last executing test programs: 2.150551906s ago: executing program 0 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x18) set_mempolicy(0x1, 0x0, 0x4) 2.097288587s ago: executing program 0 (id=100): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 2.097163179s ago: executing program 3 (id=101): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x14}) 2.084622071s ago: executing program 3 (id=102): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) 1.461324877s ago: executing program 1 (id=113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) sendto$inet6(r0, &(0x7f0000000140)="84fb4b2aed27474e4983a4f3624a0e42111bfa37a0e29d68d0e8b54380aef1187215ded5b8da8a5168f0b16b", 0x2c, 0x10004011, 0x0, 0x0) 1.293286795s ago: executing program 4 (id=118): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000340)=0xe) writev(r2, &(0x7f000009de80)=[{&(0x7f0000002a80)="92601b126cd916238152311e05ee79b7129fcda028997dd43917ea01b906000000286d299a104d2d4a20d1fadfecd7687bfd3c54f8c62189c138c5c5ecd3ce6f2f1cdb482c4e8d547ca98c08e87f592e109e441fab677da071e7683f562eddb2888bee5e65daac845793ebfa0ecbc95c8a44ec908110dd9a9ae9b16301f3e59afcf93da032f2fde9dd86f1dafbb1e68e56611af12fa1380f73d38aeddbd74c68c29bfe35caf5328e85950dd5973469df4c000000", 0xb4}, {0x0}], 0x2) 1.265343865s ago: executing program 0 (id=119): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.188524096s ago: executing program 4 (id=121): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x1b, 0x7, 0xfffffffd}, &(0x7f0000000180)=0x10) 1.188226742s ago: executing program 0 (id=122): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008d0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610916dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84b99b2ed90f71810cd92eeca69f5275cb7b7027d4babf643bd69b0a68134c022fe5dcd03834f547325ac2d1a5d16f074d898946ff71afa90180b317e645dd58a922e5d907462cd50dc23801c48c0d49ab012961d84d2eb85a3730a3f3177da048c3bc991216b11dca020afefc24ae7583b59534a0ab1fca82bf473216141db8e9864f7861d0500a920e1a8d3352d0662f586e743386e87b6c0c5ed6e4d192ef2990b44cedbb708e7a18b20dcd5573b603c4d659992647ffa8210abf4e9d232b52a8ea1dd1c045afd8e472cd1fbb775e89cca49d136a6"], 0x1, 0x4446, &(0x7f00000088c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40186f04, &(0x7f0000000340)={@id={0x2, 0x0, @b}}) 1.188044637s ago: executing program 4 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1a706}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044090}, 0x4000844) 1.187666438s ago: executing program 3 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1.187142724s ago: executing program 2 (id=125): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.166050286s ago: executing program 2 (id=126): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x64) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x2, 0x0, &(0x7f0000000280)="f880"}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 1.069664205s ago: executing program 4 (id=127): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) 1.059055425s ago: executing program 3 (id=128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x1b, r2, 0x1, 0xfc, 0x6, @local}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 739.893855ms ago: executing program 3 (id=129): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000000)={0x1, 0x5}) 689.879071ms ago: executing program 2 (id=130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 689.498538ms ago: executing program 0 (id=131): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x0) 664.452576ms ago: executing program 0 (id=132): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x200000) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) 654.406636ms ago: executing program 3 (id=133): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0xe, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x7d760e7, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x3, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xffffdff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x3, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x2, 0x2f, 0x1000, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x1e, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x3, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x7, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffd, 0x1, 0xa, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x82, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x238, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950beaf, 0x24, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0xc, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x1, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x18, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x4, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x4, 0x6c1b, 0x0, 0x4, 0x401, 0xb1c, 0xffffffff, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 541.886647ms ago: executing program 1 (id=134): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x2000c, 0x4) 541.639566ms ago: executing program 2 (id=135): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002d3d7000eedbdf252c070000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 541.270116ms ago: executing program 1 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 521.027433ms ago: executing program 2 (id=137): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 488.130336ms ago: executing program 1 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001c8, 0x12) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x78, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) accept$alg(r1, 0x0, 0x0) 476.827699ms ago: executing program 2 (id=139): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x0, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)) 341.715523ms ago: executing program 1 (id=140): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) getpeername$packet(r3, 0x0, &(0x7f0000000100)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 341.347817ms ago: executing program 1 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000540)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x6000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 266.373265ms ago: executing program 4 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000080000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x40010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) close_range(r4, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002440)={0x50, 0x0, r7, {0x7, 0x2b, 0x8, 0x100000, 0x8, 0x5, 0x9, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xcc0, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 23.518711][ T6509] cgroup: Unknown subsys name 'net' [ 23.617259][ T6509] cgroup: Unknown subsys name 'cpuset' [ 23.619310][ T6509] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.799153][ T6509] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 25.861677][ T6528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.863311][ T6528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.864824][ T6528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.887775][ T6539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.888500][ T6539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.888840][ T6539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.889028][ T6539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.889355][ T6541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.889577][ T6541] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.890186][ T6532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.890395][ T6532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.890743][ T6532] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.891147][ T6532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.891425][ T6532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.891573][ T6532] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.891959][ T6541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.892136][ T6541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.892458][ T6541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.892674][ T6541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.899555][ T6128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.911383][ T6128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.913003][ T6541] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.913335][ T6128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.926343][ T6128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.926576][ T6128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.078572][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 26.127894][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 26.131727][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 26.135766][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.137510][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.139259][ T6524] bridge_slave_0: entered allmulticast mode [ 26.141011][ T6524] bridge_slave_0: entered promiscuous mode [ 26.148503][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 26.157225][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.157302][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.157370][ T6524] bridge_slave_1: entered allmulticast mode [ 26.157787][ T6524] bridge_slave_1: entered promiscuous mode [ 26.184228][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.204273][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.207605][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 26.226305][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.227693][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.229056][ T6531] bridge_slave_0: entered allmulticast mode [ 26.230596][ T6531] bridge_slave_0: entered promiscuous mode [ 26.232355][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.233613][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.234905][ T6531] bridge_slave_1: entered allmulticast mode [ 26.236562][ T6531] bridge_slave_1: entered promiscuous mode [ 26.244852][ T6524] team0: Port device team_slave_0 added [ 26.246369][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.247552][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.248823][ T6534] bridge_slave_0: entered allmulticast mode [ 26.250352][ T6534] bridge_slave_0: entered promiscuous mode [ 26.257575][ T6524] team0: Port device team_slave_1 added [ 26.265686][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.267843][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.269137][ T6534] bridge_slave_1: entered allmulticast mode [ 26.270539][ T6534] bridge_slave_1: entered promiscuous mode [ 26.282741][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.282765][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.282775][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.283545][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.283552][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.283566][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.306754][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.307646][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.316074][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.316176][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.316240][ T6529] bridge_slave_0: entered allmulticast mode [ 26.316652][ T6529] bridge_slave_0: entered promiscuous mode [ 26.321490][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.322798][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.324082][ T6529] bridge_slave_1: entered allmulticast mode [ 26.325421][ T6529] bridge_slave_1: entered promiscuous mode [ 26.329998][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.330071][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.330146][ T6525] bridge_slave_0: entered allmulticast mode [ 26.330574][ T6525] bridge_slave_0: entered promiscuous mode [ 26.331297][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.331314][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.331366][ T6525] bridge_slave_1: entered allmulticast mode [ 26.331763][ T6525] bridge_slave_1: entered promiscuous mode [ 26.342434][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.348461][ T6531] team0: Port device team_slave_0 added [ 26.358353][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.362371][ T6531] team0: Port device team_slave_1 added [ 26.368804][ T6524] hsr_slave_0: entered promiscuous mode [ 26.369127][ T6524] hsr_slave_1: entered promiscuous mode [ 26.372010][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.374893][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.375782][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.390902][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.398031][ T6525] team0: Port device team_slave_0 added [ 26.399208][ T6534] team0: Port device team_slave_0 added [ 26.400254][ T6534] team0: Port device team_slave_1 added [ 26.400714][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.400722][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.400734][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.401452][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.401462][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.401474][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.419222][ T6525] team0: Port device team_slave_1 added [ 26.428738][ T6529] team0: Port device team_slave_0 added [ 26.429511][ T6529] team0: Port device team_slave_1 added [ 26.450606][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.451911][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.456359][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.457317][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.457324][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.457337][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.465781][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.465803][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.465817][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.467374][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.467382][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.467397][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.488687][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.488714][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.488738][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.490131][ T6531] hsr_slave_0: entered promiscuous mode [ 26.490391][ T6531] hsr_slave_1: entered promiscuous mode [ 26.490591][ T6531] debugfs: 'hsr0' already exists in 'hsr' [ 26.490637][ T6531] Cannot create hsr debugfs directory [ 26.510457][ T6534] hsr_slave_0: entered promiscuous mode [ 26.511825][ T6534] hsr_slave_1: entered promiscuous mode [ 26.513044][ T6534] debugfs: 'hsr0' already exists in 'hsr' [ 26.514021][ T6534] Cannot create hsr debugfs directory [ 26.515647][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.515674][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.515688][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.525297][ T6525] hsr_slave_0: entered promiscuous mode [ 26.525629][ T6525] hsr_slave_1: entered promiscuous mode [ 26.525830][ T6525] debugfs: 'hsr0' already exists in 'hsr' [ 26.525842][ T6525] Cannot create hsr debugfs directory [ 26.589680][ T6529] hsr_slave_0: entered promiscuous mode [ 26.589984][ T6529] hsr_slave_1: entered promiscuous mode [ 26.590169][ T6529] debugfs: 'hsr0' already exists in 'hsr' [ 26.590184][ T6529] Cannot create hsr debugfs directory [ 26.653771][ T6524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.668682][ T6524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.671329][ T6524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.678503][ T6524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.699899][ T6531] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.703701][ T6531] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.708794][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.708845][ T6524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.709016][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.709046][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.715153][ T6531] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.717884][ T6531] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.735760][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.735817][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.735927][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.735958][ T6531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.751559][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.754728][ T6534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.758513][ T6534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.767308][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.768661][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.771503][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.772819][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.781146][ T6534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.783318][ T6534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.789662][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.812459][ T6525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.815196][ T6525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.820114][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.820163][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.821228][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.821248][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.835609][ T6524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.835660][ T6524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.840059][ T6525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.842768][ T6525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.865859][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.871266][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.887618][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.887658][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.901274][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.901329][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.904235][ T6529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.924193][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.928746][ T6529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.929900][ T6529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.931603][ T6529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.935199][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.953550][ T6524] veth0_vlan: entered promiscuous mode [ 26.955075][ T6524] veth1_vlan: entered promiscuous mode [ 26.958869][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.962278][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.987757][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.987796][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.992257][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.999467][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.999510][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.008589][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.008629][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.009430][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.009446][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.021182][ T6524] veth0_macvtap: entered promiscuous mode [ 27.038754][ T6524] veth1_macvtap: entered promiscuous mode [ 27.044355][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.050337][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.055091][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.063345][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.063567][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.063584][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.063597][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.093751][ T6534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.103772][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.108002][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.121448][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.121497][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.122032][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.122048][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.164012][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.164046][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.171194][ T6531] veth0_vlan: entered promiscuous mode [ 27.172887][ T6531] veth1_vlan: entered promiscuous mode [ 27.182933][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.198216][ T6531] veth0_macvtap: entered promiscuous mode [ 27.200359][ T6531] veth1_macvtap: entered promiscuous mode [ 27.204437][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.208618][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.212687][ T2011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.212988][ T2011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.213010][ T2011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.213017][ T2011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.213096][ T2011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.213168][ T2011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.264808][ T6524] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.280593][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.285796][ T6633] loop2: detected capacity change from 0 to 256 [ 27.298295][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.298365][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.313823][ T6633] FAT-fs (loop2): Directory bread(block 64) failed [ 27.313860][ T6633] FAT-fs (loop2): Directory bread(block 65) failed [ 27.313894][ T6633] FAT-fs (loop2): Directory bread(block 66) failed [ 27.313908][ T6633] FAT-fs (loop2): Directory bread(block 67) failed [ 27.313931][ T6633] FAT-fs (loop2): Directory bread(block 68) failed [ 27.313943][ T6633] FAT-fs (loop2): Directory bread(block 69) failed [ 27.313965][ T6633] FAT-fs (loop2): Directory bread(block 70) failed [ 27.313978][ T6633] FAT-fs (loop2): Directory bread(block 71) failed [ 27.313999][ T6633] FAT-fs (loop2): Directory bread(block 72) failed [ 27.314012][ T6633] FAT-fs (loop2): Directory bread(block 73) failed [ 27.326674][ T6525] veth0_vlan: entered promiscuous mode [ 27.328175][ T6525] veth1_vlan: entered promiscuous mode [ 27.349704][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.362268][ T6525] veth0_macvtap: entered promiscuous mode [ 27.363264][ T6525] veth1_macvtap: entered promiscuous mode [ 27.372314][ T2025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.372347][ T2025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.377447][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.378961][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.389304][ T2026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.389383][ T2026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.389430][ T2026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.389468][ T2026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.403582][ T6529] veth0_vlan: entered promiscuous mode [ 27.423316][ T6529] veth1_vlan: entered promiscuous mode [ 27.441154][ T6529] veth0_macvtap: entered promiscuous mode [ 27.443417][ T6529] veth1_macvtap: entered promiscuous mode [ 27.448879][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.451276][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.474258][ T2026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.474365][ T2026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.474401][ T2026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.474420][ T2026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.559063][ T6534] veth0_vlan: entered promiscuous mode [ 27.570510][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.570538][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.573800][ T6534] veth1_vlan: entered promiscuous mode [ 28.351016][ T52] Bluetooth: hci3: command tx timeout [ 28.351472][ T52] Bluetooth: hci2: command tx timeout [ 28.351899][ T52] Bluetooth: hci0: command tx timeout [ 28.352083][ T52] Bluetooth: hci4: command tx timeout [ 28.352262][ T52] Bluetooth: hci1: command tx timeout [ 28.423058][ T2026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.423102][ T2026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.429138][ T6534] veth0_macvtap: entered promiscuous mode [ 28.464829][ T6534] veth1_macvtap: entered promiscuous mode [ 28.492752][ T2026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.492775][ T2026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.512448][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.512478][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.522266][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.525323][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.528643][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.529056][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.529077][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.529094][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.606738][ T6654] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.7'. [ 28.606985][ T6654] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.7'. [ 28.853620][ T2026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.855283][ T2026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.913470][ T1561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.914995][ T1561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.244068][ T6685] ======================================================= [ 30.244068][ T6685] WARNING: The mand mount option has been deprecated and [ 30.244068][ T6685] and is ignored by this kernel. Remove the mand [ 30.244068][ T6685] option from the mount to silence this warning. [ 30.244068][ T6685] ======================================================= [ 30.244426][ T6685] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 30.247266][ T6685] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 30.426181][ T6528] Bluetooth: hci1: command tx timeout [ 30.426220][ T6528] Bluetooth: hci4: command tx timeout [ 30.426245][ T6528] Bluetooth: hci0: command tx timeout [ 30.426258][ T6528] Bluetooth: hci2: command tx timeout [ 30.426271][ T6528] Bluetooth: hci3: command tx timeout [ 30.630137][ T6687] loop2: detected capacity change from 0 to 512 [ 30.758673][ T6687] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.850196][ T6694] loop0: detected capacity change from 0 to 512 [ 30.859682][ T6687] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 30.859769][ T6687] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 30.859795][ T6687] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.13: Failed to acquire dquot type 1 [ 30.881025][ T6687] EXT4-fs (loop2): 1 truncate cleaned up [ 30.881619][ T6687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.916549][ T6694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.080075][ T6698] loop1: detected capacity change from 0 to 32768 [ 32.359804][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.363003][ T6524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.398960][ T6724] loop0: detected capacity change from 0 to 47 [ 32.515984][ T52] Bluetooth: hci3: command tx timeout [ 32.516026][ T52] Bluetooth: hci2: command tx timeout [ 32.516060][ T52] Bluetooth: hci0: command tx timeout [ 32.516079][ T52] Bluetooth: hci4: command tx timeout [ 32.516094][ T52] Bluetooth: hci1: command tx timeout [ 32.524396][ T31] audit: type=1326 audit(32.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8255c068 code=0x7ffc0000 [ 32.524442][ T31] audit: type=1326 audit(32.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8255c068 code=0x7ffc0000 [ 32.547036][ T31] audit: type=1326 audit(32.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=448 compat=0 ip=0xffff8255c068 code=0x7ffc0000 [ 32.547090][ T31] audit: type=1326 audit(32.490:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8255c068 code=0x7ffc0000 [ 32.547127][ T31] audit: type=1326 audit(32.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6727 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8255c068 code=0x7ffc0000 [ 32.827846][ T6732] infiniband syz2: set active [ 32.829281][ T6732] infiniband syz2: added bond_slave_0 [ 32.844196][ T6736] loop3: detected capacity change from 0 to 512 [ 32.848779][ T6736] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.851098][ T6736] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.858794][ T6736] EXT4-fs (loop3): 1 truncate cleaned up [ 32.860591][ T6736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.868347][ T6732] RDS/IB: syz2: added [ 32.869881][ T6732] smc: adding ib device syz2 with port count 1 [ 32.872474][ T6732] smc: ib device syz2 port 1 has pnetid [ 32.884436][ T6736] EXT4-fs error (device loop3): ext4_find_extent:903: inode #15: comm syz.3.28: inode has invalid extent depth: 25964 [ 32.887416][ T6736] EXT4-fs (loop3): Remounting filesystem read-only [ 32.887522][ T6736] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 32.910618][ T6531] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.359736][ T6752] loop2: detected capacity change from 0 to 128 [ 33.367211][ T6752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.394176][ T6752] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 33.404345][ T6752] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 33.434015][ T6524] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.776101][ T6761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 33.808146][ T6763] loop1: detected capacity change from 0 to 128 [ 33.864504][ T6771] loop1: detected capacity change from 0 to 2048 [ 33.937789][ T6771] NILFS (loop1): Invalid checkpoint (checkpoint number=2) [ 33.940953][ T6771] NILFS (loop1): error -22 while loading last checkpoint (checkpoint number=2) [ 34.249135][ T6782] loop3: detected capacity change from 0 to 512 [ 34.265740][ T6782] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.43: bad orphan inode 15 [ 34.267212][ T6782] ext4_test_bit(bit=14, block=5) = 0 [ 34.271878][ T6782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.329125][ T6531] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.555235][ T6791] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 34.586514][ T52] Bluetooth: hci4: command tx timeout [ 34.586583][ T52] Bluetooth: hci2: command tx timeout [ 34.586641][ T52] Bluetooth: hci3: command tx timeout [ 34.586737][ T6528] Bluetooth: hci1: command tx timeout [ 34.602523][ T6791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 34.617846][ T6791] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 34.751983][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.754689][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.654829][ T6836] cgroup: Invalid name [ 35.841721][ T6840] loop2: detected capacity change from 0 to 1024 [ 35.843466][ T6840] EXT4-fs: Ignoring removed i_version option [ 35.873931][ T6840] EXT4-fs (loop2): mounted filesystem 00010100-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.888371][ T6840] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.62: lblock 0 mapped to illegal pblock 0 (length 4) [ 35.908980][ T6524] EXT4-fs (loop2): unmounting filesystem 00010100-0000-0006-0000-000000000000. [ 35.966892][ T6851] loop2: detected capacity change from 0 to 4096 [ 36.001221][ T6851] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 36.012810][ T6851] ntfs3(loop2): Failed to load $Extend (-22). [ 36.012853][ T6851] ntfs3(loop2): Failed to initialize $Extend. [ 36.062590][ T6851] ntfs3(loop2): ino=5, "/" indx_read [ 36.091934][ T6855] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET) [ 36.093607][ T6855] syzkaller1: entered promiscuous mode [ 36.101583][ T6855] syzkaller1: entered allmulticast mode [ 36.155075][ T6861] netlink: 'syz.2.72': attribute type 2 has an invalid length. [ 36.187797][ T6864] loop1: detected capacity change from 0 to 128 [ 36.191049][ T6864] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 36.209473][ T6866] netlink: 'syz.2.74': attribute type 4 has an invalid length. [ 36.212357][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 36.273071][ T31] audit: type=1326 audit(36.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5c068 code=0x7ffc0000 [ 36.276751][ T31] audit: type=1326 audit(36.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff94d5c068 code=0x7ffc0000 [ 36.276775][ T31] audit: type=1326 audit(36.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff94d5c09c code=0x7ffc0000 [ 36.284902][ T31] audit: type=1326 audit(36.250:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff94d5a730 code=0x7ffc0000 [ 36.286079][ T31] audit: type=1326 audit(36.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff94d5c10c code=0x7ffc0000 [ 36.289602][ T31] audit: type=1326 audit(36.260:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff94d5a96c code=0x7ffc0000 [ 36.296127][ T31] audit: type=1326 audit(36.260:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5c068 code=0x7ffc0000 [ 36.298700][ T31] audit: type=1326 audit(36.270:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff94d5c068 code=0x7ffc0000 [ 36.298824][ T31] audit: type=1326 audit(36.270:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5c068 code=0x7ffc0000 [ 36.298904][ T31] audit: type=1326 audit(36.270:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6863 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d5c068 code=0x7ffc0000 [ 36.352141][ T6869] loop2: detected capacity change from 0 to 16384 [ 36.416171][ T6869] bcachefs (loop2): error requesting encryption key: ENOKEY [ 36.416207][ T6869] bcachefs (loop2): shutdown complete [ 36.970964][ T6891] loop4: detected capacity change from 0 to 1024 [ 36.971422][ T6891] EXT4-fs: Ignoring removed orlov option [ 36.971433][ T6891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.006745][ T6891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.027955][ T6534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.034322][ T6869] bcachefs: bch2_fs_get_tree() error: ENOKEY [ 37.480573][ T6906] loop3: detected capacity change from 0 to 1024 [ 37.482289][ T6906] EXT4-fs: Ignoring removed i_version option [ 37.504011][ T6906] EXT4-fs (loop3): mounted filesystem 00010100-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.510355][ T6906] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.86: lblock 0 mapped to illegal pblock 0 (length 4) [ 37.519982][ T6906] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 37.524211][ T6906] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 28 [ 37.528138][ T6906] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.528138][ T6906] [ 37.749787][ T6906] EXT4-fs (loop3): Total free blocks count 0 [ 37.749851][ T6906] EXT4-fs (loop3): Free/Dirty block details [ 37.749878][ T6906] EXT4-fs (loop3): free_blocks=4293918720 [ 37.749894][ T6906] EXT4-fs (loop3): dirty_blocks=64 [ 37.749904][ T6906] EXT4-fs (loop3): Block reservation details [ 37.749913][ T6906] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 37.780997][ T14] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 35 with error 28 [ 37.847452][ T6915] loop3: detected capacity change from 0 to 256 [ 37.847836][ T6915] exfat: Deprecated parameter 'utf8' [ 37.859468][ T6915] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 38.503502][ T6947] loop2: detected capacity change from 0 to 32768 [ 38.505554][ T6947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.103 (6947) [ 38.531137][ T6950] Zero length message leads to an empty skb [ 38.659213][ T6947] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 38.659283][ T6947] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 38.728641][ T6947] BTRFS info (device loop2): enabling ssd optimizations [ 38.728675][ T6947] BTRFS info (device loop2): enabling free space tree [ 38.753629][ T6947] BTRFS info (device loop2): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 38.809145][ T6524] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 38.920232][ T6980] loop1: detected capacity change from 0 to 24 [ 38.920617][ T6980] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 38.924964][ T6980] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 38.939964][ T6980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 39.030922][ T6993] loop2: detected capacity change from 0 to 256 [ 39.038353][ T6993] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.038395][ T6993] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 39.048248][ T6993] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 39.102026][ T7000] loop2: detected capacity change from 0 to 512 [ 39.140616][ T7000] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 39.140780][ T7000] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.144648][ T7000] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.151346][ T7000] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 39.157657][ T7000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.117: bg 0: block 40: padding at end of block bitmap is not set [ 39.160912][ T7000] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 39.166505][ T7000] EXT4-fs (loop2): 1 truncate cleaned up [ 39.168529][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.206632][ T6524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.313964][ T7021] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 39.314004][ T7021] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 39.390117][ T7023] binder: 7022:7023 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.392800][ T7023] binder: 7023 RLIMIT_NICE not set [ 39.492349][ T7027] binder: 7022:7027 tried to acquire reference to desc 0, got 1 instead [ 39.495166][ T7023] binder: 7023 RLIMIT_NICE not set [ 39.550791][ T7023] binder: release 7022:7023 transaction 12 in, still active [ 39.556458][ T7023] binder: send failed reply for transaction 12 to 7022:7027 [ 39.698484][ T26] binder: release 7022:7027 transaction 5 out, still active [ 39.698525][ T26] binder: undelivered TRANSACTION_COMPLETE [ 39.701282][ T26] binder: undelivered TRANSACTION_COMPLETE [ 39.701313][ T26] binder: undelivered TRANSACTION_ERROR: 29189 [ 39.701390][ T26] binder: send failed reply for transaction 5, target dead [ 39.726215][ T7015] loop0: detected capacity change from 0 to 32768 [ 39.755268][ T7015] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 39.777246][ T6529] ocfs2: Unmounting device (7,0) on (node local) [ 40.478180][ T7075] ----- ** replaying previous printk message ** [ 40.478180][ T7075] ------------[ cut here ]------------ [ 40.478207][ T7075] verifier bug: not inlined functions bpf_probe_read_user_str#114 is missing func(1) [ 40.478672][ T7075] WARNING: CPU: 1 PID: 7075 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 40.483069][ T7075] Modules linked in: [ 40.483703][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT [ 40.484993][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 40.486632][ T7075] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.487820][ T7075] pc : bpf_check+0x1559c/0x15d8c [ 40.488537][ T7075] lr : bpf_check+0x1559c/0x15d8c [ 40.489277][ T7075] sp : ffff8000a2ba7480 [ 40.489957][ T7075] x29: ffff8000a2ba7980 x28: dfff800000000000 x27: 0000000000000006 [ 40.491099][ T7075] x26: 1ffff00013733c13 x25: ffff80009b99e09c x24: ffff0000d0630008 [ 40.492432][ T7075] x23: ffff80009b99e098 x22: ffff80008b154880 x21: ffff800092e12000 [ 40.493842][ T7075] x20: ffff80009b99e09c x19: 1ffff00013733c13 x18: 1fffe0003379be88 [ 40.495168][ T7075] x17: ffff80008f7de000 x16: ffff80008b0155d8 x15: 0000000000000001 [ 40.496498][ T7075] x14: 1fffe0003379e900 x13: 0000000000000000 x12: 0000000000000000 [ 40.497931][ T7075] x11: 0000000000080000 x10: 0000000000000003 x9 : d69ff3bea1b45400 [ 40.499283][ T7075] x8 : d69ff3bea1b45400 x7 : ffff800080490a90 x6 : 0000000000000000 [ 40.500629][ T7075] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 40.502051][ T7075] x2 : ffff8000a2ba7040 x1 : ffff80008b668440 x0 : 0000000000000001 [ 40.503351][ T7075] Call trace: [ 40.503834][ T7075] bpf_check+0x1559c/0x15d8c (P) [ 40.504595][ T7075] bpf_prog_load+0xec8/0x13fc [ 40.505398][ T7075] __sys_bpf+0x450/0x628 [ 40.506080][ T7075] __arm64_sys_bpf+0x80/0x98 [ 40.506855][ T7075] invoke_syscall+0x98/0x2b8 [ 40.507531][ T7075] el0_svc_common+0x130/0x23c [ 40.508273][ T7075] do_el0_svc+0x48/0x58 [ 40.508882][ T7075] el0_svc+0x5c/0x254 [ 40.509587][ T7075] el0t_64_sync_handler+0x84/0x12c [ 40.510489][ T7075] el0t_64_sync+0x198/0x19c [ 40.511255][ T7075] irq event stamp: 352 [ 40.511941][ T7075] hardirqs last enabled at (351): [] finish_lock_switch+0xb0/0x1c0 [ 40.513520][ T7075] hardirqs last disabled at (352): [] el1_brk64+0x20/0x54 [ 40.514918][ T7075] softirqs last enabled at (138): [] local_bh_enable+0x10/0x34 [ 40.516404][ T7075] softirqs last disabled at (136): [] local_bh_disable+0x10/0x34 [ 40.517881][ T7075] ---[ end trace 0000000000000000 ]--- [ 40.518827][ C1] vkms_vblank_simulate: vblank timer overrun [ 40.692108][ T7077] iommufd_mock iommufd_mock0: Adding to iommu group 0