableOnly
[  188.722721][ T6628] 428748 pages reserved
[  188.722752][ T6628] 0 pages cma reserved
[  189.850750][ T6633] nvmet: disable ns before setting buffered_io value.
[  189.857894][ T5850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.905988][ T6633] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  189.962254][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.016152][ T5855] nvmet: Created nvm controller 22 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  190.032899][ T6633] nvme nvme21: creating 2 I/O queues.
[  190.120994][ T6633] nvme nvme21: new ctrl: "testsubsys"
[  190.262905][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.016454][ T5850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.174912][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  191.427211][ T5850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.457169][ T6384] team0: Port device team_slave_0 added
[  191.470593][ T6384] team0: Port device team_slave_1 added
[  192.139071][ T6647] Invalid ELF header magic: != ELF
[  192.868983][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  193.290752][ T6648] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  194.233303][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  194.233385][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  195.806627][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.806664][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.806718][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.847643][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.847662][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.847690][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.006550][ T6384] hsr_slave_0: entered promiscuous mode
[  196.014155][ T6384] hsr_slave_1: entered promiscuous mode
[  196.020602][ T6384] debugfs: 'hsr0' already exists in 'hsr'
[  196.026539][ T6384] Cannot create hsr debugfs directory
[  196.032651][ T6339] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  196.318637][ T6685] Invalid ELF header magic: != ELF
[  196.963801][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  197.000090][ T6339] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  197.062156][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  197.276085][ T6339] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  197.295380][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  197.337181][ T6339] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  197.350241][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  197.524376][ T6699] overlayfs: conflicting options: nfs_export=on,index=off
[  197.624934][ T6702] netlink: 'syz.1.130': attribute type 11 has an invalid length.
[  197.632936][ T6702] netlink: 220 bytes leftover after parsing attributes in process `syz.1.130'.
[  197.782188][   T12] nvmet: Created nvm controller 23 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  197.954860][ T6690] nvme nvme22: creating 2 I/O queues.
[  198.087813][ T6690] nvme nvme22: new ctrl: "testsubsys"
[  199.987134][ T6739] syz.1.133: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  199.987531][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(full) 
[  199.987555][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  199.987584][ T6739] Call Trace:
[  199.987591][ T6739]  <TASK>
[  199.987600][ T6739]  dump_stack_lvl+0xe8/0x150
[  199.987636][ T6739]  warn_alloc+0x24d/0x270
[  199.987664][ T6739]  ? __pfx_warn_alloc+0x10/0x10
[  199.987700][ T6739]  ? __mutex_trylock_common+0x15f/0x270
[  199.987720][ T6739]  ? preempt_schedule_thunk+0x16/0x40
[  199.987738][ T6739]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  199.987759][ T6739]  __vmalloc_node_range_noprof+0x127/0x1540
[  199.987780][ T6739]  ? preempt_schedule_thunk+0x16/0x40
[  199.987801][ T6739]  ? __mutex_lock+0x321/0x1550
[  199.987825][ T6739]  ? tomoyo_path_number_perm+0x219/0x5f0
[  199.987868][ T6739]  ? tomoyo_path_number_perm+0x219/0x5f0
[  199.987890][ T6739]  ? dvb_dvr_do_ioctl+0x76/0x220
[  199.987914][ T6739]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  199.987954][ T6739]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  199.987974][ T6739]  vmalloc_noprof+0xb2/0xe0
[  199.987995][ T6739]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  199.988016][ T6739]  dvb_dvr_do_ioctl+0x12b/0x220
[  199.988039][ T6739]  dvb_usercopy+0x199/0x2e0
[  199.988056][ T6739]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  199.988076][ T6739]  ? __pfx_dvb_usercopy+0x10/0x10
[  199.988099][ T6739]  ? __fget_files+0x3a2/0x420
[  199.988121][ T6739]  ? __fget_files+0x2a/0x420
[  199.988160][ T6739]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  199.988181][ T6739]  dvb_dvr_ioctl+0x29/0x40
[  199.988202][ T6739]  __se_sys_ioctl+0xfc/0x170
[  199.988219][ T6739]  do_syscall_64+0x166/0x520
[  199.988241][ T6739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.988256][ T6739]  ? clear_bhb_loop+0x70/0xc0
[  199.988275][ T6739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.988290][ T6739] RIP: 0033:0x7f2a99f9e0d9
[  199.988304][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.988317][ T6739] RSP: 002b:00007f2a9aea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.988332][ T6739] RAX: ffffffffffffffda RBX: 00007f2a9a226180 RCX: 00007f2a99f9e0d9
[  199.988343][ T6739] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  199.988353][ T6739] RBP: 00007f2a9a035024 R08: 0000000000000000 R09: 0000000000000000
[  199.988362][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.988371][ T6739] R13: 00007f2a9a226218 R14: 00007f2a9a226180 R15: 00007fff922a6588
[  199.988394][ T6739]  </TASK>
[  199.988454][ T6739] Mem-Info:
[  199.988550][ T6739] active_anon:12229 inactive_anon:0 isolated_anon:0
[  199.988550][ T6739]  active_file:0 inactive_file:61699 isolated_file:0
[  199.988550][ T6739]  unevictable:0 dirty:147 writeback:0
[  199.988550][ T6739]  slab_reclaimable:10588 slab_unreclaimable:94566
[  199.988550][ T6739]  mapped:30516 shmem:7047 pagetables:1216
[  199.988550][ T6739]  sec_pagetables:0 bounce:0
[  199.988550][ T6739]  kernel_misc_reclaimable:0
[  199.988550][ T6739]  free:1297426 free_pcp:19193 free_cma:0
[  199.988652][ T6739] Node 0 active_anon:48916kB inactive_anon:0kB active_file:0kB inactive_file:246596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122064kB dirty:588kB writeback:0kB shmem:28188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12984kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  199.988929][ T6739] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  199.989005][ T6739] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  199.989200][ T6739] lowmem_reserve[]: 0 2487 2487 2487 2487
[  199.989434][ T6739] Node 0 DMA32 free:1235716kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48916kB inactive_anon:0kB active_file:0kB inactive_file:246596kB unevictable:0kB writepending:588kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:76772kB local_pcp:46296kB free_cma:0kB
[  199.989579][ T6739] lowmem_reserve[]: 0 0 0 0 0
[  199.989901][ T6739] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  199.990008][ T6739] lowmem_reserve[]: 0 0 0 0 0
[  199.990243][ T6739] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  199.990341][ T6739] lowmem_reserve[]: 0 0 0 0 0
[  199.990557][ T6739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  199.991287][ T6739] Node 0 DMA32: 307*4kB (UM) 322*8kB (UME) 334*16kB (UM) 328*32kB (UM) 121*64kB (UME) 73*128kB (UM) 33*256kB (UME) 35*512kB (UM) 23*1024kB (ME) 9*2048kB (UM) 276*4096kB (UM) = 1235580kB
[  199.992106][ T6739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  199.992540][ T6739] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  199.993411][ T6739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  199.993453][ T6739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  199.993494][ T6739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  199.993535][ T6739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  199.993578][ T6739] 68742 total pagecache pages
[  199.993671][ T6739] 0 pages in swap cache
[  199.993683][ T6739] Free swap  = 124996kB
[  199.993717][ T6739] Total swap = 124996kB
[  199.993751][ T6739] 2097051 pages RAM
[  199.993783][ T6739] 0 pages HighMem/MovableOnly
[  199.993816][ T6739] 428748 pages reserved
[  199.993849][ T6739] 0 pages cma reserved
[  200.999683][ T5850] bridge_slave_1: left allmulticast mode
[  200.999734][ T5850] bridge_slave_1: left promiscuous mode
[  201.000302][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.142007][ T5850] bridge_slave_0: left allmulticast mode
[  201.142060][ T5850] bridge_slave_0: left promiscuous mode
[  201.158240][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.895041][ T6777] nvmet: disable ns before setting buffered_io value.
[  202.924685][ T6777] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  203.033933][ T5841] nvmet: Created nvm controller 24 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  203.055678][ T6777] nvme nvme23: creating 2 I/O queues.
[  203.074674][ T6777] nvme nvme23: new ctrl: "testsubsys"
[  203.158595][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.196620][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.215197][ T5850] bond0 (unregistering): Released all slaves
[  203.257538][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  203.465624][ T6788] Invalid ELF header magic: != ELF
[  204.903368][ T5850] hsr_slave_0: left promiscuous mode
[  204.916772][ T5850] hsr_slave_1: left promiscuous mode
[  204.925569][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.925609][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.954136][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.954172][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.999532][ T5850] veth1_macvtap: left promiscuous mode
[  204.999588][ T5850] veth0_macvtap: left promiscuous mode
[  204.999880][ T5850] veth1_vlan: left promiscuous mode
[  205.000047][ T5850] veth0_vlan: left promiscuous mode
[  206.546355][ T4934] Bluetooth: hci1: command 0x0406 tx timeout
[  206.547553][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  206.547771][ T5624] Bluetooth: hci4: command 0x0406 tx timeout
[  208.390069][ T5850] team0 (unregistering): Port device team_slave_1 removed
[  208.464375][ T6845] Invalid ELF header magic: != ELF
[  209.302594][ T5850] team0 (unregistering): Port device team_slave_0 removed
[  212.165138][ T6885] Invalid ELF header magic: != ELF
[  212.666447][ T6892] syz.2.146: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  212.683501][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.2.146 Not tainted syzkaller #0 PREEMPT(full) 
[  212.683541][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  212.683556][ T6892] Call Trace:
[  212.683585][ T6892]  <TASK>
[  212.683627][ T6892]  dump_stack_lvl+0xe8/0x150
[  212.683749][ T6892]  warn_alloc+0x24d/0x270
[  212.683870][ T6892]  ? __pfx_warn_alloc+0x10/0x10
[  212.683947][ T6892]  ? irqentry_exit+0x218/0x910
[  212.684049][ T6892]  ? __mutex_trylock_common+0x15f/0x270
[  212.684124][ T6892]  ? preempt_schedule_thunk+0x16/0x40
[  212.684195][ T6892]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  212.684278][ T6892]  __vmalloc_node_range_noprof+0x127/0x1540
[  212.684354][ T6892]  ? preempt_schedule_thunk+0x16/0x40
[  212.684442][ T6892]  ? __mutex_lock+0x321/0x1550
[  212.684557][ T6892]  ? dvb_dvr_do_ioctl+0x76/0x220
[  212.684649][ T6892]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  212.684762][ T6892]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  212.684838][ T6892]  vmalloc_noprof+0xb2/0xe0
[  212.684930][ T6892]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  212.685013][ T6892]  dvb_dvr_do_ioctl+0x12b/0x220
[  212.685129][ T6892]  dvb_usercopy+0x199/0x2e0
[  212.685208][ T6892]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  212.685282][ T6892]  ? __pfx_dvb_usercopy+0x10/0x10
[  212.685391][ T6892]  ? dvb_dvr_ioctl+0x15/0x40
[  212.685479][ T6892]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  212.685563][ T6892]  dvb_dvr_ioctl+0x29/0x40
[  212.685644][ T6892]  __se_sys_ioctl+0xfc/0x170
[  212.685715][ T6892]  do_syscall_64+0x166/0x520
[  212.685797][ T6892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.685861][ T6892]  ? clear_bhb_loop+0x70/0xc0
[  212.685934][ T6892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.685995][ T6892] RIP: 0033:0x7f64b0f9e0d9
[  212.686052][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.686102][ T6892] RSP: 002b:00007f64b1da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  212.686165][ T6892] RAX: ffffffffffffffda RBX: 00007f64b1226090 RCX: 00007f64b0f9e0d9
[  212.686209][ T6892] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  212.686250][ T6892] RBP: 00007f64b1035024 R08: 0000000000000000 R09: 0000000000000000
[  212.686282][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.686321][ T6892] R13: 00007f64b1226128 R14: 00007f64b1226090 R15: 00007fff23bdeff8
[  212.686411][ T6892]  </TASK>
[  212.693106][ T6892] Mem-Info:
[  212.703669][ T6892] active_anon:8785 inactive_anon:0 isolated_anon:0
[  212.703669][ T6892]  active_file:0 inactive_file:61703 isolated_file:0
[  212.703669][ T6892]  unevictable:0 dirty:51 writeback:16
[  212.703669][ T6892]  slab_reclaimable:10457 slab_unreclaimable:94088
[  212.703669][ T6892]  mapped:36387 shmem:3390 pagetables:1089
[  212.703669][ T6892]  sec_pagetables:0 bounce:0
[  212.703669][ T6892]  kernel_misc_reclaimable:0
[  212.703669][ T6892]  free:1309778 free_pcp:9345 free_cma:0
[  212.703938][ T6892] Node 0 active_anon:35140kB inactive_anon:0kB active_file:0kB inactive_file:246612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145548kB dirty:204kB writeback:64kB shmem:13560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12616kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  212.703998][ T6892] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  212.711996][ T6892] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  212.712370][ T6892] lowmem_reserve[]: 0 2487 2487 2487 2487
[  212.717621][ T6892] Node 0 DMA32 free:1285124kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35140kB inactive_anon:0kB active_file:0kB inactive_file:246612kB unevictable:0kB writepending:268kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:37368kB local_pcp:20424kB free_cma:0kB
[  212.717886][ T6892] lowmem_reserve[]: 0 0 0 0 0
[  212.723210][ T6892] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  212.733375][ T6892] lowmem_reserve[]: 0 0 0 0 0
[  212.747205][ T6892] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  212.758750][ T6892] lowmem_reserve[]: 0 0 0 0 0
[  212.770379][ T6892] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  212.776457][ T6892] Node 0 DMA32: 141*4kB (UM) 348*8kB (UE) 135*16kB (U) 854*32kB (UM) 466*64kB (UME) 188*128kB (UM) 57*256kB (UME) 42*512kB (UM) 23*1024kB (ME) 10*2048kB (UM) 273*4096kB (UM) = 1285060kB
[  212.776882][ T6892] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  212.777139][ T6892] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  212.777527][ T6892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  212.777563][ T6892] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  212.777597][ T6892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  212.777630][ T6892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  212.777664][ T6892] 65089 total pagecache pages
[  212.777693][ T6892] 0 pages in swap cache
[  212.777701][ T6892] Free swap  = 124996kB
[  212.777724][ T6892] Total swap = 124996kB
[  212.777752][ T6892] 2097051 pages RAM
[  212.777780][ T6892] 0 pages HighMem/MovableOnly
[  212.777789][ T6892] 428748 pages reserved
[  212.777811][ T6892] 0 pages cma reserved
[  213.863604][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  213.884094][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  213.894435][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  213.900671][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  213.904517][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  214.404972][ T6384] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  214.417348][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  214.425830][ T6384] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  214.462984][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  214.496308][ T6384] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  214.802485][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  214.810827][ T6384] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  214.842736][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  214.906139][ T5850] IPVS: stop unused estimator thread 0...
[  215.092340][ T6384] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.146311][ T6384] 8021q: adding VLAN 0 to HW filter on device team0
[  215.182458][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.182741][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.882377][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.882502][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.994751][ T5630] Bluetooth: hci2: command tx timeout
[  218.013939][ T6948] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  218.468702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  218.856941][ T5630] Bluetooth: hci2: command tx timeout
[  219.427352][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5
[  220.088726][ T6957] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  220.618797][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  220.942623][ T5630] Bluetooth: hci2: command tx timeout
[  221.529764][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  221.543296][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  221.552594][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  221.561110][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  221.570837][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  223.050256][ T5633] Bluetooth: hci2: command tx timeout
[  223.670735][ T5633] Bluetooth: hci5: command tx timeout
[  225.739505][ T5633] Bluetooth: hci5: command tx timeout
[  226.149046][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  226.431255][ T7050] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  226.461424][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6
[  226.550014][ T5855] bridge_slave_1: left allmulticast mode
[  226.556121][ T5855] bridge_slave_1: left promiscuous mode
[  226.563031][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.589959][ T5855] bridge_slave_0: left allmulticast mode
[  226.595832][ T5855] bridge_slave_0: left promiscuous mode
[  226.605389][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.819844][ T5633] Bluetooth: hci5: command tx timeout
[  229.171595][ T7082] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  229.582374][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.626151][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.642825][ T5855] bond0 (unregistering): Released all slaves
[  229.898760][ T5633] Bluetooth: hci5: command tx timeout
[  231.526263][ T5858] nvmet: Created nvm controller 25 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  231.541009][ T7107] nvme nvme24: creating 2 I/O queues.
[  231.556173][ T7107] nvme nvme24: new ctrl: "testsubsys"
[  231.712057][ T5855] hsr_slave_0: left promiscuous mode
[  231.733455][ T5855] hsr_slave_1: left promiscuous mode
[  231.745456][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.753445][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.778196][ T7117] nvmet: disable ns before setting buffered_io value.
[  231.840950][ T7117] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  231.863317][ T7120] nvmet: disable ns before setting buffered_io value.
[  231.873573][ T7120] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  231.968331][ T5858] nvmet: Created nvm controller 26 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  231.997164][ T7117] nvme nvme25: creating 2 I/O queues.
[  232.033436][ T7117] nvme nvme25: new ctrl: "testsubsys"
[  232.148589][ T1007] nvmet: Created nvm controller 27 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  232.202138][ T7120] nvme nvme26: creating 2 I/O queues.
[  232.213523][ T7120] nvme nvme26: new ctrl: "testsubsys"
[  232.306575][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  232.330590][   T59] nvmet: Created nvm controller 28 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  232.360457][ T7118] nvme nvme27: creating 2 I/O queues.
[  232.366612][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  232.382822][ T7118] nvme nvme27: new ctrl: "testsubsys"
[  232.749622][ T7134] warn_alloc: 1 callbacks suppressed
[  232.749716][ T7134] syz.3.168: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  232.749947][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT(full) 
[  232.749974][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  232.749987][ T7134] Call Trace:
[  232.749997][ T7134]  <TASK>
[  232.750012][ T7134]  dump_stack_lvl+0xe8/0x150
[  232.750040][ T7134]  warn_alloc+0x24d/0x270
[  232.750070][ T7134]  ? __pfx_warn_alloc+0x10/0x10
[  232.750093][ T7134]  ? irqentry_exit+0x218/0x910
[  232.750123][ T7134]  ? __mutex_trylock_common+0x15f/0x270
[  232.750143][ T7134]  ? preempt_schedule_thunk+0x16/0x40
[  232.750168][ T7134]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  232.750191][ T7134]  __vmalloc_node_range_noprof+0x127/0x1540
[  232.750215][ T7134]  ? preempt_schedule_thunk+0x16/0x40
[  232.750237][ T7134]  ? __mutex_lock+0x321/0x1550
[  232.750264][ T7134]  ? tomoyo_path_number_perm+0x219/0x5f0
[  232.750291][ T7134]  ? tomoyo_path_number_perm+0x219/0x5f0
[  232.750313][ T7134]  ? dvb_dvr_do_ioctl+0x76/0x220
[  232.750339][ T7134]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  232.750368][ T7134]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  232.750390][ T7134]  vmalloc_noprof+0xb2/0xe0
[  232.750413][ T7134]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  232.750435][ T7134]  dvb_dvr_do_ioctl+0x12b/0x220
[  232.750462][ T7134]  dvb_usercopy+0x199/0x2e0
[  232.750480][ T7134]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  232.750502][ T7134]  ? __pfx_dvb_usercopy+0x10/0x10
[  232.750528][ T7134]  ? __fget_files+0x3a2/0x420
[  232.750549][ T7134]  ? __fget_files+0x2a/0x420
[  232.750572][ T7134]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  232.750593][ T7134]  dvb_dvr_ioctl+0x29/0x40
[  232.750615][ T7134]  __se_sys_ioctl+0xfc/0x170
[  232.750633][ T7134]  do_syscall_64+0x166/0x520
[  232.750655][ T7134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.750673][ T7134]  ? clear_bhb_loop+0x70/0xc0
[  232.750693][ T7134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.750708][ T7134] RIP: 0033:0x7f10bed9e0d9
[  232.750723][ T7134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.750736][ T7134] RSP: 002b:00007f10bfce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  232.750752][ T7134] RAX: ffffffffffffffda RBX: 00007f10bf026090 RCX: 00007f10bed9e0d9
[  232.750763][ T7134] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  232.750773][ T7134] RBP: 00007f10bee35024 R08: 0000000000000000 R09: 0000000000000000
[  232.750782][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.750791][ T7134] R13: 00007f10bf026128 R14: 00007f10bf026090 R15: 00007ffe27527bd8
[  232.750816][ T7134]  </TASK>
[  232.750882][ T7134] Mem-Info:
[  232.750950][ T7134] active_anon:19894 inactive_anon:0 isolated_anon:0
[  232.750950][ T7134]  active_file:0 inactive_file:61714 isolated_file:0
[  232.750950][ T7134]  unevictable:0 dirty:118 writeback:0
[  232.750950][ T7134]  slab_reclaimable:10313 slab_unreclaimable:94178
[  232.750950][ T7134]  mapped:40012 shmem:14630 pagetables:1167
[  232.750950][ T7134]  sec_pagetables:0 bounce:0
[  232.750950][ T7134]  kernel_misc_reclaimable:0
[  232.750950][ T7134]  free:1301355 free_pcp:9067 free_cma:0
[  232.751053][ T7134] Node 0 active_anon:79576kB inactive_anon:0kB active_file:0kB inactive_file:246656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160048kB dirty:472kB writeback:0kB shmem:58520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12476kB pagetables:4540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  232.751154][ T7134] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  232.751246][ T7134] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.751338][ T7134] lowmem_reserve[]: 0 2487 2487 2487 2487
[  232.751572][ T7134] Node 0 DMA32 free:1251432kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:79576kB inactive_anon:0kB active_file:0kB inactive_file:246656kB unevictable:0kB writepending:472kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:36268kB local_pcp:20848kB free_cma:0kB
[  232.751688][ T7134] lowmem_reserve[]: 0 0 0 0 0
[  232.751920][ T7134] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.752031][ T7134] lowmem_reserve[]: 0 0 0 0 0
[  232.752362][ T7134] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.752476][ T7134] lowmem_reserve[]: 0 0 0 0 0
[  232.752746][ T7134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  232.753347][ T7134] Node 0 DMA32: 129*4kB (U) 291*8kB (UME) 260*16kB (UM) 722*32kB (UME) 469*64kB (UME) 190*128kB (UM) 38*256kB (UME) 14*512kB (UM) 3*1024kB (ME) 8*2048kB (UM) 276*4096kB (UM) = 1251292kB
[  232.754194][ T7134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  232.754554][ T7134] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  232.755424][ T7134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  232.755469][ T7134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.755512][ T7134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  232.755555][ T7134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.755598][ T7134] 76340 total pagecache pages
[  232.755634][ T7134] 0 pages in swap cache
[  232.755667][ T7134] Free swap  = 124996kB
[  232.755706][ T7134] Total swap = 124996kB
[  232.755741][ T7134] 2097051 pages RAM
[  232.755773][ T7134] 0 pages HighMem/MovableOnly
[  232.755806][ T7134] 428748 pages reserved
[  232.755840][ T7134] 0 pages cma reserved
[  233.804359][ T7139] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  235.262742][ T5841] nvmet: Created nvm controller 29 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  235.315086][ T7132] nvme nvme28: creating 2 I/O queues.
[  235.327699][ T7132] nvme nvme28: new ctrl: "testsubsys"
[  235.407872][ T7146] nvmet: disable ns before setting buffered_io value.
[  235.421507][ T7146] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  235.533956][ T5841] nvmet: Created nvm controller 30 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  235.561324][ T7146] nvme nvme29: creating 2 I/O queues.
[  235.606950][ T7146] nvme nvme29: new ctrl: "testsubsys"
[  237.073018][ T6904] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.073113][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.073241][ T6904] bridge_slave_0: entered allmulticast mode
[  237.109272][ T6904] bridge_slave_0: entered promiscuous mode
[  237.143434][ T6904] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.143654][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.144052][ T6904] bridge_slave_1: entered allmulticast mode
[  237.198538][ T6904] bridge_slave_1: entered promiscuous mode
[  238.430946][ T6904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.570537][ T6904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.856960][ T6904] team0: Port device team_slave_0 added
[  238.882378][ T6904] team0: Port device team_slave_1 added
[  239.084324][   T13] nvmet: Created nvm controller 31 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  239.116291][ T7189] nvme nvme30: creating 2 I/O queues.
[  239.198337][ T7200] Invalid ELF header magic: != ELF
[  239.744233][ T7189] nvme nvme30: new ctrl: "testsubsys"
[  240.131374][ T7209] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  240.155918][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.155971][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  240.156017][ T6904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.356829][ T7217] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  240.433538][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.433601][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  240.433630][ T6904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.492294][ T1038] nvmet: Created nvm controller 32 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  240.878915][ T7209] nvme nvme31: creating 2 I/O queues.
[  241.151708][ T7209] nvme nvme31: new ctrl: "testsubsys"
[  242.326354][ T7252] nvmet: disable ns before setting buffered_io value.
[  242.584455][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7
[  242.594217][ T7252] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  244.035583][ T6904] hsr_slave_0: entered promiscuous mode
[  244.063400][ T6904] hsr_slave_1: entered promiscuous mode
[  245.017875][ T7295] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  246.676550][ T7294] nvmet: disable ns before setting buffered_io value.
[  246.781277][ T7294] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  247.151537][ T2985] nvmet: Created nvm controller 33 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  247.198065][ T7294] nvme nvme32: creating 2 I/O queues.
[  247.280510][ T7294] nvme nvme32: new ctrl: "testsubsys"
[  247.392366][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.392583][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.392971][ T6971] bridge_slave_0: entered allmulticast mode
[  247.416218][ T6971] bridge_slave_0: entered promiscuous mode
[  247.530806][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.531137][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.531484][ T6971] bridge_slave_1: entered allmulticast mode
[  247.561437][ T6971] bridge_slave_1: entered promiscuous mode
[  247.810366][ T7328] syz.3.183: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  247.813245][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) 
[  247.813272][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  247.813311][ T7328] Call Trace:
[  247.813318][ T7328]  <TASK>
[  247.813325][ T7328]  dump_stack_lvl+0xe8/0x150
[  247.813369][ T7328]  warn_alloc+0x24d/0x270
[  247.813395][ T7328]  ? lockdep_hardirqs_on+0x7b/0x110
[  247.813419][ T7328]  ? __pfx_warn_alloc+0x10/0x10
[  247.813446][ T7328]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  247.813470][ T7328]  ? __vmalloc_node_range_noprof+0x1/0x1540
[  247.813492][ T7328]  ? __vmalloc_node_range_noprof+0xda/0x1540
[  247.813516][ T7328]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  247.813537][ T7328]  __vmalloc_node_range_noprof+0x127/0x1540
[  247.813559][ T7328]  ? rcu_is_watching+0x16/0xb0
[  247.813578][ T7328]  ? trace_contention_end+0x3d/0x140
[  247.813599][ T7328]  ? __mutex_lock+0x30b/0x1550
[  247.813625][ T7328]  ? tomoyo_path_number_perm+0x219/0x5f0
[  247.813656][ T7328]  ? tomoyo_path_number_perm+0x219/0x5f0
[  247.813679][ T7328]  ? dvb_dvr_do_ioctl+0x76/0x220
[  247.813703][ T7328]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  247.813732][ T7328]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  247.813753][ T7328]  vmalloc_noprof+0xb2/0xe0
[  247.813778][ T7328]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  247.813800][ T7328]  dvb_dvr_do_ioctl+0x12b/0x220
[  247.813825][ T7328]  dvb_usercopy+0x199/0x2e0
[  247.813843][ T7328]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  247.813864][ T7328]  ? __pfx_dvb_usercopy+0x10/0x10
[  247.813889][ T7328]  ? __fget_files+0x3a2/0x420
[  247.813909][ T7328]  ? __fget_files+0x2a/0x420
[  247.813931][ T7328]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  247.813952][ T7328]  dvb_dvr_ioctl+0x29/0x40
[  247.813973][ T7328]  __se_sys_ioctl+0xfc/0x170
[  247.813991][ T7328]  do_syscall_64+0x166/0x520
[  247.814012][ T7328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.814027][ T7328]  ? clear_bhb_loop+0x70/0xc0
[  247.814046][ T7328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.814061][ T7328] RIP: 0033:0x7f10bed9e0d9
[  247.814075][ T7328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.814087][ T7328] RSP: 002b:00007f10bfce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  247.814102][ T7328] RAX: ffffffffffffffda RBX: 00007f10bf026090 RCX: 00007f10bed9e0d9
[  247.814114][ T7328] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  247.814123][ T7328] RBP: 00007f10bee35024 R08: 0000000000000000 R09: 0000000000000000
[  247.814133][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.814141][ T7328] R13: 00007f10bf026128 R14: 00007f10bf026090 R15: 00007ffe27527bd8
[  247.814164][ T7328]  </TASK>
[  247.814259][ T7328] Mem-Info:
[  247.814327][ T7328] active_anon:39986 inactive_anon:0 isolated_anon:0
[  247.814327][ T7328]  active_file:0 inactive_file:61718 isolated_file:0
[  247.814327][ T7328]  unevictable:0 dirty:122 writeback:0
[  247.814327][ T7328]  slab_reclaimable:10337 slab_unreclaimable:94661
[  247.814327][ T7328]  mapped:29524 shmem:34556 pagetables:1173
[  247.814327][ T7328]  sec_pagetables:0 bounce:0
[  247.814327][ T7328]  kernel_misc_reclaimable:0
[  247.814327][ T7328]  free:1277564 free_pcp:11645 free_cma:0
[  247.814420][ T7328] Node 0 active_anon:159944kB inactive_anon:0kB active_file:0kB inactive_file:246672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118096kB dirty:488kB writeback:0kB shmem:138224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12552kB pagetables:4564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  247.814513][ T7328] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  247.814612][ T7328] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  247.814742][ T7328] lowmem_reserve[]: 0 2487 2487 2487 2487
[  247.815094][ T7328] Node 0 DMA32 free:1156268kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:159944kB inactive_anon:0kB active_file:0kB inactive_file:246672kB unevictable:0kB writepending:488kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:46580kB local_pcp:28964kB free_cma:0kB
[  247.815244][ T7328] lowmem_reserve[]: 0 0 0 0 0
[  247.815503][ T7328] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  247.815612][ T7328] lowmem_reserve[]: 0 0 0 0 0
[  247.815929][ T7328] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  247.816048][ T7328] lowmem_reserve[]: 0 0 0 0 0
[  247.816288][ T7328] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  247.816999][ T7328] Node 0 DMA32: 262*4kB (UM) 348*8kB (UME) 165*16kB (UM) 310*32kB (UME) 65*64kB (ME) 51*128kB (UM) 11*256kB (UME) 6*512kB (UM) 1*1024kB (E) 2*2048kB (UM) 273*4096kB (UM) = 1156296kB
[  247.817920][ T7328] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  247.818404][ T7328] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  247.819160][ T7328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  247.819182][ T7328] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  247.819204][ T7328] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  247.819226][ T7328] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  247.819247][ T7328] 96270 total pagecache pages
[  247.819259][ T7328] 0 pages in swap cache
[  247.819303][ T7328] Free swap  = 124996kB
[  247.819316][ T7328] Total swap = 124996kB
[  247.819328][ T7328] 2097051 pages RAM
[  247.819340][ T7328] 0 pages HighMem/MovableOnly
[  247.819352][ T7328] 428748 pages reserved
[  247.819363][ T7328] 0 pages cma reserved
[  248.975474][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.261472][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.839372][ T6971] team0: Port device team_slave_0 added
[  250.920945][ T6971] team0: Port device team_slave_1 added
[  250.969747][ T7366] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  251.128954][ T5855] bridge_slave_1: left allmulticast mode
[  251.135620][ T5855] bridge_slave_1: left promiscuous mode
[  251.143486][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.159479][ T5848] nvmet: Created nvm controller 34 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  251.181013][ T7366] nvme nvme33: creating 2 I/O queues.
[  251.207019][ T5855] bridge_slave_0: left allmulticast mode
[  251.207466][ T7366] nvme nvme33: new ctrl: "testsubsys"
[  251.220940][ T5855] bridge_slave_0: left promiscuous mode
[  251.227267][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.750363][ T7371] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  251.797694][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.823974][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.070324][ T5855] bond0 (unregistering): Released all slaves
[  253.378551][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.378599][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.378757][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.380187][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.380202][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.380224][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.607100][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8
[  254.149965][ T5855] hsr_slave_0: left promiscuous mode
[  254.211197][ T5855] hsr_slave_1: left promiscuous mode
[  254.217433][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.265002][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.008774][ T7397] nvmet: disable ns before setting buffered_io value.
[  255.042179][ T7397] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  255.151389][ T7401] nvmet: disable ns before setting buffered_io value.
[  255.153632][ T5848] nvmet: Created nvm controller 35 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  255.176313][ T7401] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  255.186059][ T7397] nvme nvme34: creating 2 I/O queues.
[  255.194412][ T7397] nvme nvme34: new ctrl: "testsubsys"
[  255.383301][ T7408] overlayfs: conflicting options: nfs_export=on,index=off
[  255.440402][ T7409] netlink: 'syz.3.191': attribute type 11 has an invalid length.
[  255.448364][ T7409] netlink: 220 bytes leftover after parsing attributes in process `syz.3.191'.
[  255.547877][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  255.660425][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.660519][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  255.901281][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  256.159238][   T12] nvmet: Created nvm controller 36 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  256.220091][ T7401] nvme nvme35: creating 2 I/O queues.
[  256.318838][ T7401] nvme nvme35: new ctrl: "testsubsys"
[  256.928235][ T7418] nvmet: disable ns before setting buffered_io value.
[  256.977461][ T7418] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  257.937260][ T3022] nvmet: Created nvm controller 37 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  258.025222][ T7418] nvme nvme36: creating 2 I/O queues.
[  258.145644][ T7418] nvme nvme36: new ctrl: "testsubsys"
[  258.837576][ T6971] hsr_slave_0: entered promiscuous mode
[  258.840815][ T6971] hsr_slave_1: entered promiscuous mode
[  258.842552][ T6971] debugfs: 'hsr0' already exists in 'hsr'
[  258.842600][ T6971] Cannot create hsr debugfs directory
[  260.313768][ T7458] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  260.407952][ T7462] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  260.611542][ T5858] nvmet: Created nvm controller 38 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  260.675448][ T7458] nvme nvme37: creating 2 I/O queues.
[  260.731507][ T7458] nvme nvme37: new ctrl: "testsubsys"
[  261.562203][   T12] nvmet: Created nvm controller 39 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  261.702748][ T7462] nvme nvme38: creating 2 I/O queues.
[  261.747397][ T7462] nvme nvme38: new ctrl: "testsubsys"
[  264.759091][    C0] nvme nvme8: long keepalive RTT (1480 ms)
[  264.765356][    C0] nvme nvme17: long keepalive RTT (1480 ms)
[  264.771821][    C0] nvme nvme18: long keepalive RTT (1490 ms)
[  264.778084][    C0] nvme nvme21: long keepalive RTT (1490 ms)
[  264.784494][    C0] nvme nvme20: long keepalive RTT (1500 ms)
[  264.784674][    C0] nvme nvme24: long keepalive RTT (1500 ms)
[  264.784880][    C0] nvme nvme19: long keepalive RTT (1500 ms)
[  264.785091][    C0] nvme nvme13: long keepalive RTT (1500 ms)
[  264.785302][    C0] nvme nvme3: long keepalive RTT (1500 ms)
[  264.785536][    C0] nvme nvme22: long keepalive RTT (1500 ms)
[  264.785696][    C0] nvme nvme25: long keepalive RTT (1500 ms)
[  264.785884][    C0] nvme nvme4: long keepalive RTT (1500 ms)
[  264.786078][    C0] nvme nvme6: long keepalive RTT (1500 ms)
[  264.786275][    C0] nvme nvme30: long keepalive RTT (1500 ms)
[  265.292730][ T7516] warn_alloc: 1 callbacks suppressed
[  265.292796][ T7516] syz.3.201: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  265.292952][ T7516] CPU: 0 UID: 0 PID: 7516 Comm: syz.3.201 Not tainted syzkaller #0 PREEMPT(full) 
[  265.292978][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.292996][ T7516] Call Trace:
[  265.293003][ T7516]  <TASK>
[  265.293009][ T7516]  dump_stack_lvl+0xe8/0x150
[  265.293039][ T7516]  warn_alloc+0x24d/0x270
[  265.293068][ T7516]  ? __pfx_warn_alloc+0x10/0x10
[  265.293100][ T7516]  ? __mutex_trylock_common+0x15f/0x270
[  265.293143][ T7516]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  265.293166][ T7516]  __vmalloc_node_range_noprof+0x127/0x1540
[  265.293190][ T7516]  ? rcu_is_watching+0x16/0xb0
[  265.293210][ T7516]  ? trace_contention_end+0x3d/0x140
[  265.293233][ T7516]  ? __mutex_lock+0x30b/0x1550
[  265.293260][ T7516]  ? tomoyo_path_number_perm+0x219/0x5f0
[  265.293286][ T7516]  ? tomoyo_path_number_perm+0x219/0x5f0
[  265.293309][ T7516]  ? dvb_dvr_do_ioctl+0x76/0x220
[  265.293334][ T7516]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  265.293364][ T7516]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  265.293386][ T7516]  vmalloc_noprof+0xb2/0xe0
[  265.293409][ T7516]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  265.293432][ T7516]  dvb_dvr_do_ioctl+0x12b/0x220
[  265.293459][ T7516]  dvb_usercopy+0x199/0x2e0
[  265.293477][ T7516]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  265.293499][ T7516]  ? __pfx_dvb_usercopy+0x10/0x10
[  265.293529][ T7516]  ? __se_sys_ioctl+0x52/0x170
[  265.293551][ T7516]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  265.293574][ T7516]  dvb_dvr_ioctl+0x29/0x40
[  265.293597][ T7516]  __se_sys_ioctl+0xfc/0x170
[  265.293619][ T7516]  do_syscall_64+0x166/0x520
[  265.293641][ T7516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.293657][ T7516]  ? clear_bhb_loop+0x70/0xc0
[  265.293677][ T7516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.293693][ T7516] RIP: 0033:0x7f10bed9e0d9
[  265.293707][ T7516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.293721][ T7516] RSP: 002b:00007f10bfce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  265.293737][ T7516] RAX: ffffffffffffffda RBX: 00007f10bf026090 RCX: 00007f10bed9e0d9
[  265.293749][ T7516] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  265.293760][ T7516] RBP: 00007f10bee35024 R08: 0000000000000000 R09: 0000000000000000
[  265.293769][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.293779][ T7516] R13: 00007f10bf026128 R14: 00007f10bf026090 R15: 00007ffe27527bd8
[  265.293804][ T7516]  </TASK>
[  265.316601][ T7516] Mem-Info:
[  265.316618][ T7516] active_anon:6308 inactive_anon:0 isolated_anon:0
[  265.316618][ T7516]  active_file:0 inactive_file:61724 isolated_file:0
[  265.316618][ T7516]  unevictable:0 dirty:138 writeback:0
[  265.316618][ T7516]  slab_reclaimable:10339 slab_unreclaimable:93937
[  265.316618][ T7516]  mapped:34130 shmem:519 pagetables:1358
[  265.316618][ T7516]  sec_pagetables:0 bounce:0
[  265.316618][ T7516]  kernel_misc_reclaimable:0
[  265.316618][ T7516]  free:1313925 free_pcp:8706 free_cma:0
[  265.328156][ T7516] Node 0 active_anon:25232kB inactive_anon:0kB active_file:0kB inactive_file:246696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136520kB dirty:552kB writeback:0kB shmem:2076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12680kB pagetables:5304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  265.341265][ T7516] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  265.341359][ T7516] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  265.341464][ T7516] lowmem_reserve[]: 0 2487 2487 2487 2487
[  265.341573][ T7516] Node 0 DMA32 free:1301712kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25332kB inactive_anon:0kB active_file:0kB inactive_file:246696kB unevictable:0kB writepending:520kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:34632kB local_pcp:19668kB free_cma:0kB
[  265.388982][ T7516] lowmem_reserve[]: 0 0 0 0 0
[  265.389030][ T7516] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  265.389094][ T7516] lowmem_reserve[]: 0 0 0 0 0
[  265.389134][ T7516] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  265.389199][ T7516] lowmem_reserve[]: 0 0 0 0 0
[  265.389239][ T7516] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  265.389535][ T7516] Node 0 DMA32: 2135*4kB (UM) 1532*8kB (UME) 862*16kB (UM) 812*32kB (UME) 516*64kB (ME) 272*128kB (UM) 55*256kB (UME) 28*512kB (UM) 12*1024kB (ME) 7*2048kB (UM) 273*4096kB (UM) = 1301660kB
[  265.389720][ T7516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  265.389827][ T7516] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  265.436380][ T7516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  265.436439][ T7516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  265.436490][ T7516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  265.436533][ T7516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  265.436582][ T7516] 62241 total pagecache pages
[  265.436603][ T7516] 0 pages in swap cache
[  265.436624][ T7516] Free swap  = 124996kB
[  265.436645][ T7516] Total swap = 124996kB
[  265.436675][ T7516] 2097051 pages RAM
[  265.436699][ T7516] 0 pages HighMem/MovableOnly
[  265.436721][ T7516] 428748 pages reserved
[  265.436749][ T7516] 0 pages cma reserved
[  266.699196][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  267.736575][ T7547] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  268.094639][ T3006] nvmet: Created nvm controller 40 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  268.111417][ T7547] nvme nvme39: creating 2 I/O queues.
[  268.118445][ T7547] nvme nvme39: new ctrl: "testsubsys"
[  268.254905][ T6971] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  268.292249][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  268.301441][ T6971] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  268.344849][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  268.367553][ T6971] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  268.504997][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  268.539807][ T6971] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  268.648311][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  270.136674][ T7577] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  270.419735][ T6904] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  270.465878][ T6904] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  270.474961][ T6904] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  270.527548][ T6904] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  270.558215][ T6904] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  270.576458][ T5855] nvmet: Created nvm controller 41 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  270.582632][ T7577] nvme nvme40: creating 2 I/O queues.
[  270.596202][ T6904] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  270.603140][ T7599] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  270.620508][ T6904] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  270.628040][ T6904] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  270.841783][ T7577] nvme nvme40: new ctrl: "testsubsys"
[  270.938953][ T7614] Invalid ELF header magic: != ELF
[  271.563216][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.721650][ T6971] 8021q: adding VLAN 0 to HW filter on device team0
[  271.734867][ T6904] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.824697][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.824903][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.871126][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.871239][ T6740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.900290][ T7623] nvmet: disable ns before setting buffered_io value.
[  271.910249][ T7623] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  271.952178][ T6904] 8021q: adding VLAN 0 to HW filter on device team0
[  271.987406][   T12] nvmet: Created nvm controller 42 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  272.007472][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.007692][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.030379][ T7623] nvme nvme41: creating 2 I/O queues.
[  272.153153][ T7623] nvme nvme41: new ctrl: "testsubsys"
[  272.229938][ T7630] overlayfs: conflicting options: nfs_export=on,index=off
[  272.285815][ T7631] netlink: 'syz.1.212': attribute type 11 has an invalid length.
[  272.285929][ T7631] netlink: 220 bytes leftover after parsing attributes in process `syz.1.212'.
[  273.221122][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.221254][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.770071][ T7647] overlayfs: missing 'lowerdir'
[  275.855009][ T7648] netlink: 'syz.1.215': attribute type 11 has an invalid length.
[  275.855168][ T7648] netlink: 220 bytes leftover after parsing attributes in process `syz.1.215'.
[  277.217001][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  277.224153][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  277.227821][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  277.242887][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  277.252656][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  278.626685][ T7674] Invalid ELF header magic: != ELF
[  279.425014][ T5633] Bluetooth: hci0: command tx timeout
[  280.998875][ T7695] Invalid ELF header magic: != ELF
[  281.613948][ T5633] Bluetooth: hci0: command tx timeout
[  281.841115][ T7705] nvmet: disable ns before setting buffered_io value.
[  281.854072][ T7705] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  282.987285][ T1007] nvmet: Created nvm controller 43 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  282.992704][ T7705] nvme nvme42: creating 2 I/O queues.
[  283.064760][ T7705] nvme nvme42: new ctrl: "testsubsys"
[  283.251762][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  283.263229][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  283.278575][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  283.287975][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  283.296984][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  283.369580][ T7730] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  283.601693][ T7738] warn_alloc: 1 callbacks suppressed
[  283.607285][ T7738] syz.1.225: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  283.607846][ T7738] CPU: 0 UID: 0 PID: 7738 Comm: syz.1.225 Not tainted syzkaller #0 PREEMPT(full) 
[  283.607874][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  283.607887][ T7738] Call Trace:
[  283.607896][ T7738]  <TASK>
[  283.607905][ T7738]  dump_stack_lvl+0xe8/0x150
[  283.607970][ T7738]  warn_alloc+0x24d/0x270
[  283.608006][ T7738]  ? __schedule+0x1b6d/0x5bc0
[  283.608039][ T7738]  ? __pfx_warn_alloc+0x10/0x10
[  283.608077][ T7738]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  283.608099][ T7738]  __vmalloc_node_range_noprof+0x127/0x1540
[  283.608125][ T7738]  ? __pfx___schedule+0x10/0x10
[  283.608155][ T7738]  ? irqentry_exit+0x218/0x910
[  283.608197][ T7738]  ? lockdep_hardirqs_on+0x7b/0x110
[  283.608226][ T7738]  ? irqentry_exit+0x218/0x910
[  283.608257][ T7738]  ? trace_irq_disable+0x3b/0x140
[  283.608276][ T7738]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  283.608308][ T7738]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  283.608331][ T7738]  vmalloc_noprof+0xb2/0xe0
[  283.608354][ T7738]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  283.608389][ T7738]  dvb_dvr_do_ioctl+0x12b/0x220
[  283.608413][ T7738]  dvb_usercopy+0x199/0x2e0
[  283.608429][ T7738]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  283.608449][ T7738]  ? __pfx_dvb_usercopy+0x10/0x10
[  283.608473][ T7738]  ? tomoyo_file_ioctl+0x11/0x30
[  283.608496][ T7738]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  283.608520][ T7738]  dvb_dvr_ioctl+0x29/0x40
[  283.608540][ T7738]  __se_sys_ioctl+0xfc/0x170
[  283.608557][ T7738]  do_syscall_64+0x166/0x520
[  283.608576][ T7738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.608592][ T7738]  ? clear_bhb_loop+0x70/0xc0
[  283.608610][ T7738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.608641][ T7738] RIP: 0033:0x7f2a99f9e0d9
[  283.608661][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.608678][ T7738] RSP: 002b:00007f2a9aea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  283.608710][ T7738] RAX: ffffffffffffffda RBX: 00007f2a9a226180 RCX: 00007f2a99f9e0d9
[  283.608724][ T7738] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  283.608737][ T7738] RBP: 00007f2a9a035024 R08: 0000000000000000 R09: 0000000000000000
[  283.608749][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.608762][ T7738] R13: 00007f2a9a226218 R14: 00007f2a9a226180 R15: 00007fff922a6588
[  283.608792][ T7738]  </TASK>
[  283.608860][ T7738] Mem-Info:
[  283.608869][ T7738] active_anon:6066 inactive_anon:0 isolated_anon:0
[  283.608869][ T7738]  active_file:0 inactive_file:61733 isolated_file:0
[  283.608869][ T7738]  unevictable:0 dirty:135 writeback:0
[  283.608869][ T7738]  slab_reclaimable:10450 slab_unreclaimable:95368
[  283.608869][ T7738]  mapped:29539 shmem:535 pagetables:1231
[  283.608869][ T7738]  sec_pagetables:0 bounce:0
[  283.608869][ T7738]  kernel_misc_reclaimable:0
[  283.608869][ T7738]  free:1303418 free_pcp:8517 free_cma:0
[  283.608920][ T7738] Node 0 active_anon:24264kB inactive_anon:0kB active_file:0kB inactive_file:246732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118156kB dirty:540kB writeback:0kB shmem:2140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12884kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  283.608971][ T7738] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  283.609041][ T7738] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  283.609311][ T7738] lowmem_reserve[]: 0 2487 2487 2487 2487
[  283.609450][ T7738] Node 0 DMA32 free:1259684kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24264kB inactive_anon:0kB active_file:0kB inactive_file:246732kB unevictable:0kB writepending:540kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:34068kB local_pcp:15156kB free_cma:0kB
[  283.609578][ T7738] lowmem_reserve[]: 0 0 0 0 0
[  283.609791][ T7738] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  283.609892][ T7738] lowmem_reserve[]: 0 0 0 0 0
[  283.610070][ T7738] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  283.610172][ T7738] lowmem_reserve[]: 0 0 0 0 0
[  283.610345][ T7738] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  283.610809][ T7738] Node 0 DMA32: 1079*4kB (M) 1141*8kB (UME) 880*16kB (UM) 767*32kB (UME) 522*64kB (UME) 273*128kB (M) 50*256kB (ME) 28*512kB (UM) 12*1024kB (UME) 5*2048kB (M) 266*4096kB (UM) = 1259620kB
[  283.611558][ T7738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  283.612016][ T7738] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  283.612938][ T7738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  283.612977][ T7738] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  283.613016][ T7738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  283.613055][ T7738] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  283.613094][ T7738] 62264 total pagecache pages
[  283.613127][ T7738] 0 pages in swap cache
[  283.613158][ T7738] Free swap  = 124996kB
[  283.613199][ T7738] Total swap = 124996kB
[  283.613231][ T7738] 2097051 pages RAM
[  283.613260][ T7738] 0 pages HighMem/MovableOnly
[  283.613290][ T7738] 428748 pages reserved
[  283.613347][ T7738] 0 pages cma reserved
[  283.660516][ T5633] Bluetooth: hci0: command tx timeout
[  284.810381][   T13] nvmet: Created nvm controller 44 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  285.005265][ T7730] nvme nvme43: creating 2 I/O queues.
[  285.042004][ T7730] nvme nvme43: new ctrl: "testsubsys"
[  285.339178][ T5633] Bluetooth: hci2: command tx timeout
[  285.740829][ T7758] Invalid ELF header magic: != ELF
[  285.753317][ T5633] Bluetooth: hci0: command tx timeout
[  286.631448][ T7764] Invalid ELF header magic: != ELF
[  287.138932][ T7774] Invalid ELF header magic: != ELF
[  287.440770][ T5633] Bluetooth: hci2: command tx timeout
[  288.011892][ T5855] bridge_slave_1: left allmulticast mode
[  288.011950][ T5855] bridge_slave_1: left promiscuous mode
[  288.012525][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.182775][ T5855] bridge_slave_0: left allmulticast mode
[  288.182840][ T5855] bridge_slave_0: left promiscuous mode
[  288.185199][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.516529][ T7800] nvmet: disable ns before setting buffered_io value.
[  288.526982][ T7800] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  288.663462][ T5850] nvmet: Created nvm controller 45 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  288.675857][ T7800] nvme nvme44: creating 2 I/O queues.
[  288.688339][ T7800] nvme nvme44: new ctrl: "testsubsys"
[  288.836134][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.857336][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.870666][ T5855] bond0 (unregistering): Released all slaves
[  289.117947][ T5855] hsr_slave_0: left promiscuous mode
[  289.129893][ T5855] hsr_slave_1: left promiscuous mode
[  289.133655][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.149368][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.499154][ T5633] Bluetooth: hci2: command tx timeout
[  289.636667][ T7817] Invalid ELF header magic: != ELF
[  290.522035][ T7825] nvmet: disable ns before setting buffered_io value.
[  290.547160][ T7825] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  290.736570][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  290.757621][   T12] nvmet: Created nvm controller 46 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  290.787051][ T7825] nvme nvme45: creating 2 I/O queues.
[  290.799113][ T7825] nvme nvme45: new ctrl: "testsubsys"
[  290.818204][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  291.111446][ T7836] Invalid ELF header magic: != ELF
[  291.581819][ T5633] Bluetooth: hci2: command tx timeout
[  292.013529][ T7831] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  293.370906][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9
[  293.646554][ T7850] overlayfs: conflicting options: nfs_export=on,index=off
[  294.802318][ T7859] nvmet: disable ns before setting buffered_io value.
[  294.813059][ T7859] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  295.231551][ T5848] nvmet: Created nvm controller 47 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  295.438073][ T7859] nvme nvme46: creating 2 I/O queues.
[  295.613378][ T7859] nvme nvme46: new ctrl: "testsubsys"
[  298.605763][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.606132][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.606527][ T7656] bridge_slave_0: entered allmulticast mode
[  298.692864][ T7656] bridge_slave_0: entered promiscuous mode
[  298.736359][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.737513][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.737875][ T7656] bridge_slave_1: entered allmulticast mode
[  298.797899][ T7656] bridge_slave_1: entered promiscuous mode
[  299.292580][ T7914] syz.1.244: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  299.292692][ T7914] CPU: 0 UID: 0 PID: 7914 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(full) 
[  299.292718][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  299.292731][ T7914] Call Trace:
[  299.292740][ T7914]  <TASK>
[  299.292749][ T7914]  dump_stack_lvl+0xe8/0x150
[  299.292787][ T7914]  warn_alloc+0x24d/0x270
[  299.292829][ T7914]  ? __pfx_warn_alloc+0x10/0x10
[  299.292869][ T7914]  ? __mutex_trylock_common+0x15f/0x270
[  299.292901][ T7914]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  299.292931][ T7914]  __vmalloc_node_range_noprof+0x127/0x1540
[  299.292962][ T7914]  ? rcu_is_watching+0x16/0xb0
[  299.292989][ T7914]  ? trace_contention_end+0x3d/0x140
[  299.293018][ T7914]  ? __mutex_lock+0x30b/0x1550
[  299.293053][ T7914]  ? tomoyo_path_number_perm+0x219/0x5f0
[  299.293097][ T7914]  ? tomoyo_path_number_perm+0x219/0x5f0
[  299.293127][ T7914]  ? dvb_dvr_do_ioctl+0x76/0x220
[  299.293159][ T7914]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  299.293197][ T7914]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  299.293227][ T7914]  vmalloc_noprof+0xb2/0xe0
[  299.293257][ T7914]  ? dvb_dvr_do_ioctl+0x12b/0x220
[  299.293288][ T7914]  dvb_dvr_do_ioctl+0x12b/0x220
[  299.293323][ T7914]  dvb_usercopy+0x199/0x2e0
[  299.293345][ T7914]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  299.293392][ T7914]  ? __pfx_dvb_usercopy+0x10/0x10
[  299.293429][ T7914]  ? __fget_files+0x3a2/0x420
[  299.293459][ T7914]  ? __fget_files+0x2a/0x420
[  299.293492][ T7914]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  299.293523][ T7914]  dvb_dvr_ioctl+0x29/0x40
[  299.293553][ T7914]  __se_sys_ioctl+0xfc/0x170
[  299.293579][ T7914]  do_syscall_64+0x166/0x520
[  299.293611][ T7914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.293636][ T7914]  ? clear_bhb_loop+0x70/0xc0
[  299.293663][ T7914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.293687][ T7914] RIP: 0033:0x7f2a99f9e0d9
[  299.293708][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.293728][ T7914] RSP: 002b:00007f2a9aec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  299.293751][ T7914] RAX: ffffffffffffffda RBX: 00007f2a9a226090 RCX: 00007f2a99f9e0d9
[  299.293768][ T7914] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  299.293783][ T7914] RBP: 00007f2a9a035024 R08: 0000000000000000 R09: 0000000000000000
[  299.293798][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.293812][ T7914] R13: 00007f2a9a226128 R14: 00007f2a9a226090 R15: 00007fff922a6588
[  299.293846][ T7914]  </TASK>
[  299.294061][ T7914] Mem-Info:
[  299.294326][ T7914] active_anon:6296 inactive_anon:0 isolated_anon:0
[  299.294326][ T7914]  active_file:0 inactive_file:61740 isolated_file:0
[  299.294326][ T7914]  unevictable:0 dirty:125 writeback:0
[  299.294326][ T7914]  slab_reclaimable:10523 slab_unreclaimable:94747
[  299.294326][ T7914]  mapped:29598 shmem:518 pagetables:1317
[  299.294326][ T7914]  sec_pagetables:0 bounce:0
[  299.294326][ T7914]  kernel_misc_reclaimable:0
[  299.294326][ T7914]  free:1311922 free_pcp:10279 free_cma:0
[  299.294419][ T7914] Node 0 active_anon:25184kB inactive_anon:0kB active_file:0kB inactive_file:246760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118392kB dirty:500kB writeback:0kB shmem:2072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12920kB pagetables:5140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  299.294564][ T7914] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  299.294716][ T7914] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  299.294961][ T7914] lowmem_reserve[]: 0 2487 2487 2487 2487
[  299.295572][ T7914] Node 0 DMA32 free:1293700kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25184kB inactive_anon:0kB active_file:0kB inactive_file:246760kB unevictable:0kB writepending:500kB zspages:0kB present:3129332kB managed:2546748kB mlocked:0kB bounce:0kB free_pcp:41116kB local_pcp:21304kB free_cma:0kB
[  299.310351][ T7914] lowmem_reserve[]: 0 0 0 0 0
[  299.311113][ T7914] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  299.311392][ T7914] lowmem_reserve[]: 0 0 0 0 0
[  299.311671][ T7914] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  299.311787][ T7914] lowmem_reserve[]: 0 0 0 0 0
[  299.312092][ T7914] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  299.312611][ T7914] Node 0 DMA32: 1262*4kB (UM) 1516*8kB (UME) 350*16kB (UM) 1007*32kB (UME) 544*64kB (UME) 277*128kB (UM) 52*256kB (ME) 28*512kB (UM) 12*1024kB (UME) 5*2048kB (M) 273*4096kB (UM) = 1293656kB
[  299.313424][ T7914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  299.313871][ T7914] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938628kB
[  299.314926][ T7914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  299.314965][ T7914] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  299.315038][ T7914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  299.315088][ T7914] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  299.315127][ T7914] 62254 total pagecache pages
[  299.315159][ T7914] 0 pages in swap cache
[  299.315191][ T7914] Free swap  = 124996kB
[  299.315225][ T7914] Total swap = 124996kB
[  299.315280][ T7914] 2097051 pages RAM
[  299.315313][ T7914] 0 pages HighMem/MovableOnly
[  299.315346][ T7914] 428748 pages reserved
[  299.315379][ T7914] 0 pages cma reserved
[  300.510098][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.769379][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.531576][ T7656] team0: Port device team_slave_0 added
[  301.559913][ T7656] team0: Port device team_slave_1 added
[  301.577385][ T7920] nvmet: disable ns before setting buffered_io value.
[  301.615935][ T7920] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  301.901170][ T6740] nvmet: Created nvm controller 48 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  301.923784][ T7920] nvme nvme47: creating 2 I/O queues.
[  301.936362][ T7931] nvmet: disable ns before setting buffered_io value.
[  301.953448][ T7920] nvme nvme47: new ctrl: "testsubsys"
[  301.962945][ T7931] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  302.083643][ T7919] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  302.644243][ T6742] nvmet: Created nvm controller 49 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  302.659285][ T7931] nvme nvme48: creating 2 I/O queues.
[  302.682560][ T7931] nvme nvme48: new ctrl: "testsubsys"
[  302.840153][ T5848] nvmet: Created nvm controller 50 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  302.883168][ T7941] nvme nvme49: creating 2 I/O queues.
[  302.907889][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.907942][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  302.907988][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.913355][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.918131][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.918521][ T7726] bridge_slave_0: entered allmulticast mode
[  302.946860][ T7726] bridge_slave_0: entered promiscuous mode
[  302.998965][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  302.999025][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  302.999069][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.999596][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.999692][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.001015][ T7726] bridge_slave_1: entered allmulticast mode
[  303.056446][ T7726] bridge_slave_1: entered promiscuous mode
[  303.076245][ T7941] nvme nvme49: new ctrl: "testsubsys"
[  303.378721][ T7952] Invalid ELF header magic: != ELF
[  303.946862][ T7726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.000733][ T7726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.185752][ T7983] overlayfs: conflicting options: nfs_export=on,index=off
[  306.702558][ T7985] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  307.023945][ T7726] team0: Port device team_slave_0 added
[  307.042074][ T7726] team0: Port device team_slave_1 added
[  307.261822][ T7996] overlayfs: conflicting options: nfs_export=on,index=off
[  307.327281][ T7656] hsr_slave_0: entered promiscuous mode
[  307.360699][ T7656] hsr_slave_1: entered promiscuous mode
[  307.886965][ T7999] nvmet: disable ns before setting buffered_io value.
[  307.971619][ T7999] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  308.092827][ T8001] nvmet: disable ns before setting buffered_io value.
[  308.262702][ T8001] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  308.369810][ T5857] nvmet: Created nvm controller 51 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  308.390487][ T7999] nvme nvme50: creating 2 I/O queues.
[  308.401868][ T7999] nvme nvme50: new ctrl: "testsubsys"
[  308.474972][ T6742] nvmet: Created nvm controller 52 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  308.531513][ T7726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.531558][ T7726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.531589][ T7726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.607740][ T8001] nvme nvme51: creating 2 I/O queues.
[  308.621607][ T7726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.621643][ T7726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.621672][ T7726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.681320][ T8001] nvme nvme51: new ctrl: "testsubsys"
[  309.045583][ T3006] nvmet: Created nvm controller 53 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  309.055447][ T8008] nvme nvme52: creating 2 I/O queues.
[  309.144382][ T8024] Invalid ELF header magic: != ELF
[  309.718009][ T8008] nvme nvme52: new ctrl: "testsubsys"
[  309.838151][ T8029] nvmet: disable ns before setting buffered_io value.
[  309.850000][ T8029] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  309.892124][ T7726] hsr_slave_0: entered promiscuous mode
[  309.900980][ T7726] hsr_slave_1: entered promiscuous mode
[  309.908973][ T7726] debugfs: 'hsr0' already exists in 'hsr'
[  309.916324][ T7726] Cannot create hsr debugfs directory
[  310.396245][ T8043] Invalid ELF header magic: != ELF
[  311.133465][ T5850] nvmet: Created nvm controller 54 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fcabab6-9d72-4d63-a7a0-40bc8d71b368.
[  311.161552][ T8029] nvme nvme53: creating 2 I/O queues.
[  311.175473][ T8029] blk-mq: failed to allocate request map
[  311.188874][ T8029] ------------[ cut here ]------------
[  311.188903][ T8029] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist)
[  311.188939][ T8029] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#1: syz.2.258/8029
[  311.214224][ T8029] Modules linked in:
[  311.218180][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) 
[  311.227541][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  311.237653][ T8029] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0
[  311.244099][ T8029] Code: c3 8b 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00
[  311.264049][ T8029] RSP: 0018:ffffc9000398f540 EFLAGS: 00010202
[  311.270168][ T8029] RAX: 1ffffd1ffff987c5 RBX: 0000607edafe9d40 RCX: dffffc0000000000
[  311.278183][ T8029] RDX: 0000000000000001 RSI: ffffffff8e477cab RDI: 00000000ffffffff
[  311.286368][ T8029] RBP: ffffe8ffffcc3d40 R08: ffffffff907a487f R09: 1ffffffff20f490f
[  311.294413][ T8029] R10: dffffc0000000000 R11: fffffbfff20f4910 R12: ffff88802a8b5000
[  311.302457][ T8029] R13: 0000000000000000 R14: ffffe8ffffcc3e28 R15: 1ffffffff1ce93de
[  311.310550][ T8029] FS:  00007f64b1dc86c0(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000
[  311.319559][ T8029] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  311.326198][ T8029] CR2: 0000001b33e0aff8 CR3: 0000000077198000 CR4: 00000000003526f0
[  311.334266][ T8029] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  311.337616][ T8029]  <TASK>
[  311.341167][ T8029]  ? blk_mq_alloc_tag_set+0xc52/0x1000
[  311.347137][ T8029]  blk_mq_alloc_tag_set+0xc77/0x1000
[  311.352781][ T8029]  nvme_alloc_io_tag_set+0x36a/0x6f0
[  311.358123][ T8029]  ? __pfx_nvme_alloc_io_tag_set+0x10/0x10
[  311.364076][ T8029]  ? __init_swait_queue_head+0xa8/0x150
[  311.371130][ T8029]  ? nvmet_sq_init+0xd9/0x2c0
[  311.375855][ T8029]  ? nvme_loop_init_io_queues+0x2f1/0x360
[  311.381745][ T8029]  ? __pfx_nvme_loop_init_io_queues+0x10/0x10
[  311.387852][ T8029]  ? __pfx_nvme_enable_ctrl+0x10/0x10
[  311.393281][ T8029]  ? __init_swait_queue_head+0xa8/0x150
[  311.398941][ T8029]  nvme_loop_create_io_queues+0x6b/0x350
[  311.404622][ T8029]  nvme_loop_create_ctrl+0x557/0x8c0
[  311.409989][ T8029]  nvmf_dev_write+0x24ca/0x2d90
[  311.414906][ T8029]  ? __pfx_nvmf_dev_write+0x10/0x10
[  311.420207][ T8029]  ? __pfx___futex_wait+0x10/0x10
[  311.425289][ T8029]  ? __pfx_futex_wake_mark+0x10/0x10
[  311.430715][ T8029]  ? bpf_lsm_file_permission+0x9/0x20
[  311.436108][ T8029]  ? security_file_permission+0x75/0x260
[  311.442048][ T8029]  ? rw_verify_area+0x203/0x4c0
[  311.446931][ T8029]  ? __pfx_nvmf_dev_write+0x10/0x10
[  311.452435][ T8029]  vfs_write+0x296/0xba0
[  311.456715][ T8029]  ? __pfx_vfs_write+0x10/0x10
[  311.461744][ T8029]  ? __fget_files+0x2a/0x420
[  311.466367][ T8029]  ? __fget_files+0x2a/0x420
[  311.471092][ T8029]  ? __fget_files+0x3a2/0x420
[  311.475783][ T8029]  ? __fget_files+0x2a/0x420
[  311.480426][ T8029]  ksys_write+0x150/0x270
[  311.484790][ T8029]  ? __pfx_ksys_write+0x10/0x10
[  311.489678][ T8029]  do_syscall_64+0x166/0x520
[  311.494278][ T8029]  ? trace_irq_disable+0x3b/0x140
[  311.499334][ T8029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.505420][ T8029]  ? clear_bhb_loop+0x70/0xc0
[  311.510127][ T8029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.516036][ T8029] RIP: 0033:0x7f64b0f9e0d9
[  311.520501][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.540275][ T8029] RSP: 002b:00007f64b1dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  311.548734][ T8029] RAX: ffffffffffffffda RBX: 00007f64b1225fa0 RCX: 00007f64b0f9e0d9
[  311.557031][ T8029] RDX: 000000000000001e RSI: 0000200000000800 RDI: 0000000000000004
[  311.565233][ T8029] RBP: 00007f64b1035024 R08: 0000000000000000 R09: 0000000000000000
[  311.573277][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.581294][ T8029] R13: 00007f64b1226038 R14: 00007f64b1225fa0 R15: 00007fff23bdeff8
[  311.589305][ T8029]  </TASK>
[  311.592339][ T8029] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  311.599631][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) 
[  311.608823][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  311.618892][ T8029] Call Trace:
[  311.622197][ T8029]  <TASK>
[  311.625130][ T8029]  vpanic+0x56d/0xa60
[  311.629122][ T8029]  ? __pfx__printk+0x10/0x10
[  311.633713][ T8029]  ? __pfx_vpanic+0x10/0x10
[  311.638240][ T8029]  ? is_bpf_text_address+0x292/0x2b0
[  311.643545][ T8029]  ? is_bpf_text_address+0x26/0x2b0
[  311.648754][ T8029]  panic+0xc5/0xd0
[  311.652489][ T8029]  ? __pfx_panic+0x10/0x10
[  311.656950][ T8029]  __warn+0x315/0x4c0
[  311.660968][ T8029]  ? cleanup_srcu_struct+0x3d6/0x8b0
[  311.666272][ T8029]  ? cleanup_srcu_struct+0x3d6/0x8b0
[  311.671558][ T8029]  __report_bug+0x276/0x570
[  311.676074][ T8029]  ? cleanup_srcu_struct+0x3d6/0x8b0
[  311.681361][ T8029]  ? __pfx___report_bug+0x10/0x10
[  311.686396][ T8029]  ? __pfx___schedule+0x10/0x10
[  311.691267][ T8029]  ? irqentry_exit+0x218/0x910
[  311.696044][ T8029]  ? cleanup_srcu_struct+0x3d6/0x8b0
[  311.701334][ T8029]  report_bug+0x16b/0x220
[  311.705677][ T8029]  ? cleanup_srcu_struct+0x3d6/0x8b0
[  311.710959][ T8029]  ? cleanup_srcu_struct+0x3d8/0x8b0
[  311.716245][ T8029]  handle_bug+0x9c/0x200
[  311.720498][ T8029]  exc_invalid_op+0x1a/0x50
[  311.725010][ T8029]  asm_exc_invalid_op+0x1a/0x20
[  311.729858][ T8029] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0
[  311.735763][ T8029] Code: c3 8b 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00
[  311.755382][ T8029] RSP: 0018:ffffc9000398f540 EFLAGS: 00010202
[  311.761482][ T8029] RAX: 1ffffd1ffff987c5 RBX: 0000607edafe9d40 RCX: dffffc0000000000
[  311.769483][ T8029] RDX: 0000000000000001 RSI: ffffffff8e477cab RDI: 00000000ffffffff
[  311.777466][ T8029] RBP: ffffe8ffffcc3d40 R08: ffffffff907a487f R09: 1ffffffff20f490f
[  311.785434][ T8029] R10: dffffc0000000000 R11: fffffbfff20f4910 R12: ffff88802a8b5000
[  311.793407][ T8029] R13: 0000000000000000 R14: ffffe8ffffcc3e28 R15: 1ffffffff1ce93de
[  311.801412][ T8029]  ? blk_mq_alloc_tag_set+0xc52/0x1000
[  311.806883][ T8029]  blk_mq_alloc_tag_set+0xc77/0x1000
[  311.812181][ T8029]  nvme_alloc_io_tag_set+0x36a/0x6f0
[  311.817474][ T8029]  ? __pfx_nvme_alloc_io_tag_set+0x10/0x10
[  311.823302][ T8029]  ? __init_swait_queue_head+0xa8/0x150
[  311.828879][ T8029]  ? nvmet_sq_init+0xd9/0x2c0
[  311.833583][ T8029]  ? nvme_loop_init_io_queues+0x2f1/0x360
[  311.839308][ T8029]  ? __pfx_nvme_loop_init_io_queues+0x10/0x10
[  311.845374][ T8029]  ? __pfx_nvme_enable_ctrl+0x10/0x10
[  311.850752][ T8029]  ? __init_swait_queue_head+0xa8/0x150
[  311.856313][ T8029]  nvme_loop_create_io_queues+0x6b/0x350
[  311.861958][ T8029]  nvme_loop_create_ctrl+0x557/0x8c0
[  311.867254][ T8029]  nvmf_dev_write+0x24ca/0x2d90
[  311.872258][ T8029]  ? __pfx_nvmf_dev_write+0x10/0x10
[  311.877478][ T8029]  ? __pfx___futex_wait+0x10/0x10
[  311.882516][ T8029]  ? __pfx_futex_wake_mark+0x10/0x10
[  311.887846][ T8029]  ? bpf_lsm_file_permission+0x9/0x20
[  311.893222][ T8029]  ? security_file_permission+0x75/0x260
[  311.898875][ T8029]  ? rw_verify_area+0x203/0x4c0
[  311.903763][ T8029]  ? __pfx_nvmf_dev_write+0x10/0x10
[  311.908996][ T8029]  vfs_write+0x296/0xba0
[  311.913306][ T8029]  ? __pfx_vfs_write+0x10/0x10
[  311.918078][ T8029]  ? __fget_files+0x2a/0x420
[  311.922766][ T8029]  ? __fget_files+0x2a/0x420
[  311.927379][ T8029]  ? __fget_files+0x3a2/0x420
[  311.932157][ T8029]  ? __fget_files+0x2a/0x420
[  311.936763][ T8029]  ksys_write+0x150/0x270
[  311.941119][ T8029]  ? __pfx_ksys_write+0x10/0x10
[  311.946002][ T8029]  do_syscall_64+0x166/0x520
[  311.950624][ T8029]  ? trace_irq_disable+0x3b/0x140
[  311.955657][ T8029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.961737][ T8029]  ? clear_bhb_loop+0x70/0xc0
[  311.966428][ T8029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.972328][ T8029] RIP: 0033:0x7f64b0f9e0d9
[  311.976745][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.996354][ T8029] RSP: 002b:00007f64b1dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  312.004775][ T8029] RAX: ffffffffffffffda RBX: 00007f64b1225fa0 RCX: 00007f64b0f9e0d9
[  312.012775][ T8029] RDX: 000000000000001e RSI: 0000200000000800 RDI: 0000000000000004
[  312.020752][ T8029] RBP: 00007f64b1035024 R08: 0000000000000000 R09: 0000000000000000
[  312.028725][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.036718][ T8029] R13: 00007f64b1226038 R14: 00007f64b1225fa0 R15: 00007fff23bdeff8
[  312.044714][ T8029]  </TASK>
[  312.048350][ T8029] Kernel Offset: disabled
[  312.052705][ T8029] Rebooting in 86400 seconds..