Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts. 2020/10/13 23:15:04 fuzzer started 2020/10/13 23:15:05 dialing manager at 10.128.0.26:41587 2020/10/13 23:15:05 syscalls: 3264 2020/10/13 23:15:05 code coverage: enabled 2020/10/13 23:15:05 comparison tracing: enabled 2020/10/13 23:15:05 extra coverage: enabled 2020/10/13 23:15:05 setuid sandbox: enabled 2020/10/13 23:15:05 namespace sandbox: enabled 2020/10/13 23:15:05 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/13 23:15:05 fault injection: enabled 2020/10/13 23:15:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/13 23:15:05 net packet injection: enabled 2020/10/13 23:15:05 net device setup: enabled 2020/10/13 23:15:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/13 23:15:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/13 23:15:05 USB emulation: enabled 2020/10/13 23:15:05 hci packet injection: enabled 2020/10/13 23:15:05 wifi device emulation: enabled 23:15:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="84a19d27178a97063ff6161a3f5c", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000400)="0f12cb480e16318655c730ccfe0d050bcd0cbc9ffc81355e37c341e10ff6f61b84e678aed938ce9695ca41c9b09834ef4e82ff7236bf74fcb9e6e842ea8489de0869d69b758a6782347538ac3404aa345cf62f9b45173855b16b92a9c24f2151a2f71fd07472af04d58dd012dc978b3f4e99e9616853b3e23b3af41803960ac0970aac4d8c8d85edb35f267c81b93c00fe6ef8841b3ef44ea4f04028793c4da1017f00bfae8def51b2284acf99416e4f0b8423f8bd9c9751"}, 0x40) 23:15:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback}, {@in=@multicast2, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) 23:15:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 23:15:10 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) syzkaller login: [ 70.792600][ T6888] IPVS: ftp: loaded support on port[0] = 21 [ 70.871592][ T6897] IPVS: ftp: loaded support on port[0] = 21 [ 71.072618][ T6931] IPVS: ftp: loaded support on port[0] = 21 [ 71.291741][ T7013] IPVS: ftp: loaded support on port[0] = 21 [ 71.524478][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 71.540913][ T7176] IPVS: ftp: loaded support on port[0] = 21 [ 71.647055][ T6897] chnl_net:caif_netlink_parms(): no params data found [ 71.693186][ T6931] chnl_net:caif_netlink_parms(): no params data found [ 71.869439][ T7259] IPVS: ftp: loaded support on port[0] = 21 [ 72.053169][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.061769][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.070939][ T6897] device bridge_slave_0 entered promiscuous mode [ 72.086794][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.093854][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.102464][ T6888] device bridge_slave_0 entered promiscuous mode [ 72.114060][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.122099][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.130309][ T6888] device bridge_slave_1 entered promiscuous mode [ 72.150754][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.158064][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.168756][ T6897] device bridge_slave_1 entered promiscuous mode [ 72.207830][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.215125][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.222782][ T6931] device bridge_slave_0 entered promiscuous mode [ 72.239672][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.248154][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.256100][ T6931] device bridge_slave_1 entered promiscuous mode [ 72.304804][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.329425][ T6897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.379342][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.412336][ T6897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.445325][ T6931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.461201][ T6931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.528025][ T7013] chnl_net:caif_netlink_parms(): no params data found [ 72.551349][ T6888] team0: Port device team_slave_0 added [ 72.579474][ T6897] team0: Port device team_slave_0 added [ 72.615940][ T6897] team0: Port device team_slave_1 added [ 72.623108][ T6888] team0: Port device team_slave_1 added [ 72.639608][ T6931] team0: Port device team_slave_0 added [ 72.648014][ T7176] chnl_net:caif_netlink_parms(): no params data found [ 72.703276][ T6931] team0: Port device team_slave_1 added [ 72.723995][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.733178][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.755512][ T6743] Bluetooth: hci0: command 0x0409 tx timeout [ 72.759927][ T6897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.786806][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.793782][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.822297][ T6897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.835112][ T2473] Bluetooth: hci1: command 0x0409 tx timeout [ 72.850187][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.860165][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.888419][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.954435][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.961448][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.988468][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.028609][ T6897] device hsr_slave_0 entered promiscuous mode [ 73.050822][ T6897] device hsr_slave_1 entered promiscuous mode [ 73.060137][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.068210][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.074381][ T2473] Bluetooth: hci2: command 0x0409 tx timeout [ 73.103769][ T6931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.161017][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.168771][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.195778][ T6931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.229294][ T7259] chnl_net:caif_netlink_parms(): no params data found [ 73.323561][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.330667][ T2664] Bluetooth: hci3: command 0x0409 tx timeout [ 73.338433][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.347254][ T7013] device bridge_slave_0 entered promiscuous mode [ 73.359562][ T6888] device hsr_slave_0 entered promiscuous mode [ 73.367811][ T6888] device hsr_slave_1 entered promiscuous mode [ 73.376233][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.385468][ T6888] Cannot create hsr debugfs directory [ 73.426225][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.433318][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.446614][ T7013] device bridge_slave_1 entered promiscuous mode [ 73.476996][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.484769][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.492916][ T7176] device bridge_slave_0 entered promiscuous mode [ 73.514360][ T6931] device hsr_slave_0 entered promiscuous mode [ 73.521458][ T6931] device hsr_slave_1 entered promiscuous mode [ 73.528671][ T6931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.536747][ T6931] Cannot create hsr debugfs directory [ 73.544673][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.554860][ T2473] Bluetooth: hci4: command 0x0409 tx timeout [ 73.567961][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.575831][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.583502][ T7176] device bridge_slave_1 entered promiscuous mode [ 73.619899][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.697950][ T7176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.775693][ T7176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.794855][ T2473] Bluetooth: hci5: command 0x0409 tx timeout [ 73.808954][ T7013] team0: Port device team_slave_0 added [ 73.847500][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.854808][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.863033][ T7259] device bridge_slave_0 entered promiscuous mode [ 73.883162][ T7013] team0: Port device team_slave_1 added [ 73.908425][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.915828][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.925411][ T7259] device bridge_slave_1 entered promiscuous mode [ 73.995357][ T7176] team0: Port device team_slave_0 added [ 74.049673][ T7176] team0: Port device team_slave_1 added [ 74.082680][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.090424][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.119381][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.149273][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.174706][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.181676][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.215145][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.258001][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.303465][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.313136][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.342644][ T7176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.356515][ T6897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.383529][ T6897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.419206][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.427002][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.453503][ T7176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.472203][ T6897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.492878][ T6897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.530177][ T7013] device hsr_slave_0 entered promiscuous mode [ 74.537369][ T7013] device hsr_slave_1 entered promiscuous mode [ 74.543869][ T7013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.551560][ T7013] Cannot create hsr debugfs directory [ 74.560587][ T7259] team0: Port device team_slave_0 added [ 74.599579][ T7259] team0: Port device team_slave_1 added [ 74.631553][ T6931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.642640][ T6931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.682774][ T7176] device hsr_slave_0 entered promiscuous mode [ 74.697469][ T7176] device hsr_slave_1 entered promiscuous mode [ 74.704492][ T7176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.712052][ T7176] Cannot create hsr debugfs directory [ 74.719669][ T6931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.743771][ T6931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.828491][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.835710][ T2473] Bluetooth: hci0: command 0x041b tx timeout [ 74.842105][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.870007][ T7259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.914251][ T2473] Bluetooth: hci1: command 0x041b tx timeout [ 74.936233][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.943195][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.971834][ T7259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.999354][ T6888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.049096][ T6888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.110651][ T6888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.153871][ T7259] device hsr_slave_0 entered promiscuous mode [ 75.161005][ T2473] Bluetooth: hci2: command 0x041b tx timeout [ 75.172048][ T7259] device hsr_slave_1 entered promiscuous mode [ 75.179501][ T7259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.187559][ T7259] Cannot create hsr debugfs directory [ 75.200796][ T6888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.373733][ T6897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.394457][ T2473] Bluetooth: hci3: command 0x041b tx timeout [ 75.454008][ T7013] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.495524][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.505301][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.515243][ T7013] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.529130][ T7013] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.576847][ T7013] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.634405][ T6743] Bluetooth: hci4: command 0x041b tx timeout [ 75.646442][ T6897] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.688177][ T7176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.702171][ T7176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.731463][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.764382][ T7176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.794576][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.803407][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.822752][ T2473] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.830165][ T2473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.843613][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.852967][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.866864][ T2473] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.874011][ T2473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.881835][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.890020][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.898328][ T7259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.915165][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 75.917890][ T7259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.946938][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.966571][ T7176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.984840][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.992797][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.008124][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.019898][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.038109][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.051851][ T7259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.081173][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.091971][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.103652][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.117387][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.124542][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.149068][ T7259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.161904][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.181371][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.190820][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.236662][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.245209][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.253767][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.265440][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.273968][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.281017][ T6743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.315885][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.335871][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.349348][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.359711][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.400051][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.409765][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.421476][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.430978][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.453728][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.476493][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.485886][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.493663][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.502249][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.511261][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.520013][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.528875][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.582963][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.592099][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.602586][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.609743][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.617913][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.627097][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.635971][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.654907][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.663663][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.673696][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.680839][ T6743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.694155][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.716290][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.723756][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.745205][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.771405][ T7176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.783081][ T6897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.844465][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.896507][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.906296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.924712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.932640][ T2642] Bluetooth: hci0: command 0x040f tx timeout [ 76.952797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.994011][ T2642] Bluetooth: hci1: command 0x040f tx timeout [ 77.007744][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.016983][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.026794][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.035698][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.043168][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.051788][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.059986][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.082094][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.101802][ T6888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.114829][ T6888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.127669][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.146536][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.156402][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.173271][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.199992][ T7176] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.223271][ T7259] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.234119][ T6736] Bluetooth: hci2: command 0x040f tx timeout [ 77.252687][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.261158][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.270921][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.280517][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.327670][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.337010][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.346496][ T2473] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.353547][ T2473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.362213][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.370231][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.378611][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.387649][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.396697][ T2473] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.403738][ T2473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.411930][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.420750][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.429367][ T2473] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.436525][ T2473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.444751][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.453319][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.461885][ T2473] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.469015][ T2473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.477282][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.486442][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.495166][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.516307][ T2473] Bluetooth: hci3: command 0x040f tx timeout [ 77.521764][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.566344][ T7013] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.573293][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.583418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.592584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.601826][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.611980][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.621896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.655323][ T6897] device veth0_vlan entered promiscuous mode [ 77.672220][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.681290][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.690269][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.699356][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.708246][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.718738][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.727659][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.736020][ T6736] Bluetooth: hci4: command 0x040f tx timeout [ 77.745103][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.759974][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.768913][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.782725][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.793713][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.802974][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.811896][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.824179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.832956][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.847967][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.855101][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.879639][ T6931] device veth0_vlan entered promiscuous mode [ 77.890953][ T6897] device veth1_vlan entered promiscuous mode [ 77.905670][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.916213][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.925731][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.934968][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.943460][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.952089][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.961685][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.987293][ T6736] Bluetooth: hci5: command 0x040f tx timeout [ 78.007092][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.015124][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.023770][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.033177][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.040339][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.048785][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.058267][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.067780][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.076812][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.086244][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.095939][ T6931] device veth1_vlan entered promiscuous mode [ 78.128839][ T7259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.154456][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.163045][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.173660][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.183167][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.192281][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.202891][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.212795][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.221695][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.230589][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.251928][ T7176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.277971][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.286745][ T6888] device veth0_vlan entered promiscuous mode [ 78.309630][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.318079][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.332494][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.340740][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.354885][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.363045][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.377547][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.386828][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.394461][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.419246][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.428647][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.438792][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.448068][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.483449][ T6888] device veth1_vlan entered promiscuous mode [ 78.493697][ T7013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.509711][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.518190][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.532044][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.555653][ T6931] device veth0_macvtap entered promiscuous mode [ 78.568318][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.604661][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.612919][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.623658][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.655556][ T6931] device veth1_macvtap entered promiscuous mode [ 78.692283][ T7176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.719963][ T6888] device veth0_macvtap entered promiscuous mode [ 78.729058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.738683][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.747037][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.757262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.766682][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.775780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.788072][ T6897] device veth0_macvtap entered promiscuous mode [ 78.829444][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.842440][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.856684][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.868253][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.879575][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.896656][ T6897] device veth1_macvtap entered promiscuous mode [ 78.922124][ T6888] device veth1_macvtap entered promiscuous mode [ 78.936040][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.943556][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.968116][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.001931][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.009771][ T2473] Bluetooth: hci0: command 0x0419 tx timeout [ 79.022818][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.033554][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.043601][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.054374][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.063235][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.073044][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.083456][ T2664] Bluetooth: hci1: command 0x0419 tx timeout [ 79.093412][ T6931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.109637][ T6931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.122021][ T6931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.133159][ T6931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.160772][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.173115][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.187061][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.206020][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.222272][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.235763][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.265813][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.277247][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.288598][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.299999][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.311029][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.324567][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.324645][ T2664] Bluetooth: hci2: command 0x0419 tx timeout [ 79.336580][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.354958][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.367703][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.382516][ T7176] device veth0_vlan entered promiscuous mode [ 79.398966][ T6897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.420894][ T6897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.434913][ T6897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.448170][ T6897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.479312][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.495605][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.508641][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.520297][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.532621][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.544164][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.557563][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.564757][ T2664] Bluetooth: hci3: command 0x0419 tx timeout [ 79.568129][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.587853][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.602582][ T7176] device veth1_vlan entered promiscuous mode [ 79.622255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.630693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.642519][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.651207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.660930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.670136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.679546][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.688490][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.699686][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.710260][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.739127][ T7259] device veth0_vlan entered promiscuous mode [ 79.754906][ T6888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.764623][ T6888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.773690][ T6888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.783150][ T6888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.794891][ T2664] Bluetooth: hci4: command 0x0419 tx timeout [ 79.842517][ T7259] device veth1_vlan entered promiscuous mode [ 79.861763][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.881994][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.028867][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.044486][ T2664] Bluetooth: hci5: command 0x0419 tx timeout [ 80.045496][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.129752][ T7176] device veth0_macvtap entered promiscuous mode [ 80.138940][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.148899][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.158504][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.167692][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.177757][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.196141][ T7013] device veth0_vlan entered promiscuous mode [ 80.259896][ T7259] device veth0_macvtap entered promiscuous mode [ 80.272599][ T2514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.290767][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.298354][ T2514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.311422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.327304][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.337277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.354697][ T7176] device veth1_macvtap entered promiscuous mode [ 80.409351][ T7259] device veth1_macvtap entered promiscuous mode [ 80.428496][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.437423][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.448601][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.461248][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.471376][ T7013] device veth1_vlan entered promiscuous mode [ 80.573570][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.593061][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.603373][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.623157][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.639581][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.675600][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 80.713075][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.741793][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 80.752674][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.766013][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 80.777527][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.789269][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.800173][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 80.811684][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.827634][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 80.842171][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.852648][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 80.867277][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.878823][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 80.889953][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.901903][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.914217][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.921933][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.933992][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.943282][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.953138][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.965969][ T2514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.984020][ T2514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.008327][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 81.031855][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.047345][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 81.061691][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.072451][ T7259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 81.089403][ T7259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.107544][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.135119][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.144849][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.169774][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.184995][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.193590][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.205464][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.216144][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 81.237791][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.257124][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 81.268093][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.278435][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 81.289173][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.300102][ T7176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 81.310594][ T7176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.322251][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.340815][ T7176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.364619][ T7176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.373310][ T7176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.388916][ T7176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.445586][ T7259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.474688][ T7259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.483406][ T7259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.524970][ T7259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 23:15:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback}, {@in=@multicast2, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) [ 81.570540][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.583198][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.604982][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.624398][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.637876][ T7013] device veth0_macvtap entered promiscuous mode 23:15:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback}, {@in=@multicast2, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) [ 81.689368][ T7013] device veth1_macvtap entered promiscuous mode [ 81.767401][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.798118][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.835095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.843504][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.908157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.927122][ C0] hrtimer: interrupt took 47493 ns 23:15:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback}, {@in=@multicast2, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) [ 82.008426][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 82.054406][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.077703][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 82.101221][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.129644][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 23:15:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) [ 82.146536][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.157767][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 82.187957][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.207260][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 82.218900][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.247147][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_0 23:15:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) [ 82.287755][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.312613][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.354596][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 82.423851][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.468717][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 82.530257][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.555431][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 82.570190][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 23:15:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="84a19d27178a97063ff6161a3f5c", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000400)="0f12cb480e16318655c730ccfe0d050bcd0cbc9ffc81355e37c341e10ff6f61b84e678aed938ce9695ca41c9b09834ef4e82ff7236bf74fcb9e6e842ea8489de0869d69b758a6782347538ac3404aa345cf62f9b45173855b16b92a9c24f2151a2f71fd07472af04d58dd012dc978b3f4e99e9616853b3e23b3af41803960ac0970aac4d8c8d85edb35f267c81b93c00fe6ef8841b3ef44ea4f04028793c4da1017f00bfae8def51b2284acf99416e4f0b8423f8bd9c9751"}, 0x40) [ 82.581153][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 82.592692][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.609990][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 82.631617][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.657012][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.694380][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.705276][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:15:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) [ 82.755227][ T7013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.774302][ T7013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.783193][ T7013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.819993][ T7013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.853942][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.871063][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.929020][ T2514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.955465][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.975151][ T2514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.985544][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.016858][ T8250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.037341][ T8250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.081372][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.103745][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.130536][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.149885][ T2664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.338649][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.377542][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.406448][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.414414][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.439142][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.455769][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.776560][ T8333] [ 83.778933][ T8333] ===================================================== [ 83.785864][ T8333] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 83.793313][ T8333] 5.9.0-syzkaller #0 Not tainted [ 83.798262][ T8333] ----------------------------------------------------- [ 83.805198][ T8333] syz-executor.3/8333 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 83.813861][ T8333] ffff888099fb8760 (&card->ctl_files_rwlock){.+.+}-{2:2}, at: snd_ctl_notify.part.0+0x36/0x550 [ 83.824384][ T8333] [ 83.824384][ T8333] and this task is already holding: [ 83.831748][ T8333] ffff888215359108 (&group->lock){..-.}-{2:2}, at: snd_pcm_stream_lock_irq+0x8e/0xb0 [ 83.841221][ T8333] which would create a new lock dependency: [ 83.847103][ T8333] (&group->lock){..-.}-{2:2} -> (&card->ctl_files_rwlock){.+.+}-{2:2} [ 83.855352][ T8333] [ 83.855352][ T8333] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 83.864792][ T8333] (&group->lock){..-.}-{2:2} [ 83.864808][ T8333] [ 83.864808][ T8333] ... which became SOFTIRQ-irq-safe at: [ 83.877185][ T8333] lock_acquire+0x219/0x9d0 [ 83.881777][ T8333] _raw_spin_lock_irqsave+0x94/0xd0 [ 83.887060][ T8333] _snd_pcm_stream_lock_irqsave+0x9f/0xd0 [ 83.892869][ T8333] snd_pcm_period_elapsed+0x24/0x250 [ 83.898253][ T8333] dummy_hrtimer_callback+0x94/0x1b0 [ 83.904234][ T8333] __hrtimer_run_queues+0x693/0xea0 [ 83.909559][ T8333] hrtimer_run_softirq+0x17b/0x360 [ 83.914784][ T8333] __do_softirq+0x203/0xac5 [ 83.919370][ T8333] asm_call_irq_on_stack+0xf/0x20 [ 83.924486][ T8333] do_softirq_own_stack+0xaa/0xd0 [ 83.929600][ T8333] irq_exit_rcu+0x235/0x280 [ 83.934223][ T8333] sysvec_apic_timer_interrupt+0x4d/0x100 [ 83.940027][ T8333] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 83.946106][ T8333] smp_call_function_single+0x197/0x500 [ 83.951740][ T8333] smp_call_function_many_cond+0x1a4/0xa10 [ 83.957649][ T8333] on_each_cpu+0x4c/0x1f0 [ 83.962070][ T8333] flush_tlb_kernel_range+0x1a5/0x270 [ 83.967530][ T8333] __purge_vmap_area_lazy+0x7f7/0x1b70 [ 83.973076][ T8333] _vm_unmap_aliases.part.0+0x3d6/0x4e0 [ 83.978702][ T8333] vm_unmap_aliases+0x42/0x50 [ 83.983462][ T8333] change_page_attr_set_clr+0x241/0x500 [ 83.989091][ T8333] set_memory_ro+0x78/0xa0 [ 83.993591][ T8333] bpf_int_jit_compile+0xd96/0x1120 [ 83.998875][ T8333] bpf_prog_select_runtime+0x59b/0xb20 [ 84.004416][ T8333] bpf_prog_load+0xde4/0x1bc0 [ 84.009200][ T8333] __do_sys_bpf+0x1344/0x4c60 [ 84.013964][ T8333] do_syscall_64+0x2d/0x70 [ 84.018465][ T8333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 84.024431][ T8333] [ 84.024431][ T8333] to a SOFTIRQ-irq-unsafe lock: [ 84.031873][ T8333] (&card->ctl_files_rwlock){.+.+}-{2:2} [ 84.031889][ T8333] [ 84.031889][ T8333] ... which became SOFTIRQ-irq-unsafe at: [ 84.045378][ T8333] ... [ 84.045399][ T8333] lock_acquire+0x219/0x9d0 [ 84.052589][ T8333] _raw_read_lock+0x5b/0x70 [ 84.057184][ T8333] snd_ctl_notify.part.0+0x36/0x550 [ 84.062498][ T8333] snd_ctl_notify+0x8f/0xb0 [ 84.067086][ T8333] __snd_ctl_add_replace+0x638/0x800 [ 84.072483][ T8333] snd_ctl_add_replace+0x76/0x130 [ 84.077594][ T8333] snd_dummy_probe+0xc22/0x1180 [ 84.082557][ T8333] platform_drv_probe+0x87/0x140 [ 84.087582][ T8333] really_probe+0x282/0x9f0 [ 84.092173][ T8333] driver_probe_device+0xfe/0x1d0 [ 84.097280][ T8333] __device_attach_driver+0x1c2/0x220 [ 84.102753][ T8333] bus_for_each_drv+0x15f/0x1e0 [ 84.107688][ T8333] __device_attach+0x228/0x470 [ 84.112644][ T8333] bus_probe_device+0x1e4/0x290 [ 84.117585][ T8333] device_add+0xb17/0x1c40 [ 84.122083][ T8333] platform_device_add+0x34f/0x6d0 [ 84.127298][ T8333] platform_device_register_full+0x38c/0x4e0 [ 84.133380][ T8333] alsa_card_dummy_init+0x1e0/0x309 [ 84.138672][ T8333] do_one_initcall+0x103/0x6f0 [ 84.143546][ T8333] kernel_init_freeable+0x652/0x6d6 [ 84.148843][ T8333] kernel_init+0xd/0x1b8 [ 84.153171][ T8333] ret_from_fork+0x1f/0x30 [ 84.157667][ T8333] [ 84.157667][ T8333] other info that might help us debug this: [ 84.157667][ T8333] [ 84.167894][ T8333] Possible interrupt unsafe locking scenario: [ 84.167894][ T8333] [ 84.176212][ T8333] CPU0 CPU1 [ 84.181574][ T8333] ---- ---- [ 84.186948][ T8333] lock(&card->ctl_files_rwlock); [ 84.192052][ T8333] local_irq_disable(); [ 84.198798][ T8333] lock(&group->lock); [ 84.205484][ T8333] lock(&card->ctl_files_rwlock); [ 84.213108][ T8333] [ 84.216562][ T8333] lock(&group->lock); [ 84.220888][ T8333] [ 84.220888][ T8333] *** DEADLOCK *** [ 84.220888][ T8333] [ 84.229119][ T8333] 1 lock held by syz-executor.3/8333: [ 84.234735][ T8333] #0: ffff888215359108 (&group->lock){..-.}-{2:2}, at: snd_pcm_stream_lock_irq+0x8e/0xb0 [ 84.244644][ T8333] [ 84.244644][ T8333] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 84.255083][ T8333] -> (&group->lock){..-.}-{2:2} { [ 84.260116][ T8333] IN-SOFTIRQ-W at: [ 84.264103][ T8333] lock_acquire+0x219/0x9d0 [ 84.270251][ T8333] _raw_spin_lock_irqsave+0x94/0xd0 [ 84.277116][ T8333] _snd_pcm_stream_lock_irqsave+0x9f/0xd0 [ 84.284486][ T8333] snd_pcm_period_elapsed+0x24/0x250 [ 84.291418][ T8333] dummy_hrtimer_callback+0x94/0x1b0 [ 84.298957][ T8333] __hrtimer_run_queues+0x693/0xea0 [ 84.305800][ T8333] hrtimer_run_softirq+0x17b/0x360 [ 84.312564][ T8333] __do_softirq+0x203/0xac5 [ 84.318713][ T8333] asm_call_irq_on_stack+0xf/0x20 [ 84.325387][ T8333] do_softirq_own_stack+0xaa/0xd0 [ 84.332080][ T8333] irq_exit_rcu+0x235/0x280 [ 84.338240][ T8333] sysvec_apic_timer_interrupt+0x4d/0x100 [ 84.345613][ T8333] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 84.353242][ T8333] smp_call_function_single+0x197/0x500 [ 84.360436][ T8333] smp_call_function_many_cond+0x1a4/0xa10 [ 84.367891][ T8333] on_each_cpu+0x4c/0x1f0 [ 84.373868][ T8333] flush_tlb_kernel_range+0x1a5/0x270 [ 84.380895][ T8333] __purge_vmap_area_lazy+0x7f7/0x1b70 [ 84.388000][ T8333] _vm_unmap_aliases.part.0+0x3d6/0x4e0 [ 84.395221][ T8333] vm_unmap_aliases+0x42/0x50 [ 84.401566][ T8333] change_page_attr_set_clr+0x241/0x500 [ 84.408851][ T8333] set_memory_ro+0x78/0xa0 [ 84.414917][ T8333] bpf_int_jit_compile+0xd96/0x1120 [ 84.421764][ T8333] bpf_prog_select_runtime+0x59b/0xb20 23:15:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="84a19d27178a97063ff6161a3f5c", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000400)="0f12cb480e16318655c730ccfe0d050bcd0cbc9ffc81355e37c341e10ff6f61b84e678aed938ce9695ca41c9b09834ef4e82ff7236bf74fcb9e6e842ea8489de0869d69b758a6782347538ac3404aa345cf62f9b45173855b16b92a9c24f2151a2f71fd07472af04d58dd012dc978b3f4e99e9616853b3e23b3af41803960ac0970aac4d8c8d85edb35f267c81b93c00fe6ef8841b3ef44ea4f04028793c4da1017f00bfae8def51b2284acf99416e4f0b8423f8bd9c9751"}, 0x40) [ 84.428871][ T8333] bpf_prog_load+0xde4/0x1bc0 [ 84.435196][ T8333] __do_sys_bpf+0x1344/0x4c60 [ 84.441553][ T8333] do_syscall_64+0x2d/0x70 [ 84.447791][ T8333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 84.455317][ T8333] INITIAL USE at: [ 84.459215][ T8333] lock_acquire+0x219/0x9d0 [ 84.465275][ T8333] _raw_spin_lock_irq+0x94/0xd0 [ 84.471688][ T8333] snd_pcm_hw_params+0x12a/0x1920 [ 84.478274][ T8333] snd_pcm_kernel_ioctl+0xd1/0x240 [ 84.485229][ T8333] snd_pcm_oss_change_params_locked+0x130a/0x3420 [ 84.493205][ T8333] snd_pcm_oss_make_ready_locked+0xb3/0x230 [ 84.500660][ T8333] snd_pcm_oss_write+0x45d/0x940 [ 84.507164][ T8333] __kernel_write+0x199/0x570 [ 84.513400][ T8333] write_pipe_buf+0x153/0x1f0 [ 84.519637][ T8333] __splice_from_pipe+0x3dc/0x830 [ 84.526397][ T8333] direct_splice_actor+0x228/0x2f0 [ 84.533093][ T8333] splice_direct_to_actor+0x38c/0x980 [ 84.540028][ T8333] do_splice_direct+0x1b3/0x280 [ 84.546440][ T8333] do_sendfile+0x55f/0xd40 [ 84.552441][ T8333] __x64_sys_sendfile64+0x1cc/0x210 [ 84.559203][ T8333] do_syscall_64+0x2d/0x70 [ 84.565179][ T8333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 84.572622][ T8333] } [ 84.575124][ T8333] ... key at: [] __key.7+0x0/0x40 [ 84.582211][ T8333] ... acquired at: [ 84.586009][ T8333] lock_acquire+0x219/0x9d0 [ 84.590694][ T8333] _raw_read_lock+0x5b/0x70 [ 84.595361][ T8333] snd_ctl_notify.part.0+0x36/0x550 [ 84.600717][ T8333] snd_ctl_notify+0x8f/0xb0 [ 84.605384][ T8333] loopback_trigger+0x112f/0x1ab0 [ 84.611005][ T8333] snd_pcm_do_start+0xb1/0xf0 [ 84.615857][ T8333] snd_pcm_action+0xc8/0x170 [ 84.620713][ T8333] __snd_pcm_lib_xfer+0x1202/0x1a90 [ 84.626075][ T8333] snd_pcm_oss_write3+0x107/0x320 [ 84.631266][ T8333] io_playback_transfer+0x27e/0x330 [ 84.636625][ T8333] snd_pcm_plug_write_transfer+0x2cd/0x3f0 [ 84.642594][ T8333] snd_pcm_oss_write2+0x245/0x3f0 [ 84.647814][ T8333] snd_pcm_oss_write+0x705/0x940 [ 84.652915][ T8333] vfs_write+0x2b0/0x730 [ 84.657326][ T8333] ksys_write+0x12d/0x250 [ 84.661816][ T8333] do_syscall_64+0x2d/0x70 [ 84.666393][ T8333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 84.672438][ T8333] [ 84.674751][ T8333] [ 84.674751][ T8333] the dependencies between the lock to be acquired [ 84.674756][ T8333] and SOFTIRQ-irq-unsafe lock: [ 84.688268][ T8333] -> (&card->ctl_files_rwlock){.+.+}-{2:2} { [ 84.694245][ T8333] HARDIRQ-ON-R at: [ 84.698238][ T8333] lock_acquire+0x219/0x9d0 [ 84.704375][ T8333] _raw_read_lock+0x5b/0x70 [ 84.710520][ T8333] snd_ctl_notify.part.0+0x36/0x550 [ 84.717356][ T8333] snd_ctl_notify+0x8f/0xb0 [ 84.723494][ T8333] __snd_ctl_add_replace+0x638/0x800 [ 84.730437][ T8333] snd_ctl_add_replace+0x76/0x130 [ 84.737109][ T8333] snd_dummy_probe+0xc22/0x1180 [ 84.743595][ T8333] platform_drv_probe+0x87/0x140 [ 84.750174][ T8333] really_probe+0x282/0x9f0 [ 84.756319][ T8333] driver_probe_device+0xfe/0x1d0 [ 84.762990][ T8333] __device_attach_driver+0x1c2/0x220 [ 84.769998][ T8333] bus_for_each_drv+0x15f/0x1e0 [ 84.776525][ T8333] __device_attach+0x228/0x470 [ 84.783120][ T8333] bus_probe_device+0x1e4/0x290 [ 84.789613][ T8333] device_add+0xb17/0x1c40 [ 84.795669][ T8333] platform_device_add+0x34f/0x6d0 [ 84.802419][ T8333] platform_device_register_full+0x38c/0x4e0 [ 84.810036][ T8333] alsa_card_dummy_init+0x1e0/0x309 [ 84.816877][ T8333] do_one_initcall+0x103/0x6f0 [ 84.823297][ T8333] kernel_init_freeable+0x652/0x6d6 [ 84.830145][ T8333] kernel_init+0xd/0x1b8 [ 84.836042][ T8333] ret_from_fork+0x1f/0x30 [ 84.842119][ T8333] SOFTIRQ-ON-R at: [ 84.846106][ T8333] lock_acquire+0x219/0x9d0 [ 84.852247][ T8333] _raw_read_lock+0x5b/0x70 [ 84.858403][ T8333] snd_ctl_notify.part.0+0x36/0x550 [ 84.865243][ T8333] snd_ctl_notify+0x8f/0xb0 [ 84.871389][ T8333] __snd_ctl_add_replace+0x638/0x800 [ 84.878314][ T8333] snd_ctl_add_replace+0x76/0x130 [ 84.884977][ T8333] snd_dummy_probe+0xc22/0x1180 [ 84.891470][ T8333] platform_drv_probe+0x87/0x140 [ 84.898046][ T8333] really_probe+0x282/0x9f0 [ 84.904300][ T8333] driver_probe_device+0xfe/0x1d0 [ 84.910982][ T8333] __device_attach_driver+0x1c2/0x220 [ 84.917994][ T8333] bus_for_each_drv+0x15f/0x1e0 [ 84.924505][ T8333] __device_attach+0x228/0x470 [ 84.930907][ T8333] bus_probe_device+0x1e4/0x290 [ 84.937396][ T8333] device_add+0xb17/0x1c40 [ 84.943453][ T8333] platform_device_add+0x34f/0x6d0 [ 84.950207][ T8333] platform_device_register_full+0x38c/0x4e0 [ 84.957836][ T8333] alsa_card_dummy_init+0x1e0/0x309 [ 84.964675][ T8333] do_one_initcall+0x103/0x6f0 [ 84.971082][ T8333] kernel_init_freeable+0x652/0x6d6 [ 84.977932][ T8333] kernel_init+0xd/0x1b8 [ 84.983815][ T8333] ret_from_fork+0x1f/0x30 [ 84.989862][ T8333] INITIAL READ USE at: [ 84.994184][ T8333] lock_acquire+0x219/0x9d0 [ 85.000676][ T8333] _raw_read_lock+0x5b/0x70 [ 85.007182][ T8333] snd_ctl_notify.part.0+0x36/0x550 [ 85.014374][ T8333] snd_ctl_notify+0x8f/0xb0 [ 85.020863][ T8333] __snd_ctl_add_replace+0x638/0x800 [ 85.028132][ T8333] snd_ctl_add_replace+0x76/0x130 [ 85.035164][ T8333] snd_dummy_probe+0xc22/0x1180 [ 85.042013][ T8333] platform_drv_probe+0x87/0x140 [ 85.049117][ T8333] really_probe+0x282/0x9f0 [ 85.055624][ T8333] driver_probe_device+0xfe/0x1d0 [ 85.062641][ T8333] __device_attach_driver+0x1c2/0x220 [ 85.070010][ T8333] bus_for_each_drv+0x15f/0x1e0 [ 85.076850][ T8333] __device_attach+0x228/0x470 [ 85.083599][ T8333] bus_probe_device+0x1e4/0x290 [ 85.090438][ T8333] device_add+0xb17/0x1c40 [ 85.096838][ T8333] platform_device_add+0x34f/0x6d0 [ 85.103938][ T8333] platform_device_register_full+0x38c/0x4e0 [ 85.111905][ T8333] alsa_card_dummy_init+0x1e0/0x309 [ 85.119089][ T8333] do_one_initcall+0x103/0x6f0 [ 85.125860][ T8333] kernel_init_freeable+0x652/0x6d6 [ 85.133051][ T8333] kernel_init+0xd/0x1b8 [ 85.139281][ T8333] ret_from_fork+0x1f/0x30 [ 85.145686][ T8333] } [ 85.148185][ T8333] ... key at: [] __key.11+0x0/0x40 [ 85.155358][ T8333] ... acquired at: [ 85.159160][ T8333] lock_acquire+0x219/0x9d0 [ 85.163821][ T8333] _raw_read_lock+0x5b/0x70 [ 85.168485][ T8333] snd_ctl_notify.part.0+0x36/0x550 [ 85.173840][ T8333] snd_ctl_notify+0x8f/0xb0 [ 85.178520][ T8333] loopback_trigger+0x112f/0x1ab0 [ 85.185443][ T8333] snd_pcm_do_start+0xb1/0xf0 [ 85.190279][ T8333] snd_pcm_action+0xc8/0x170 [ 85.195039][ T8333] __snd_pcm_lib_xfer+0x1202/0x1a90 [ 85.200485][ T8333] snd_pcm_oss_write3+0x107/0x320 [ 85.205692][ T8333] io_playback_transfer+0x27e/0x330 [ 85.211052][ T8333] snd_pcm_plug_write_transfer+0x2cd/0x3f0 [ 85.217020][ T8333] snd_pcm_oss_write2+0x245/0x3f0 [ 85.222205][ T8333] snd_pcm_oss_write+0x705/0x940 [ 85.227305][ T8333] vfs_write+0x2b0/0x730 [ 85.231723][ T8333] ksys_write+0x12d/0x250 [ 85.236306][ T8333] do_syscall_64+0x2d/0x70 [ 85.240883][ T8333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 85.246924][ T8333] [ 85.249236][ T8333] [ 85.249236][ T8333] stack backtrace: [ 85.255116][ T8333] CPU: 1 PID: 8333 Comm: syz-executor.3 Not tainted 5.9.0-syzkaller #0 [ 85.263335][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.273374][ T8333] Call Trace: [ 85.276661][ T8333] dump_stack+0x198/0x1fb [ 85.280987][ T8333] check_irq_usage.cold+0x4c2/0x5d8 [ 85.286184][ T8333] ? print_shortest_lock_dependencies+0x80/0x80 [ 85.292429][ T8333] ? lock_chain_count+0x20/0x20 [ 85.297284][ T8333] ? check_path.constprop.0+0x22/0x40 [ 85.302657][ T8333] ? perf_trace_lock_acquire+0xf8/0x550 [ 85.308191][ T8333] ? lockdep_lock+0xe3/0x250 [ 85.312768][ T8333] ? alloc_chain_hlocks+0x230/0x770 [ 85.317954][ T8333] __lock_acquire+0x2840/0x5590 [ 85.322802][ T8333] ? lockdep_hardirqs_on_prepare+0x450/0x450 [ 85.328773][ T8333] lock_acquire+0x219/0x9d0 [ 85.333271][ T8333] ? snd_ctl_notify.part.0+0x36/0x550 [ 85.338630][ T8333] ? lock_release+0x7e0/0x7e0 [ 85.343302][ T8333] _raw_read_lock+0x5b/0x70 [ 85.347816][ T8333] ? snd_ctl_notify.part.0+0x36/0x550 [ 85.353178][ T8333] snd_ctl_notify.part.0+0x36/0x550 [ 85.358371][ T8333] snd_ctl_notify+0x8f/0xb0 [ 85.362862][ T8333] loopback_trigger+0x112f/0x1ab0 [ 85.367883][ T8333] snd_pcm_do_start+0xb1/0xf0 [ 85.372560][ T8333] snd_pcm_action+0xc8/0x170 [ 85.377143][ T8333] __snd_pcm_lib_xfer+0x1202/0x1a90 [ 85.382344][ T8333] ? trace_raw_output_applptr+0x300/0x300 [ 85.388052][ T8333] ? snd_pcm_hw_rule_step+0x440/0x440 [ 85.393434][ T8333] ? check_preemption_disabled+0x50/0x130 [ 85.399141][ T8333] ? pcm_lib_apply_appl_ptr+0x3e0/0x3e0 [ 85.404681][ T8333] ? __lock_acquire+0x2bd4/0x5590 [ 85.409713][ T8333] ? __mutex_unlock_slowpath+0xe2/0x610 [ 85.415248][ T8333] ? wait_for_completion+0x260/0x260 [ 85.420527][ T8333] snd_pcm_oss_write3+0x107/0x320 [ 85.425544][ T8333] io_playback_transfer+0x27e/0x330 [ 85.430735][ T8333] snd_pcm_plug_write_transfer+0x2cd/0x3f0 [ 85.436551][ T8333] ? snd_pcm_plug_client_channels_buf+0x440/0x440 [ 85.443051][ T8333] ? snd_pcm_format_physical_width+0x77/0xa0 [ 85.449042][ T8333] ? snd_pcm_plug_client_channels_buf+0x20b/0x440 [ 85.455449][ T8333] snd_pcm_oss_write2+0x245/0x3f0 [ 85.460486][ T8333] ? snd_pcm_oss_write3+0x320/0x320 [ 85.465675][ T8333] ? snd_pcm_kernel_ioctl+0x158/0x240 [ 85.471038][ T8333] snd_pcm_oss_write+0x705/0x940 [ 85.475966][ T8333] ? security_file_permission+0x248/0x560 [ 85.481699][ T8333] ? rw_verify_area+0x11d/0x360 [ 85.486542][ T8333] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 85.492075][ T8333] vfs_write+0x2b0/0x730 [ 85.496323][ T8333] ksys_write+0x12d/0x250 [ 85.500643][ T8333] ? __ia32_sys_read+0xb0/0xb0 [ 85.505397][ T8333] ? check_preemption_disabled+0x50/0x130 [ 85.511111][ T8333] ? syscall_enter_from_user_mode+0x1d/0x60 [ 85.517007][ T8333] do_syscall_64+0x2d/0x70 [ 85.521431][ T8333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 85.527311][ T8333] RIP: 0033:0x45de59 [ 85.531197][ T8333] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 85.550890][ T8333] RSP: 002b:00007f8a01f41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.559293][ T8333] RAX: ffffffffffffffda RBX: 000000000003ac40 RCX: 000000000045de59 [ 85.567258][ T8333] RDX: 00000000ffffffd9 RSI: 0000000020000080 RDI: 0000000000000003 [ 85.575220][ T8333] RBP: 000000000118c008 R08: 0000000000000000 R09: 0000000000000000 [ 85.583190][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 85.591166][ T8333] R13: 000000000169fb7f R14: 00007f8a01f429c0 R15: 000000000118bfd4 23:15:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) 23:15:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 23:15:25 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="84a19d27178a97063ff6161a3f5c", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000400)="0f12cb480e16318655c730ccfe0d050bcd0cbc9ffc81355e37c341e10ff6f61b84e678aed938ce9695ca41c9b09834ef4e82ff7236bf74fcb9e6e842ea8489de0869d69b758a6782347538ac3404aa345cf62f9b45173855b16b92a9c24f2151a2f71fd07472af04d58dd012dc978b3f4e99e9616853b3e23b3af41803960ac0970aac4d8c8d85edb35f267c81b93c00fe6ef8841b3ef44ea4f04028793c4da1017f00bfae8def51b2284acf99416e4f0b8423f8bd9c9751"}, 0x40) 23:15:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 23:15:25 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:25 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 23:15:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:28 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 23:15:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:30 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:30 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:30 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:30 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:30 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:30 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:31 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:31 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:31 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:31 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:31 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:31 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:31 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:31 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:31 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40042}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x14}, "1fc0f209ca5681a8e5b2b4e1774d3a199f66c731"}, 0x18) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, r1, 0x0, 0x1ce8) 23:15:32 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:32 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:32 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:32 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="84a19d27178a97063ff6161a3f5c", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000400)="0f12cb480e16318655c730ccfe0d050bcd0cbc9ffc81355e37c341e10ff6f61b84e678aed938ce9695ca41c9b09834ef4e82ff7236bf74fcb9e6e842ea8489de0869d69b758a6782347538ac3404aa345cf62f9b45173855b16b92a9c24f2151a2f71fd07472af04d58dd012dc978b3f4e99e9616853b3e23b3af41803960ac0970aac4d8c8d85edb35f267c81b93c00fe6ef8841b3ef44ea4f04028793c4da1017f00bfae8def51b2284acf99416e4f0b8423f8bd9c9751"}, 0x40) 23:15:32 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:32 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:32 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 23:15:32 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:32 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 23:15:33 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="84a19d27178a97063ff6161a3f5c", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000400)="0f12cb480e16318655c730ccfe0d050bcd0cbc9ffc81355e37c341e10ff6f61b84e678aed938ce9695ca41c9b09834ef4e82ff7236bf74fcb9e6e842ea8489de0869d69b758a6782347538ac3404aa345cf62f9b45173855b16b92a9c24f2151a2f71fd07472af04d58dd012dc978b3f4e99e9616853b3e23b3af41803960ac0970aac4d8c8d85edb35f267c81b93c00fe6ef8841b3ef44ea4f04028793c4da1017f00bfae8def51b2284acf99416e4f0b8423f8bd9c9751"}, 0x40) 23:15:33 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:33 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 23:15:33 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="84a19d27178a97063ff6161a3f5c", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000400)="0f12cb480e16318655c730ccfe0d050bcd0cbc9ffc81355e37c341e10ff6f61b84e678aed938ce9695ca41c9b09834ef4e82ff7236bf74fcb9e6e842ea8489de0869d69b758a6782347538ac3404aa345cf62f9b45173855b16b92a9c24f2151a2f71fd07472af04d58dd012dc978b3f4e99e9616853b3e23b3af41803960ac0970aac4d8c8d85edb35f267c81b93c00fe6ef8841b3ef44ea4f04028793c4da1017f00bfae8def51b2284acf99416e4f0b8423f8bd9c9751"}, 0x40) 23:15:33 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffe) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400800, 0x0) r3 = openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) dup2(r1, r2) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000002c0)={0x9, 0x3f}) tee(r0, 0xffffffffffffffff, 0x60, 0xe) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000380)=""/251) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000480)="edefcb51d9050000000000000016893ade8ff1666a331308e8209dff87c89d4498c43801e0fc9265f33d469b13d1a438e288f50cf860f5a124c5f1ab5d95842d4700480a7a5056feb6a065cde13a6ef1be512708b381a9cd226e6c7a095e75f9d88d2a915ebd60adff84f3b5db44aed315d175438280ec6486fafaef7c6cb3c9110497e6d5db69") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x3, 0x2}, 0x2}}, 0x18) 23:15:33 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(r0, 0x0, 0x0) close(r0) 23:15:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811)