last executing test programs: 6.988716329s ago: executing program 2 (id=200): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00008cc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0xb8e1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.93074436s ago: executing program 1 (id=201): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 6.728828905s ago: executing program 2 (id=203): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.278530256s ago: executing program 1 (id=207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, &(0x7f00000005c0)) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, &(0x7f00000000c0)) 6.259319407s ago: executing program 3 (id=208): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 6.11305478s ago: executing program 2 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2, 0xf}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f338ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7", 0x1d}, {&(0x7f0000000740)="0b0080ad", 0x4}], 0x2}, 0x30008b08) 5.763461959s ago: executing program 1 (id=211): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 5.761476129s ago: executing program 2 (id=212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='usb1', 0x4) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdc3f}}, '\x00'}) 4.488301421s ago: executing program 3 (id=213): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{r0, 0x0, 0x10001, 0x0, 0x80, 0x0, &(0x7f0000000380)=0x1fc}, 0x1, &(0x7f0000000580)=[{0x3, 0x2, 0x0, 0x0, 0x0, 0x10}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000edf000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.633622381s ago: executing program 1 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='r:tes_/event1 ./file0:0', 0x17) 3.573072352s ago: executing program 0 (id=215): ioperm(0x1, 0x9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3.220310151s ago: executing program 3 (id=216): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1, 0x8e1, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79bed3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dfabb2ddb7201000000a96d081abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0xcc014}, 0x4040014) 2.673195034s ago: executing program 0 (id=217): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.644613355s ago: executing program 2 (id=218): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) 2.634966406s ago: executing program 1 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000005c0)) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000000c0)) 2.44914675s ago: executing program 3 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2, 0xf}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f338ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7", 0x1d}, {&(0x7f0000000740)="0b0080ad", 0x4}], 0x2}, 0x30008b08) 2.196298617s ago: executing program 3 (id=221): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 1.781937396s ago: executing program 0 (id=222): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x20002800) 1.171665351s ago: executing program 2 (id=223): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048060}, 0x7785b04bde9c4494) ioctl(r0, 0xc138fd08, &(0x7f0000000000)="0400000000000000000000003801") 1.036963125s ago: executing program 0 (id=224): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{r0, 0x0, 0x10001, 0x0, 0x80, 0x0, &(0x7f0000000380)=0x1fc}, 0x1, &(0x7f0000000580)=[{0x3, 0x2, 0x0, 0x0, 0x0, 0x10}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000edf000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 931.978727ms ago: executing program 0 (id=225): ioperm(0x1, 0x9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 828.88345ms ago: executing program 0 (id=226): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='usb1', 0x4) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdc3f}}, '\x00'}) 507.002138ms ago: executing program 3 (id=227): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8) fcntl$getown(r0, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x1c0, 0x3a, 0x100, 0x8000, 0x25dfdbfa, {0xff}, [@typed={0xc, 0x130, 0x0, 0x0, @u64=0xfffffffffffffff6}, @generic="07d38e59d83f43d1bbc6b2d857f15c097f2c0061bc48", @generic, @nested={0x144, 0x57, 0x0, 0x1, [@nested={0x140, 0x8c, 0x0, 0x1, [@nested={0x4, 0xed}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@local}, @generic="c8a973863e6688e98bbb9651914582aee9b9a321156bb67db13e464c5925a719325326b26ba12700d16428ccb7c6e2bbd0d6ccdd2ad785cee79867749b1556150bdcdde2b71322a3837073bd41ea552b8b7fc7e39c7434217aed", @generic, @typed={0x8, 0xdf, 0x0, 0x0, @uid=r1}, @typed={0x4, 0x91}, @generic="6d82140239a7ba920f9bb8d44cc1caf19ad8c4a2088b571ec72255c0d998e4304f98fbb9af56cd1f54fa0a580b7a2d4a2256a2fd3947fdcf7f0f14f243fff1f495926093940a41c214407fde16247dac5d05132c2bfec03780442cf46c1f46d8dcc67f15caafd9ea0c6cfd0fe2b569af3721da8e17c2cba16f21f6378ac1b08ba4bf0d2e90c2198fe31a2aac1bf4d0073d967095e54c96a056262a0bb206e2d2b41e41098758cf3c2ee7bd97eeafac2f9b84fbf625bc758fe1f1154b8a6a"]}]}, @nested={0x4, 0xf1}, @nested={0x40, 0x132, 0x0, 0x1, [@typed={0xc, 0xdd, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0xd0}, @nested={0x29, 0x48, 0x0, 0x1, [@nested={0x4, 0x59}, @nested={0x4, 0xd5}, @typed={0x8, 0xcc, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x16b, 0x0, 0x0, @u64=0x5}, @generic="ecb55eecae", @typed={0x4, 0x4d}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 0s ago: executing program 1 (id=228): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 75.078585][ T5757] cgroup: Unknown subsys name 'net' [ 75.230727][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.580323][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.704824][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.705190][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.713660][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.721059][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.727568][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.734249][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.741925][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.755453][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.763593][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.771032][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.782559][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.790217][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.834916][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.847673][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.865106][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.872694][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.881757][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.888927][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.897101][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.904553][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.912725][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.921234][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.930326][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.945740][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.175202][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 79.325988][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.333707][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.341230][ T5771] bridge_slave_0: entered allmulticast mode [ 79.348190][ T5771] bridge_slave_0: entered promiscuous mode [ 79.359874][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.367104][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.374997][ T5771] bridge_slave_1: entered allmulticast mode [ 79.381675][ T5771] bridge_slave_1: entered promiscuous mode [ 79.427237][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 79.489403][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.502371][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.565754][ T5771] team0: Port device team_slave_0 added [ 79.571852][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 79.592071][ T5771] team0: Port device team_slave_1 added [ 79.650922][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.658749][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.684775][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.698443][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.705461][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.731431][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.793177][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.800588][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.808791][ T5776] bridge_slave_0: entered allmulticast mode [ 79.816117][ T5776] bridge_slave_0: entered promiscuous mode [ 79.858532][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.865953][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.873072][ T5776] bridge_slave_1: entered allmulticast mode [ 79.880844][ T5776] bridge_slave_1: entered promiscuous mode [ 79.898497][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.905682][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.912843][ T5767] bridge_slave_0: entered allmulticast mode [ 79.919779][ T5767] bridge_slave_0: entered promiscuous mode [ 79.926712][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 79.969824][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.977089][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.984384][ T5767] bridge_slave_1: entered allmulticast mode [ 79.991059][ T5767] bridge_slave_1: entered promiscuous mode [ 80.018933][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.032533][ T5771] hsr_slave_0: entered promiscuous mode [ 80.039001][ T5771] hsr_slave_1: entered promiscuous mode [ 80.074854][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.086532][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.122354][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.151887][ T5776] team0: Port device team_slave_0 added [ 80.160016][ T5776] team0: Port device team_slave_1 added [ 80.195194][ T5767] team0: Port device team_slave_0 added [ 80.222968][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.230042][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.256243][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.276329][ T5767] team0: Port device team_slave_1 added [ 80.302207][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.309810][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.338962][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.372192][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.379897][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.387216][ T5780] bridge_slave_0: entered allmulticast mode [ 80.393902][ T5780] bridge_slave_0: entered promiscuous mode [ 80.423355][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.430657][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.438235][ T5780] bridge_slave_1: entered allmulticast mode [ 80.445007][ T5780] bridge_slave_1: entered promiscuous mode [ 80.462443][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.469617][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.496137][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.508274][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.515615][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.541656][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.598271][ T5776] hsr_slave_0: entered promiscuous mode [ 80.604967][ T5776] hsr_slave_1: entered promiscuous mode [ 80.610988][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.619081][ T5776] Cannot create hsr debugfs directory [ 80.636912][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.649779][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.742230][ T5780] team0: Port device team_slave_0 added [ 80.761851][ T5767] hsr_slave_0: entered promiscuous mode [ 80.770023][ T5767] hsr_slave_1: entered promiscuous mode [ 80.778730][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.786485][ T5767] Cannot create hsr debugfs directory [ 80.799035][ T5780] team0: Port device team_slave_1 added [ 80.815031][ T5086] Bluetooth: hci1: command tx timeout [ 80.815577][ T5770] Bluetooth: hci0: command tx timeout [ 80.863929][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.871451][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.897533][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.945970][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.952967][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.979216][ T5770] Bluetooth: hci3: command tx timeout [ 80.985442][ T5770] Bluetooth: hci2: command tx timeout [ 80.991278][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.045271][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.075563][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.127480][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.139329][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.153659][ T5780] hsr_slave_0: entered promiscuous mode [ 81.160478][ T5780] hsr_slave_1: entered promiscuous mode [ 81.166956][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.175450][ T5780] Cannot create hsr debugfs directory [ 81.346534][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.361437][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.389482][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.419801][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.484538][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.494584][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.504042][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.525564][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.605299][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.612200][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.625597][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.636359][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.646317][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.733240][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.757790][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.765119][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.822839][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.829983][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.959323][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.972356][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.007891][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.031176][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.060256][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.067447][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.110359][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.139645][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.146883][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.185842][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.211243][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.218465][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.276009][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.283208][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.296577][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.303762][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.362337][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.369543][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.532429][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.678542][ T5771] veth0_vlan: entered promiscuous mode [ 82.721353][ T5771] veth1_vlan: entered promiscuous mode [ 82.805945][ T5771] veth0_macvtap: entered promiscuous mode [ 82.836027][ T5771] veth1_macvtap: entered promiscuous mode [ 82.888641][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.894879][ T5086] Bluetooth: hci1: command tx timeout [ 82.899500][ T5770] Bluetooth: hci0: command tx timeout [ 82.949420][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.978701][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.989550][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.000750][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.009748][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.023955][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.037228][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.054593][ T5770] Bluetooth: hci2: command tx timeout [ 83.055987][ T5086] Bluetooth: hci3: command tx timeout [ 83.107067][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.226383][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.239831][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.269507][ T5776] veth0_vlan: entered promiscuous mode [ 83.300180][ T5776] veth1_vlan: entered promiscuous mode [ 83.307584][ T5767] veth0_vlan: entered promiscuous mode [ 83.320028][ T5780] veth0_vlan: entered promiscuous mode [ 83.327586][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.340964][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.362125][ T5780] veth1_vlan: entered promiscuous mode [ 83.417216][ T5767] veth1_vlan: entered promiscuous mode [ 83.437896][ T5776] veth0_macvtap: entered promiscuous mode [ 83.451345][ T5776] veth1_macvtap: entered promiscuous mode [ 83.511237][ T5780] veth0_macvtap: entered promiscuous mode [ 83.540440][ T5780] veth1_macvtap: entered promiscuous mode [ 83.580735][ T5767] veth0_macvtap: entered promiscuous mode [ 83.598863][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.610927][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.623415][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.646153][ T5767] veth1_macvtap: entered promiscuous mode [ 83.655504][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.673412][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.683789][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.695484][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.716582][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.727847][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.738729][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.750068][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.764431][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.773159][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.782843][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.791668][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.805945][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.817840][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.827760][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.839409][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.851497][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.890772][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.920381][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.930436][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.943547][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.963578][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.033773][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.050261][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.063759][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.074968][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.086170][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.097084][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.115583][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.305491][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.184556][ T5086] Bluetooth: hci1: command tx timeout [ 85.190031][ T5086] Bluetooth: hci0: command tx timeout [ 85.195670][ T5770] Bluetooth: hci2: command tx timeout [ 85.195767][ T5773] Bluetooth: hci3: command tx timeout [ 85.274625][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.295743][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.312105][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.322447][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.334525][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.345568][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.361578][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.370538][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.394364][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.404183][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.423219][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.433351][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.551852][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.576750][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.636515][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.644733][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.741109][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.760245][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.799963][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.809309][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.906273][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.927578][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.630507][ T5867] syz.3.8[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.755977][ T5867] loop3: detected capacity change from 0 to 512 [ 86.850119][ T5867] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.875867][ T5867] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 86.908495][ T790] cfg80211: failed to load regulatory.db [ 86.914407][ T5867] System zones: 0-1, 15-15, 18-18, 34-34 [ 86.929853][ T5867] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.957087][ T5867] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 86.966824][ T5867] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.996807][ T5867] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 87.039758][ T5867] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.8: bad orphan inode 16 [ 87.072276][ T5867] ext4_test_bit(bit=15, block=18) = 1 [ 87.093738][ T5867] is_bad_inode(inode)=0 [ 87.104344][ T5867] NEXT_ORPHAN(inode)=0 [ 87.108459][ T5867] max_ino=32 [ 87.122159][ T5867] i_nlink=2 [ 87.137242][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.217010][ T5773] Bluetooth: hci0: command tx timeout [ 87.217158][ T5086] Bluetooth: hci2: command tx timeout [ 87.222544][ T5773] Bluetooth: hci1: command tx timeout [ 87.301789][ T5773] Bluetooth: hci3: command tx timeout [ 87.661716][ T5882] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 88.116985][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.332493][ T5888] loop3: detected capacity change from 0 to 512 [ 88.372848][ T5888] ======================================================= [ 88.372848][ T5888] WARNING: The mand mount option has been deprecated and [ 88.372848][ T5888] and is ignored by this kernel. Remove the mand [ 88.372848][ T5888] option from the mount to silence this warning. [ 88.372848][ T5888] ======================================================= [ 88.475548][ T5888] EXT4-fs (loop3): failed to initialize system zone (-117) [ 88.483001][ T5888] EXT4-fs (loop3): mount failed [ 89.538194][ T5909] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.547551][ T5909] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.556667][ T5909] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.565798][ T5909] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.748569][ T5915] loop0: detected capacity change from 0 to 1024 [ 89.833306][ T5915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.867150][ T5921] loop2: detected capacity change from 0 to 512 [ 89.961110][ T5921] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 90.005508][ T5921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 90.027062][ T5915] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.24: directory missing '..' [ 90.050986][ T5921] System zones: 0-1, 15-15, 18-18, 34-34 [ 90.069005][ T5921] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.090739][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.197599][ T5921] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 90.276011][ T5921] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 90.373066][ T5921] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 90.415904][ T5921] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.28: bad orphan inode 16 [ 90.464387][ T5921] ext4_test_bit(bit=15, block=18) = 1 [ 90.469829][ T5921] is_bad_inode(inode)=0 [ 90.474030][ T5921] NEXT_ORPHAN(inode)=0 [ 90.483289][ T5921] max_ino=32 [ 90.495990][ T5921] i_nlink=2 [ 90.500662][ T5921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.860375][ T5935] Zero length message leads to an empty skb [ 90.976316][ T5939] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 91.422419][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.008720][ T5972] loop3: detected capacity change from 0 to 128 [ 92.079612][ T5972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.116169][ T5972] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.242965][ T5985] loop0: detected capacity change from 0 to 512 [ 92.328550][ T5985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.420182][ T5985] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.487131][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.565397][ T27] audit: type=1800 audit(1787321052.964:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.52" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 92.706630][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.360413][ T6012] loop3: detected capacity change from 0 to 128 [ 93.385165][ T6014] loop2: detected capacity change from 0 to 512 [ 93.430783][ T6014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.432232][ T6012] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.456122][ T6012] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.544460][ T6014] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.648228][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.673527][ T27] audit: type=1800 audit(1787321054.074:3): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 93.798320][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.410239][ T6042] loop3: detected capacity change from 0 to 128 [ 94.438324][ T6042] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.451185][ T6042] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.572233][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.995211][ T6054] netlink: 256 bytes leftover after parsing attributes in process `syz.2.81'. [ 95.029840][ T6054] netlink: 72 bytes leftover after parsing attributes in process `syz.2.81'. [ 95.544933][ T6074] netlink: 1 bytes leftover after parsing attributes in process `syz.0.91'. [ 95.670352][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 96.330501][ T6098] loop2: detected capacity change from 0 to 1024 [ 96.439636][ T6098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.729552][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.854878][ T6105] loop0: detected capacity change from 0 to 4096 [ 96.947238][ T6109] netlink: 'syz.1.104': attribute type 10 has an invalid length. [ 97.541687][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.836953][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 97.883362][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 97.923128][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.957740][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.105'. [ 97.996687][ T6115] ip6erspan0: entered promiscuous mode [ 98.256074][ T6129] loop0: detected capacity change from 0 to 1024 [ 98.316457][ T6129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.583118][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.983307][ T6150] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 99.224536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.960279][ T6150] team0 (unregistering): Port device team_slave_0 removed [ 100.027322][ T6150] team0 (unregistering): Port device team_slave_1 removed [ 100.746371][ T6179] loop3: detected capacity change from 0 to 512 [ 100.817391][ T6179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.890244][ T6179] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.064496][ T6188] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 101.801890][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.352923][ T6208] loop2: detected capacity change from 0 to 512 [ 102.401225][ T6208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.501457][ T6208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.583626][ T6208] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.888226][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.442269][ T6255] loop0: detected capacity change from 0 to 512 [ 104.548200][ T6255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.611436][ T6255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.674756][ T6255] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.964841][ T6266] loop3: detected capacity change from 0 to 4096 [ 105.072931][ T6266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.091304][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.191558][ T6276] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.406497][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.635456][ T6287] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 106.530221][ T6287] team0 (unregistering): Port device team_slave_0 removed [ 106.561706][ T6294] loop0: detected capacity change from 0 to 512 [ 106.574024][ T6294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.620059][ T6294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.635803][ T6287] team0 (unregistering): Port device team_slave_1 removed [ 106.657370][ T6294] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.036638][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.150579][ T6309] loop1: detected capacity change from 0 to 512 [ 107.183284][ T6309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.196252][ T6309] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.266396][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.434624][ T6319] loop2: detected capacity change from 0 to 512 [ 107.538025][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.647871][ T6319] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.678630][ T27] audit: type=1800 audit(1787321068.074:4): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.191" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 107.799593][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.818247][ T6332] loop1: detected capacity change from 0 to 512 [ 107.830365][ T6332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.888820][ T6332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.901992][ T6332] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.232641][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.345513][ T6342] netlink: 'syz.3.197': attribute type 10 has an invalid length. [ 109.492292][ T6350] loop1: detected capacity change from 0 to 4096 [ 109.530285][ T6353] loop3: detected capacity change from 0 to 4096 [ 109.533800][ T6355] loop2: detected capacity change from 0 to 512 [ 109.593895][ T6350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.640731][ T6353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.721072][ T6363] loop0: detected capacity change from 0 to 512 [ 109.733514][ T6363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.758583][ T6355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.844647][ T6355] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.902835][ T6363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.915759][ T27] audit: type=1800 audit(1787321070.304:5): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.203" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 109.949462][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.965932][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.980821][ T6363] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.004977][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.202481][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.011243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 112.033968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 112.057114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 112.434143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 113.643662][ T6398] loop0: detected capacity change from 0 to 512 [ 113.841488][ T6398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.929901][ T6398] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.017990][ T6403] loop2: detected capacity change from 0 to 4096 [ 114.030219][ T27] audit: type=1800 audit(1787321074.434:6): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.217" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 114.110424][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.382282][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.992234][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.509706][ T6425] ------------[ cut here ]------------ [ 116.515652][ T6425] WARNING: CPU: 1 PID: 6425 at net/core/flow_dissector.c:1107 __skb_flow_dissect+0xb05/0x6e70 [ 116.526042][ T6425] Modules linked in: [ 116.531575][ T6425] CPU: 1 PID: 6425 Comm: syz.3.227 Not tainted syzkaller #0 [ 116.538955][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.549091][ T6425] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 116.555102][ T6425] Code: c6 e8 7f 5c 06 f9 85 db 0f 84 9a 06 00 00 80 3d 24 d4 f5 05 01 0f 85 c0 06 00 00 e8 b5 58 06 f9 e9 d5 f9 ff ff e8 ab 58 06 f9 <0f> 0b e8 b4 46 0e 02 89 c3 31 ff 89 c6 e8 49 5c 06 f9 85 db 74 18 [ 116.574919][ T6425] RSP: 0018:ffffc90018e1d900 EFLAGS: 00010283 [ 116.581022][ T6425] RAX: ffffffff888119c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 116.589223][ T6425] RDX: ffffc9000df9e000 RSI: 0000000000001acd RDI: 0000000000001ace [ 116.597291][ T6425] RBP: ffffc90018e1df18 R08: dffffc0000000000 R09: 1ffffffff223dca0 [ 116.605390][ T6425] R10: dffffc0000000000 R11: fffffbfff223dca1 R12: ffffffff8e8ceff8 [ 116.613387][ T6425] R13: 1ffffffff1d19e00 R14: ffffffff8e8cf002 R15: dffffc0000000000 [ 116.621701][ T6425] FS: 00007fbd452526c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 116.631038][ T6425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.639235][ T6425] CR2: 00007fc2e0d556c8 CR3: 000000002edf6000 CR4: 00000000003506e0 [ 116.647443][ T6425] Call Trace: [ 116.650752][ T6425] [ 116.653729][ T6425] ? __skb_flow_dissect+0x1eb/0x6e70 [ 116.659149][ T6425] ? bpf_flow_dissect+0x3f0/0x3f0 [ 116.664299][ T6425] ? mark_lock+0x94/0x320 [ 116.668674][ T6425] ? __lock_acquire+0x1262/0x7d80 [ 116.673760][ T6425] ? mark_lock+0x94/0x320 [ 116.678188][ T6425] ? __lock_acquire+0x1336/0x7d80 [ 116.683258][ T6425] ? mark_lock+0x94/0x320 [ 116.687652][ T6425] __skb_get_hash+0xf3/0x2e0 [ 116.692282][ T6425] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 116.698105][ T6425] nft_trace_init+0x1bb/0x420 [ 116.702814][ T6425] ? nf_trace_fill_pkt_info+0x870/0x870 [ 116.708435][ T6425] ? mark_lock+0x94/0x320 [ 116.712805][ T6425] nft_do_chain+0x1523/0x1620 [ 116.717563][ T6425] ? __local_bh_enable_ip+0x13a/0x1c0 [ 116.722965][ T6425] ? lockdep_hardirqs_on+0x98/0x150 [ 116.728228][ T6425] ? __local_bh_enable_ip+0x13a/0x1c0 [ 116.733630][ T6425] ? _local_bh_enable+0xa0/0xa0 [ 116.740048][ T6425] ? __local_bh_enable_ip+0x13a/0x1c0 [ 116.745622][ T6425] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 116.751558][ T6425] ? ipt_do_table+0x13b3/0x15c0 [ 116.756507][ T6425] ? nf_nat_inet_fn+0x90b/0xb20 [ 116.761407][ T6425] nft_do_chain_inet+0x29b/0x380 [ 116.766401][ T6425] ? nft_do_chain_arp+0x110/0x110 [ 116.771456][ T6425] ? ipt_do_table+0x2c5/0x15c0 [ 116.776311][ T6425] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 116.781720][ T6425] ? nft_do_chain_arp+0x110/0x110 [ 116.786833][ T6425] nf_hook_slow+0xbd/0x200 [ 116.791284][ T6425] ? nf_hook+0x390/0x390 [ 116.795624][ T6425] nf_hook+0x228/0x390 [ 116.799728][ T6425] ? nf_hook+0xa2/0x390 [ 116.803904][ T6425] ? __ip_local_out+0x5f0/0x5f0 [ 116.808814][ T6425] ? nf_hook+0x390/0x390 [ 116.813096][ T6425] ? nf_ct_set_closing+0x23/0x230 [ 116.818214][ T6425] ? ip_fast_csum+0x1ee/0x2b0 [ 116.822929][ T6425] __ip_local_out+0x4db/0x5f0 [ 116.827681][ T6425] ? nf_hook+0x390/0x390 [ 116.831960][ T6425] ip_local_out+0x2a/0x130 [ 116.836460][ T6425] nf_send_reset+0xebd/0x16b0 [ 116.842706][ T6425] ? skb_put_data+0x30/0x30 [ 116.847413][ T6425] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 116.852741][ T6425] ? siphash_3u32+0x25/0x250 [ 116.857437][ T6425] ? nft_trace_init+0x211/0x420 [ 116.862316][ T6425] ? _local_bh_enable+0xa0/0xa0 [ 116.867226][ T6425] ? nf_trace_fill_pkt_info+0x870/0x870 [ 116.872804][ T6425] nft_reject_inet_eval+0x3ad/0x680 [ 116.878177][ T6425] nft_do_chain+0x44b/0x1620 [ 116.882810][ T6425] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 116.888767][ T6425] ? ipt_alloc_initial_table+0x610/0x610 [ 116.894586][ T6425] ? ipt_do_table+0x13b3/0x15c0 [ 116.899487][ T6425] ? nf_nat_inet_fn+0x90b/0xb20 [ 116.904432][ T6425] nft_do_chain_inet+0x29b/0x380 [ 116.909399][ T6425] ? nft_do_chain_arp+0x110/0x110 [ 116.914512][ T6425] ? ipt_do_table+0x2c5/0x15c0 [ 116.919318][ T6425] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 116.924780][ T6425] ? nft_do_chain_arp+0x110/0x110 [ 116.929832][ T6425] nf_hook_slow+0xbd/0x200 [ 116.934329][ T6425] ? nf_hook+0x390/0x390 [ 116.938641][ T6425] nf_hook+0x228/0x390 [ 116.944275][ T6425] ? nf_hook+0xa2/0x390 [ 116.948469][ T6425] ? __ip_local_out+0x5f0/0x5f0 [ 116.953350][ T6425] ? nf_hook+0x390/0x390 [ 116.957843][ T6425] ? __lock_acquire+0x7d80/0x7d80 [ 116.962915][ T6425] __ip_local_out+0x4db/0x5f0 [ 116.967652][ T6425] ? nf_hook+0x390/0x390 [ 116.971927][ T6425] ? __ip_queue_xmit+0x5d/0x1960 [ 116.980610][ T6425] __ip_queue_xmit+0xf89/0x1960 [ 116.986511][ T6425] ? __ip_queue_xmit+0x5d/0x1960 [ 116.991488][ T6425] __tcp_transmit_skb+0x1dd6/0x3470 [ 116.996835][ T6425] ? __tcp_send_ack+0x5a0/0x5a0 [ 117.001736][ T6425] ? tcp_fastopen_cookie_check+0x26d/0x3c0 [ 117.007598][ T6425] tcp_connect+0x3377/0x5300 [ 117.012261][ T6425] ? tcp_options_write+0xc70/0xc70 [ 117.017470][ T6425] ? get_random_u16+0x16e/0x990 [ 117.022357][ T6425] ? get_random_u16+0x517/0x990 [ 117.027298][ T6425] ? __asan_memset+0x22/0x40 [ 117.031928][ T6425] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 117.038631][ T6425] ? dst_release+0x72/0x1a0 [ 117.044723][ T6425] tcp_v4_connect+0xf99/0x18a0 [ 117.049550][ T6425] ? tcp_twsk_unique+0x970/0x970 [ 117.054754][ T6425] __inet_stream_connect+0x254/0xdf0 [ 117.060087][ T6425] ? inet_dgram_connect+0x340/0x340 [ 117.065370][ T6425] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 117.070612][ T6425] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 117.075912][ T6425] ? verify_lock_unused+0x140/0x140 [ 117.081154][ T6425] ? __might_sleep+0xe0/0xe0 [ 117.085823][ T6425] ? mark_lock+0x94/0x320 [ 117.090186][ T6425] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 117.096260][ T6425] ? lock_chain_count+0x20/0x20 [ 117.101144][ T6425] ? tcp_set_state+0x6c0/0x6c0 [ 117.105990][ T6425] tcp_sendmsg+0x2f/0x50 [ 117.110262][ T6425] ? inet_send_prepare+0x250/0x250 [ 117.115448][ T6425] ____sys_sendmsg+0x61b/0x980 [ 117.120242][ T6425] ? __asan_memset+0x22/0x40 [ 117.124892][ T6425] ? __sys_sendmsg_sock+0x30/0x30 [ 117.129944][ T6425] ? __import_iovec+0x3fa/0x850 [ 117.135373][ T6425] ? import_iovec+0x73/0xa0 [ 117.139910][ T6425] ___sys_sendmsg+0x2a6/0x360 [ 117.146118][ T6425] ? __sys_sendmsg+0x2b0/0x2b0 [ 117.150970][ T6425] __se_sys_sendmsg+0x1d0/0x2c0 [ 117.156054][ T6425] ? __x64_sys_sendmsg+0x80/0x80 [ 117.161038][ T6425] ? lockdep_hardirqs_on+0x98/0x150 [ 117.166303][ T6425] do_syscall_64+0x55/0xb0 [ 117.170744][ T6425] ? clear_bhb_loop+0x40/0x90 [ 117.175505][ T6425] ? clear_bhb_loop+0x40/0x90 [ 117.180211][ T6425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.186154][ T6425] RIP: 0033:0x7fbd4439e0d9 [ 117.190604][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.210292][ T6425] RSP: 002b:00007fbd45252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.218975][ T6425] RAX: ffffffffffffffda RBX: 00007fbd44626090 RCX: 00007fbd4439e0d9 [ 117.227018][ T6425] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 0000000000000009 [ 117.235043][ T6425] RBP: 00007fbd44435024 R08: 0000000000000000 R09: 0000000000000000 [ 117.243033][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.252590][ T6425] R13: 00007fbd44626128 R14: 00007fbd44626090 R15: 00007ffc07796338 [ 117.260788][ T6425] [ 117.263845][ T6425] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.271146][ T6425] CPU: 1 PID: 6425 Comm: syz.3.227 Not tainted syzkaller #0 [ 117.278448][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.288518][ T6425] Call Trace: [ 117.291815][ T6425] [ 117.294760][ T6425] dump_stack_lvl+0x18c/0x250 [ 117.299462][ T6425] ? show_regs_print_info+0x20/0x20 [ 117.304685][ T6425] ? load_image+0x420/0x420 [ 117.309214][ T6425] panic+0x2ca/0x720 [ 117.313140][ T6425] ? bpf_jit_dump+0xd0/0xd0 [ 117.317692][ T6425] __warn+0x2e0/0x470 [ 117.321694][ T6425] ? __skb_flow_dissect+0xb05/0x6e70 [ 117.327000][ T6425] ? __skb_flow_dissect+0xb05/0x6e70 [ 117.332308][ T6425] report_bug+0x2be/0x4f0 [ 117.336663][ T6425] ? __skb_flow_dissect+0xb05/0x6e70 [ 117.341971][ T6425] ? __skb_flow_dissect+0xb05/0x6e70 [ 117.347275][ T6425] ? __skb_flow_dissect+0xb07/0x6e70 [ 117.352583][ T6425] handle_bug+0xcf/0x120 [ 117.356850][ T6425] exc_invalid_op+0x1a/0x50 [ 117.361372][ T6425] asm_exc_invalid_op+0x1a/0x20 [ 117.366243][ T6425] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 117.372155][ T6425] Code: c6 e8 7f 5c 06 f9 85 db 0f 84 9a 06 00 00 80 3d 24 d4 f5 05 01 0f 85 c0 06 00 00 e8 b5 58 06 f9 e9 d5 f9 ff ff e8 ab 58 06 f9 <0f> 0b e8 b4 46 0e 02 89 c3 31 ff 89 c6 e8 49 5c 06 f9 85 db 74 18 [ 117.391779][ T6425] RSP: 0018:ffffc90018e1d900 EFLAGS: 00010283 [ 117.397868][ T6425] RAX: ffffffff888119c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 117.405854][ T6425] RDX: ffffc9000df9e000 RSI: 0000000000001acd RDI: 0000000000001ace [ 117.413840][ T6425] RBP: ffffc90018e1df18 R08: dffffc0000000000 R09: 1ffffffff223dca0 [ 117.421824][ T6425] R10: dffffc0000000000 R11: fffffbfff223dca1 R12: ffffffff8e8ceff8 [ 117.429811][ T6425] R13: 1ffffffff1d19e00 R14: ffffffff8e8cf002 R15: dffffc0000000000 [ 117.437808][ T6425] ? __skb_flow_dissect+0xb05/0x6e70 [ 117.443130][ T6425] ? __skb_flow_dissect+0x1eb/0x6e70 [ 117.448470][ T6425] ? bpf_flow_dissect+0x3f0/0x3f0 [ 117.453579][ T6425] ? mark_lock+0x94/0x320 [ 117.457936][ T6425] ? __lock_acquire+0x1262/0x7d80 [ 117.462998][ T6425] ? mark_lock+0x94/0x320 [ 117.467354][ T6425] ? __lock_acquire+0x1336/0x7d80 [ 117.472443][ T6425] ? mark_lock+0x94/0x320 [ 117.476796][ T6425] __skb_get_hash+0xf3/0x2e0 [ 117.481409][ T6425] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 117.487171][ T6425] nft_trace_init+0x1bb/0x420 [ 117.491871][ T6425] ? nf_trace_fill_pkt_info+0x870/0x870 [ 117.497432][ T6425] ? mark_lock+0x94/0x320 [ 117.501788][ T6425] nft_do_chain+0x1523/0x1620 [ 117.506488][ T6425] ? __local_bh_enable_ip+0x13a/0x1c0 [ 117.511881][ T6425] ? lockdep_hardirqs_on+0x98/0x150 [ 117.517103][ T6425] ? __local_bh_enable_ip+0x13a/0x1c0 [ 117.522497][ T6425] ? _local_bh_enable+0xa0/0xa0 [ 117.527361][ T6425] ? __local_bh_enable_ip+0x13a/0x1c0 [ 117.532752][ T6425] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 117.538680][ T6425] ? ipt_do_table+0x13b3/0x15c0 [ 117.543568][ T6425] ? nf_nat_inet_fn+0x90b/0xb20 [ 117.548456][ T6425] nft_do_chain_inet+0x29b/0x380 [ 117.553411][ T6425] ? nft_do_chain_arp+0x110/0x110 [ 117.558456][ T6425] ? ipt_do_table+0x2c5/0x15c0 [ 117.563253][ T6425] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 117.568648][ T6425] ? nft_do_chain_arp+0x110/0x110 [ 117.573697][ T6425] nf_hook_slow+0xbd/0x200 [ 117.578137][ T6425] ? nf_hook+0x390/0x390 [ 117.582394][ T6425] nf_hook+0x228/0x390 [ 117.586487][ T6425] ? nf_hook+0xa2/0x390 [ 117.590664][ T6425] ? __ip_local_out+0x5f0/0x5f0 [ 117.595533][ T6425] ? nf_hook+0x390/0x390 [ 117.599796][ T6425] ? nf_ct_set_closing+0x23/0x230 [ 117.604843][ T6425] ? ip_fast_csum+0x1ee/0x2b0 [ 117.609549][ T6425] __ip_local_out+0x4db/0x5f0 [ 117.614261][ T6425] ? nf_hook+0x390/0x390 [ 117.618528][ T6425] ip_local_out+0x2a/0x130 [ 117.622962][ T6425] nf_send_reset+0xebd/0x16b0 [ 117.627678][ T6425] ? skb_put_data+0x30/0x30 [ 117.632203][ T6425] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 117.637518][ T6425] ? siphash_3u32+0x25/0x250 [ 117.642135][ T6425] ? nft_trace_init+0x211/0x420 [ 117.647003][ T6425] ? _local_bh_enable+0xa0/0xa0 [ 117.651871][ T6425] ? nf_trace_fill_pkt_info+0x870/0x870 [ 117.657438][ T6425] nft_reject_inet_eval+0x3ad/0x680 [ 117.662664][ T6425] nft_do_chain+0x44b/0x1620 [ 117.667291][ T6425] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 117.673214][ T6425] ? ipt_alloc_initial_table+0x610/0x610 [ 117.678866][ T6425] ? ipt_do_table+0x13b3/0x15c0 [ 117.683755][ T6425] ? nf_nat_inet_fn+0x90b/0xb20 [ 117.688653][ T6425] nft_do_chain_inet+0x29b/0x380 [ 117.693609][ T6425] ? nft_do_chain_arp+0x110/0x110 [ 117.698664][ T6425] ? ipt_do_table+0x2c5/0x15c0 [ 117.703459][ T6425] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 117.708854][ T6425] ? nft_do_chain_arp+0x110/0x110 [ 117.713896][ T6425] nf_hook_slow+0xbd/0x200 [ 117.718344][ T6425] ? nf_hook+0x390/0x390 [ 117.722599][ T6425] nf_hook+0x228/0x390 [ 117.726692][ T6425] ? nf_hook+0xa2/0x390 [ 117.730865][ T6425] ? __ip_local_out+0x5f0/0x5f0 [ 117.735734][ T6425] ? nf_hook+0x390/0x390 [ 117.739990][ T6425] ? __lock_acquire+0x7d80/0x7d80 [ 117.745045][ T6425] __ip_local_out+0x4db/0x5f0 [ 117.749737][ T6425] ? nf_hook+0x390/0x390 [ 117.753993][ T6425] ? __ip_queue_xmit+0x5d/0x1960 [ 117.758947][ T6425] __ip_queue_xmit+0xf89/0x1960 [ 117.763823][ T6425] ? __ip_queue_xmit+0x5d/0x1960 [ 117.768779][ T6425] __tcp_transmit_skb+0x1dd6/0x3470 [ 117.774022][ T6425] ? __tcp_send_ack+0x5a0/0x5a0 [ 117.778912][ T6425] ? tcp_fastopen_cookie_check+0x26d/0x3c0 [ 117.784743][ T6425] tcp_connect+0x3377/0x5300 [ 117.789402][ T6425] ? tcp_options_write+0xc70/0xc70 [ 117.794539][ T6425] ? get_random_u16+0x16e/0x990 [ 117.799413][ T6425] ? get_random_u16+0x517/0x990 [ 117.804291][ T6425] ? __asan_memset+0x22/0x40 [ 117.808909][ T6425] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 117.815529][ T6425] ? dst_release+0x72/0x1a0 [ 117.820057][ T6425] tcp_v4_connect+0xf99/0x18a0 [ 117.824864][ T6425] ? tcp_twsk_unique+0x970/0x970 [ 117.829848][ T6425] __inet_stream_connect+0x254/0xdf0 [ 117.835169][ T6425] ? inet_dgram_connect+0x340/0x340 [ 117.840412][ T6425] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 117.845646][ T6425] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 117.850868][ T6425] ? verify_lock_unused+0x140/0x140 [ 117.856105][ T6425] ? __might_sleep+0xe0/0xe0 [ 117.860729][ T6425] ? mark_lock+0x94/0x320 [ 117.865084][ T6425] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 117.871089][ T6425] ? lock_chain_count+0x20/0x20 [ 117.875969][ T6425] ? tcp_set_state+0x6c0/0x6c0 [ 117.880781][ T6425] tcp_sendmsg+0x2f/0x50 [ 117.885046][ T6425] ? inet_send_prepare+0x250/0x250 [ 117.890178][ T6425] ____sys_sendmsg+0x61b/0x980 [ 117.894971][ T6425] ? __asan_memset+0x22/0x40 [ 117.899582][ T6425] ? __sys_sendmsg_sock+0x30/0x30 [ 117.904632][ T6425] ? __import_iovec+0x3fa/0x850 [ 117.909516][ T6425] ? import_iovec+0x73/0xa0 [ 117.914067][ T6425] ___sys_sendmsg+0x2a6/0x360 [ 117.918773][ T6425] ? __sys_sendmsg+0x2b0/0x2b0 [ 117.923624][ T6425] __se_sys_sendmsg+0x1d0/0x2c0 [ 117.928502][ T6425] ? __x64_sys_sendmsg+0x80/0x80 [ 117.933477][ T6425] ? lockdep_hardirqs_on+0x98/0x150 [ 117.938703][ T6425] do_syscall_64+0x55/0xb0 [ 117.943135][ T6425] ? clear_bhb_loop+0x40/0x90 [ 117.947832][ T6425] ? clear_bhb_loop+0x40/0x90 [ 117.952531][ T6425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.958440][ T6425] RIP: 0033:0x7fbd4439e0d9 [ 117.962880][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.982507][ T6425] RSP: 002b:00007fbd45252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.990948][ T6425] RAX: ffffffffffffffda RBX: 00007fbd44626090 RCX: 00007fbd4439e0d9 [ 117.998936][ T6425] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 0000000000000009 [ 118.006925][ T6425] RBP: 00007fbd44435024 R08: 0000000000000000 R09: 0000000000000000 [ 118.014958][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.022944][ T6425] R13: 00007fbd44626128 R14: 00007fbd44626090 R15: 00007ffc07796338 [ 118.030950][ T6425] [ 118.034212][ T6425] Kernel Offset: disabled [ 118.038582][ T6425] Rebooting in 86400 seconds..