last executing test programs: 3.285946511s ago: executing program 0 (id=1): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$RTC_PIE_ON(r0, 0x7005) 3.237653864s ago: executing program 0 (id=8): r0 = socket$kcm(0x10, 0x2, 0x4) setreuid(0x0, 0xee01) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 3.183337417s ago: executing program 0 (id=10): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm={{0x10, 0xa6, 0x4}, {0x7, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0xdf, 0x2}, {0x8}}]}}, 0x17) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) syz_emit_vhci(&(0x7f0000002200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x7fff, 0x100}}}}, 0x11) syz_emit_vhci(&(0x7f0000002240)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r0, 0xd9) syz_open_dev$video(&(0x7f0000002280), 0xfffffffffffffe00, 0x20000) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.178226725s ago: executing program 0 (id=11): readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/186, 0xba}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000002c0)=@xdp={0x2c, 0x4, r3, 0x3e}, 0x80, &(0x7f0000000080)}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, 0x0, 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x40) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80040, 0x1d0) landlock_create_ruleset(&(0x7f0000000140)={0x3, 0x1, 0x1, 0x200, 0x5, 0x1}, 0x30, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000400)={0x28, 0x7, r7, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7fffffff}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000080)={0x28, 0x0, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) setgroups(0xffffffffffffff79, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.776679838s ago: executing program 1 (id=14): r0 = socket(0x840000000002, 0x3, 0x100) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x80000, @empty, 0x80}}, 0x0, 0x8, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) sendto$inet6(r4, &(0x7f0000000000)='H', 0x1, 0x40050, &(0x7f00000002c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x42}, 0x10}, 0x1c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r3}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 2.670354507s ago: executing program 1 (id=15): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x715) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.590526294s ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2.375464145s ago: executing program 1 (id=17): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000000005, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x40) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r1, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0xa0) 2.375271969s ago: executing program 3 (id=18): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$RTC_PIE_ON(r0, 0x7005) 2.349074651s ago: executing program 1 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.285299493s ago: executing program 3 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.207426844s ago: executing program 1 (id=22): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x9, 0x7, 0x6, 0x7f, @random="f42b835595ee"}, 0x10) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) sendmmsg(r2, &(0x7f0000002880)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x11e0}}], 0x1, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x800) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.20720764s ago: executing program 3 (id=23): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x8}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2.195753606s ago: executing program 0 (id=24): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 1.283247681s ago: executing program 4 (id=32): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x80000, @empty, 0x80}}, 0x0, 0x8, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) sendto$inet6(r0, &(0x7f0000000000)='H', 0x1, 0x40050, &(0x7f00000002c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x42}, 0x10}, 0x1c) 1.277311823s ago: executing program 4 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='qP'], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 1.26265911s ago: executing program 4 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x40004) 1.199463473s ago: executing program 4 (id=35): socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = userfaultfd(0x80801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000800000/0x1000)=nil, 0x1000}) 815.382644ms ago: executing program 0 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000003000000000082ca8264a0f48f6d8303340000040000000000a4cef3b0273e578c52063b36028afd2b5b5bcfe5a00896bbec62d46418c630df56bfd6816d5fe0911018d047ddb3d928df630c631e1753198a5877e4027c7539146d4be2d8aa8651bf4776af33865150cb1185171282d7c5076f0ee80d", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc702000008000000182900", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffe0}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 735.36992ms ago: executing program 2 (id=38): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) r1 = openat$comedi(0xffffff9c, &(0x7f0000000240)='/dev/comedi0\x00', 0x63a1ffeb966d5d6, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000640)={'das16m1\x00', [0xc, 0x4, 0x18c, 0x9, 0x7a23fb2a, 0x9, 0x4, 0x2, 0xd6, 0xfff, 0x101, 0x8, 0x1, 0x2, 0xb, 0x0, 0xc724, 0x5, 0x8, 0x9, 0x80, 0x0, 0x200, 0x4acb, 0x40, 0x3885ed69, 0x286, 0x7, 0x2, 0x3, 0x1ff]}) r2 = socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r3 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r4, &(0x7f0000000880)='3', 0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pread64(r1, &(0x7f00000008c0)=""/127, 0x7f, 0x5) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000888}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff1}, {0xb, 0x7}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x890}, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='i8042\x00', 0x6) 598.254074ms ago: executing program 2 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 580.67324ms ago: executing program 2 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setresgid(0xee00, 0x0, 0xee00) 539.728696ms ago: executing program 2 (id=41): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0xaf07d5deeb6d300e, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x5044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x80, 0xac, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0xe, 0xf, {0xa, 0x25, 0x25, 0x4, 0x1, 0x46}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfe, 0xb, 0x7, {0xa, 0x25, 0x25, 0x80000000, 0xb, 0x4d38}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f00000007c0)={0x5, 0xf, 0x5}}) 323.381919ms ago: executing program 4 (id=42): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x23, 0x1}) 323.114057ms ago: executing program 4 (id=43): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x80000b37}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f00000001c0)=0x4000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 186.903946ms ago: executing program 3 (id=44): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) sendto$inet6(r0, &(0x7f0000000000)='H', 0x1, 0x40050, &(0x7f00000002c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x42}, 0x10}, 0x1c) 155.577374ms ago: executing program 3 (id=45): getpid() r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140a, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x48010) 87.377696ms ago: executing program 3 (id=46): syz_emit_ethernet(0x1e3, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r6 = fanotify_init(0x1a, 0x40000) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)=@newqdisc={0x40, 0x24, 0xd0f, 0x10000003, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x400009}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1c4}, 0x8840) fanotify_mark(r6, 0x541, 0x40001019, r5, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000300), 0x1, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r7) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000040)={0x0, 0xac, 0x2, {0x2, @vbi={0xffffffff, 0x4, 0x8, 0x36314d4e, [0x2, 0x4], [0x5, 0x4], 0x108}}, 0x7}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 17.712608ms ago: executing program 2 (id=47): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_restrict_self(r0, 0xe) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x44) 0s ago: executing program 2 (id=48): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 28.151534][ T4702] cgroup: Unknown subsys name 'net' [ 28.281655][ T4702] cgroup: Unknown subsys name 'cpuset' [ 28.283714][ T4702] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.449827][ T4702] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.252777][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.253032][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.253305][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.253687][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.253916][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.254304][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.254488][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.254823][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.255047][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.266093][ T4729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.267636][ T4729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.269056][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.269192][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.269556][ T4729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.269708][ T4729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.269802][ T4729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.271201][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.271536][ T4729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.278064][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.278216][ T4728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.279688][ T4729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.281286][ T4729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.281357][ T4729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.281416][ T4729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.283811][ T4731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.591120][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.592822][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.594190][ T4712] bridge_slave_0: entered allmulticast mode [ 29.595835][ T4712] bridge_slave_0: entered promiscuous mode [ 29.599287][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.600558][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.600623][ T4712] bridge_slave_1: entered allmulticast mode [ 29.601423][ T4712] bridge_slave_1: entered promiscuous mode [ 29.607101][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.607141][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.607219][ T4713] bridge_slave_0: entered allmulticast mode [ 29.607647][ T4713] bridge_slave_0: entered promiscuous mode [ 29.608449][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.608471][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.608520][ T4713] bridge_slave_1: entered allmulticast mode [ 29.608914][ T4713] bridge_slave_1: entered promiscuous mode [ 29.629271][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.630161][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.642610][ T4712] team0: Port device team_slave_0 added [ 29.643399][ T4712] team0: Port device team_slave_1 added [ 29.665939][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.665970][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.665995][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.666756][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.666787][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.666805][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.683681][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.684699][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.704275][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.705707][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.707164][ T4719] bridge_slave_0: entered allmulticast mode [ 29.708798][ T4719] bridge_slave_0: entered promiscuous mode [ 29.710665][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.711954][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.713292][ T4719] bridge_slave_1: entered allmulticast mode [ 29.714784][ T4719] bridge_slave_1: entered promiscuous mode [ 29.722641][ T4713] team0: Port device team_slave_0 added [ 29.735116][ T4712] hsr_slave_0: entered promiscuous mode [ 29.736603][ T4712] hsr_slave_1: entered promiscuous mode [ 29.740934][ T4713] team0: Port device team_slave_1 added [ 29.751681][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.769082][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.773925][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.773948][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.773965][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.784395][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.784474][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.784531][ T4716] bridge_slave_0: entered allmulticast mode [ 29.784968][ T4716] bridge_slave_0: entered promiscuous mode [ 29.786125][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.786133][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.786147][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.804701][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.804775][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.804829][ T4716] bridge_slave_1: entered allmulticast mode [ 29.805255][ T4716] bridge_slave_1: entered promiscuous mode [ 29.812239][ T4719] team0: Port device team_slave_0 added [ 29.827590][ T4719] team0: Port device team_slave_1 added [ 29.829562][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.831073][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.836539][ T4713] hsr_slave_0: entered promiscuous mode [ 29.837086][ T4713] hsr_slave_1: entered promiscuous mode [ 29.837264][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 29.837298][ T4713] Cannot create hsr debugfs directory [ 29.847097][ T4716] team0: Port device team_slave_0 added [ 29.856670][ T4716] team0: Port device team_slave_1 added [ 29.863147][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.864637][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.866071][ T4718] bridge_slave_0: entered allmulticast mode [ 29.866519][ T4718] bridge_slave_0: entered promiscuous mode [ 29.867730][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.867739][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.867751][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.875675][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.875684][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.875698][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.876259][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.876265][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.876278][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.885929][ T4716] hsr_slave_0: entered promiscuous mode [ 29.886237][ T4716] hsr_slave_1: entered promiscuous mode [ 29.886457][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 29.886467][ T4716] Cannot create hsr debugfs directory [ 29.897532][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.898900][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.900532][ T4718] bridge_slave_1: entered allmulticast mode [ 29.902278][ T4718] bridge_slave_1: entered promiscuous mode [ 29.904098][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.904121][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.904135][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.940056][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.951135][ T4719] hsr_slave_0: entered promiscuous mode [ 29.951448][ T4719] hsr_slave_1: entered promiscuous mode [ 29.951631][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 29.951641][ T4719] Cannot create hsr debugfs directory [ 29.956808][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.959562][ T4712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.963688][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.971358][ T4718] team0: Port device team_slave_0 added [ 29.972600][ T4712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.974696][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.975022][ T4712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.977019][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.998457][ T4718] team0: Port device team_slave_1 added [ 29.999774][ T4712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.002132][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.021595][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.022920][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.022954][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.038359][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.039755][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.040455][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.051725][ T4716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.054215][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.059580][ T4718] hsr_slave_0: entered promiscuous mode [ 30.060111][ T4718] hsr_slave_1: entered promiscuous mode [ 30.060585][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.060598][ T4718] Cannot create hsr debugfs directory [ 30.066210][ T4716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.068447][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.074537][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.074586][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.074749][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.074784][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.095821][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.098001][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.099541][ T4716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.102609][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.102926][ T4716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.104674][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.110949][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.112405][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.121853][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.123935][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.124495][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.125865][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.166839][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.166881][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.166969][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.167005][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.174833][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.178244][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.180001][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.182508][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.184887][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.186990][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.188612][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.191326][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.195715][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.195792][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.195868][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.195899][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.208955][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.223397][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.223435][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.223513][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.223548][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.235023][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.236519][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.237901][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.239164][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.242351][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.243969][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.245858][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.247127][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.253599][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.256026][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.256078][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.270937][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.276532][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.279621][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.279665][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.291962][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.293077][ T4718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.295390][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.297056][ T4718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.299197][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.306245][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.306281][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.306642][ T4718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.308356][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.308657][ T4718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.309471][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.318782][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.328825][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.331634][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.336728][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.336774][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.337103][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.337121][ T3788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.344808][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.344845][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.351811][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.351847][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.356383][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.356425][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.396421][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.396455][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.401522][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.417540][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.426184][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.443326][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.443374][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.443723][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.443742][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.461213][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.463215][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.613097][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.637175][ T4712] veth0_vlan: entered promiscuous mode [ 30.644276][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.653521][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.666537][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.668704][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.672572][ T4712] veth1_vlan: entered promiscuous mode [ 30.681898][ T4712] veth0_macvtap: entered promiscuous mode [ 30.684171][ T4712] veth1_macvtap: entered promiscuous mode [ 30.688147][ T4713] veth0_vlan: entered promiscuous mode [ 30.695091][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.702013][ T4713] veth1_vlan: entered promiscuous mode [ 30.705046][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.709917][ T4716] veth0_vlan: entered promiscuous mode [ 30.727696][ T3788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.727868][ T3788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.727893][ T3788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.727917][ T3788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.736356][ T4713] veth0_macvtap: entered promiscuous mode [ 30.739543][ T4716] veth1_vlan: entered promiscuous mode [ 30.746824][ T4713] veth1_macvtap: entered promiscuous mode [ 30.749274][ T4719] veth0_vlan: entered promiscuous mode [ 30.767443][ T4719] veth1_vlan: entered promiscuous mode [ 30.777368][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.785649][ T4716] veth0_macvtap: entered promiscuous mode [ 30.786688][ T4716] veth1_macvtap: entered promiscuous mode [ 30.789282][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.804734][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.812664][ T3970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.812693][ T3970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.819115][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.833720][ T4719] veth0_macvtap: entered promiscuous mode [ 30.836036][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.836081][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.836102][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.844621][ T4718] veth0_vlan: entered promiscuous mode [ 30.848397][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.848430][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.849753][ T4719] veth1_macvtap: entered promiscuous mode [ 30.863914][ T4718] veth1_vlan: entered promiscuous mode [ 30.879509][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.879534][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.883104][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.884938][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.901582][ T4712] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.906703][ T4718] veth0_macvtap: entered promiscuous mode [ 30.910866][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.910894][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.916170][ T4718] veth1_macvtap: entered promiscuous mode [ 30.941712][ T3970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.943215][ T3970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.977891][ T1442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978520][ T1442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978631][ T1442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978742][ T1442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978758][ T1442] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978773][ T1442] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978788][ T1442] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978802][ T1442] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978817][ T1442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.980661][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.980671][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.987644][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.988724][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.999562][ T4900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.002090][ T4900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.007006][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.007032][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.012662][ T3970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.013148][ T1442] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.013267][ T1442] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.013376][ T1442] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.036360][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.036386][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.058250][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.058277][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.098366][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.098393][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.300765][ T4714] Bluetooth: hci1: command tx timeout [ 31.300929][ T4714] Bluetooth: hci4: command tx timeout [ 31.301021][ T4714] Bluetooth: hci0: command tx timeout [ 31.424325][ T4714] Bluetooth: hci2: command tx timeout [ 31.425997][ T4731] Bluetooth: hci3: command tx timeout [ 31.819719][ T4940] ======================================================= [ 31.819719][ T4940] WARNING: The mand mount option has been deprecated and [ 31.819719][ T4940] and is ignored by this kernel. Remove the mand [ 31.819719][ T4940] option from the mount to silence this warning. [ 31.819719][ T4940] ======================================================= [ 32.354721][ T4958] Zero length message leads to an empty skb [ 32.450703][ T4824] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.553996][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.556416][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.611125][ T4824] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.612101][ T4824] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.612796][ T4824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.612808][ T4824] usb 1-1: SerialNumber: syz [ 33.027113][ T4824] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 33.031686][ T4824] usb 1-1: USB disconnect, device number 2 [ 33.052781][ T4977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.055377][ T4977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.114175][ T4983] nft_compat: unsupported protocol 0 [ 33.370334][ T4731] Bluetooth: hci4: command tx timeout [ 33.370335][ T4714] Bluetooth: hci1: command tx timeout [ 33.380681][ T4731] Bluetooth: hci0: command tx timeout [ 33.450310][ T4731] Bluetooth: hci3: command tx timeout [ 33.450348][ T4731] Bluetooth: hci2: command tx timeout [ 33.744579][ T4993] usbip-vudc usbip-vudc.0: gadget not bound [ 33.795964][ T5000] FAULT_INJECTION: forcing a failure. [ 33.795964][ T5000] name failslab, interval 1, probability 0, space 0, times 1 [ 33.798475][ T5000] CPU: 0 UID: 0 PID: 5000 Comm: syz.2.40 Not tainted syzkaller #0 PREEMPT [ 33.798493][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.798499][ T5000] Call trace: [ 33.798503][ T5000] show_stack+0x2c/0x3c (C) [ 33.798528][ T5000] __dump_stack+0x30/0x40 [ 33.798542][ T5000] dump_stack_lvl+0xd8/0x12c [ 33.798555][ T5000] dump_stack+0x1c/0x28 [ 33.798567][ T5000] should_fail_ex+0x41c/0x590 [ 33.798576][ T5000] should_failslab+0xc4/0x120 [ 33.798585][ T5000] kmem_cache_alloc_noprof+0x94/0x5d8 [ 33.798595][ T5000] prepare_creds+0x34/0x7d0 [ 33.798608][ T5000] __sys_setresgid+0x414/0x7ac [ 33.798619][ T5000] __arm64_sys_setresgid+0x84/0x98 [ 33.798629][ T5000] invoke_syscall+0x98/0x244 [ 33.798642][ T5000] el0_svc_common+0xec/0x23c [ 33.798653][ T5000] do_el0_svc+0x4c/0x5c [ 33.798665][ T5000] el0_svc+0x64/0x260 [ 33.798675][ T5000] el0t_64_sync_handler+0x44/0x104 [ 33.798685][ T5000] el0t_64_sync+0x198/0x19c [ 33.836122][ T5002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.838070][ T5002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.608048][ T5022] ------------[ cut here ]------------ [ 34.608074][ T5022] do not call blocking ops when !TASK_RUNNING; state=2 set at [<000000003867979d>] prepare_to_wait_event+0x2e4/0x3ac [ 34.611338][ T5022] WARNING: kernel/sched/core.c:9124 at __might_sleep+0xc0/0xdc, CPU#0: syz.2.48/5022 [ 34.612917][ T5022] Modules linked in: [ 34.613592][ T5022] CPU: 0 UID: 0 PID: 5022 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT [ 34.615094][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.616833][ T5022] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 34.618196][ T5022] pc : __might_sleep+0xc0/0xdc [ 34.618992][ T5022] lr : __might_sleep+0xc0/0xdc [ 34.619818][ T5022] sp : ffff80009ba67930 [ 34.620515][ T5022] x29: ffff80009ba67930 x28: ffff8000805a793c x27: ffff80009ba67a00 [ 34.621906][ T5022] x26: 0000000000000000 x25: ffff80009ba67a08 x24: 0000000000000000 [ 34.623269][ T5022] x23: ffff70001374cf3c x22: ffff0000c510b410 x21: 0000000000000002 [ 34.624580][ T5022] x20: ffff8000869ca160 x19: 000000000000026f x18: 1fffe00034bb7428 [ 34.625969][ T5022] x17: 0000000000000003 x16: ffff800088b37000 x15: ffff800088bed220 [ 34.627237][ T5022] x14: ffff0001a5dba14c x13: 0000000000000001 x12: 0000000000000000 [ 34.628585][ T5022] x11: 0000000000000000 x10: 0000000000000003 x9 : 8295f68a5c2d1a00 [ 34.630006][ T5022] x8 : 8295f68a5c2d1a00 x7 : 0000000000000000 x6 : 0000000000000000 [ 34.631375][ T5022] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000803b70b8 [ 34.632750][ T5022] x2 : 0000000000000001 x1 : ffff0000c5109d40 x0 : 0000000000000001 [ 34.634194][ T5022] Call trace: [ 34.634740][ T5022] __might_sleep+0xc0/0xdc (P) [ 34.635560][ T5022] __mutex_lock+0xf8/0xf14 [ 34.636383][ T5022] mutex_lock_nested+0x24/0x30 [ 34.637235][ T5022] futex_pivot_pending+0x30/0xa4 [ 34.638062][ T5022] futex_hash_allocate+0x73c/0xc20 [ 34.638941][ T5022] futex_hash_prctl+0xd0/0x324 [ 34.639738][ T5022] __arm64_sys_prctl+0x8d0/0x13d0 [ 34.640573][ T5022] invoke_syscall+0x98/0x244 [ 34.641341][ T5022] el0_svc_common+0xec/0x23c [ 34.642120][ T5022] do_el0_svc+0x4c/0x5c [ 34.642815][ T5022] el0_svc+0x64/0x260 [ 34.643483][ T5022] el0t_64_sync_handler+0x44/0x104 [ 34.644348][ T5022] el0t_64_sync+0x198/0x19c [ 34.645132][ T5022] irq event stamp: 82 [ 34.645826][ T5022] hardirqs last enabled at (81): [] finish_task_switch+0x234/0x858 [ 34.647426][ T5022] hardirqs last disabled at (82): [] el1_brk64+0x20/0x54 [ 34.648891][ T5022] softirqs last enabled at (28): [] do_sve_acc+0x32c/0x4b8 [ 34.650420][ T5022] softirqs last disabled at (26): [] do_sve_acc+0x10c/0x4b8 [ 34.651955][ T5022] ---[ end trace 0000000000000000 ]--- [ 35.451179][ T4714] Bluetooth: hci0: command tx timeout [ 35.451230][ T4714] Bluetooth: hci4: command tx timeout [ 35.451312][ T4714] Bluetooth: hci1: command tx timeout [ 35.530846][ T4731] Bluetooth: hci2: command tx timeout [ 35.530966][ T4714] Bluetooth: hci3: command tx timeout [ 37.540310][ T4731] Bluetooth: hci1: command tx timeout [ 37.540327][ T4714] Bluetooth: hci4: command tx timeout [ 37.540359][ T4714] Bluetooth: hci0: command tx timeout [ 37.610289][ T4731] Bluetooth: hci2: command tx timeout [ 37.620477][ T4731] Bluetooth: hci3: command tx timeout