last executing test programs: 28.454652528s ago: executing program 1 (id=97): capset(0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xcb3e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r8, r8, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) 25.564069857s ago: executing program 3 (id=102): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="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", 0x141}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af58341a53c3d910e47a2523d4b83e6c3ded75548aee74b3a03320a202786503129056e9eec1f3decffe2ab6019ff0be7b18f4bcf89c7eccbc1747d27503674289bf6014a2099298645fef8e6ea5ce590d53a414363bc9824d8590af54581553f1e78", 0xc0}, {&(0x7f0000001080)="54e9498763dd5250c697dbbefe317cc7f260b3aa6a7d42b697f9dc923a273271a7d209b622e1c666df05e011c00c052b2b12c1358bb59f004bde945032c5ab51b8a7eeac480480b2e86e73cea813da8c20d75b76af42c424017c909d330e195c38ac12ed085ca18365b3192a4a1936fbdd30ad895008b0212f872cb0eb5cadb3cbdedab6870c51b40897731d739106a4f2fe1e3dafac5b1caa252de07dfa508eefc200ac515173aac5138f72c54a3d4ce083e7f35d9bc9db2299b589bc54adf01c062bc510a0eec7069dafa2daffa0e435efa697293fd1ff22b3e288cf86ea1fcf69c509c905a4d196d440ebe559ed91fc31afef6dafc9dfe99bede2b8219fad183fa3cd84417a43e80c4c5c49104f5d303f80b1e8120abea9cedb5c9270f9379b63cb8636a212140ba70fdd93243a1208bfc4161d2ac00eba76780342a4c95dbe8722472ee46d688c20f6a5e551faf001938606", 0x154}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 24.051691472s ago: executing program 1 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setrlimit(0x1, &(0x7f0000000280)={0x4, 0x697}) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x30000000}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x5, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]}) 22.33885232s ago: executing program 3 (id=106): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1b8f605103dcdbe0c8755554bf56fcb22df82948875dd027afbb587bec72091d008b2a1449b62d9ac246c76868eb4d54cc19b0a249ed33b010741a8c045e0f4299792fb0fb1b9e1041b715bd98f2ebb174d70873b048429d48e356e4e", 0x119}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af583", 0x60}, {&(0x7f0000001080)="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", 0x309}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) read$FUSE(r3, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000240)) 21.114726938s ago: executing program 1 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x4, {0x7}}, 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setrlimit(0x1, &(0x7f0000000280)={0x4, 0x697}) r8 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x30000000}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x5, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]}) 19.928099567s ago: executing program 2 (id=110): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x8004) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = gettid() r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r7 = fcntl$dupfd(r5, 0x406, r5) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r6, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r8 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 16.456790277s ago: executing program 3 (id=112): capset(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)='\x00\x00', 0x2, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xcb3e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r8, r8, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) 16.2065952s ago: executing program 2 (id=114): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x8004) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r9 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 15.540900487s ago: executing program 1 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x4, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setrlimit(0x1, &(0x7f0000000280)={0x4, 0x697}) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x30000000}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x5, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]}) 13.758572164s ago: executing program 4 (id=117): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="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", 0x141}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af58341a53c3d910e47a2523d4b83e6c3ded75548aee74b3a03320a202786503129056e9eec1f3decffe2ab6019ff0be7b18f4bcf89c7eccbc1747d27503674289bf6014a2099298645fef8e6ea5ce590d53a414363bc9824d8590af54581553f1e78", 0xc0}, {&(0x7f0000001080)="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", 0x154}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13.332944945s ago: executing program 2 (id=118): capset(0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xcb3e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r8, r8, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) 13.308256031s ago: executing program 4 (id=119): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af58341a53c3d910e47a2523d4b83e6c3ded75548aee74b3a03320a202786503129056e9eec1f3decffe2ab6019ff0be7b18f4bcf89c7eccbc1747d27503674289bf6014a2099298645fef8e6ea5ce590d53a414363bc9824d8590af54581553f1e78", 0xc0}, {&(0x7f0000001080)="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", 0x309}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) read$FUSE(r3, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c25) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000240)) 12.114463054s ago: executing program 2 (id=121): openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) sendmsg$nl_route(r3, 0x0, 0x40c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) setresuid(0xee01, 0xee00, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r2, 0x2) 10.480680431s ago: executing program 0 (id=122): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 9.129670039s ago: executing program 4 (id=123): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r9 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8.947972481s ago: executing program 0 (id=124): openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) setresuid(0xee01, 0xee00, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r2, 0x2) 8.931175534s ago: executing program 2 (id=125): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x28, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xf2, 0x22}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 6.317710974s ago: executing program 4 (id=126): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1b8f605103dcdbe0c8755554bf56fcb22df82948875dd027afbb587bec72091d008b2a1449b62d9ac246c76868eb4d54cc19b0a24", 0xf1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af58341a53c3d910e47a2523d4b83e6c3ded75548aee74b3a03320a202786503129056e9eec1f3decffe2ab6019ff0be7b18f4bcf89c7eccbc1747d27503674289bf6014a2099298645fef8e6ea5ce590d53a414363bc9824d8590af54581553f1e78", 0xc0}, {&(0x7f0000001080)="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", 0x309}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) read$FUSE(r3, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c25) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000240)) 6.308427072s ago: executing program 2 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x4, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setrlimit(0x1, &(0x7f0000000280)={0x4, 0x697}) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x30000000}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x5, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]}) 5.499515852s ago: executing program 0 (id=128): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = gettid() r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r9 = fcntl$dupfd(r7, 0x406, r7) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r10 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.270166629s ago: executing program 3 (id=129): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = gettid() r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r9 = fcntl$dupfd(r7, 0x406, r7) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r10 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.267973706s ago: executing program 1 (id=130): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000580)={0x0, 0xc6f4, 0x200, 0xffffffff, 0x1}, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0) 5.243488462s ago: executing program 4 (id=131): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r9 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.022931537s ago: executing program 0 (id=132): capset(0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xcb3e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r8, r8, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) 1.728555217s ago: executing program 3 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 734.250568ms ago: executing program 4 (id=134): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 341.85573ms ago: executing program 1 (id=135): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000580)={0x0, 0xc6f4, 0x200, 0xffffffff, 0x1}, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0) 287.70097ms ago: executing program 0 (id=136): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1b8f605103dcdbe0c8755554bf56fcb22df82948875dd027afbb587bec72091d008b2a1449b62d9ac246c76868eb4d54cc19b0a249ed33b010741a8c045e0f4299792fb0fb1b9e1041b715bd98f2ebb174d70873b048429d48e356e4edb10d2fa44aca56f8fb2ea232e2f00a59e038d737f6ff384d86acf8a666410dffeb6f4e685c1cf16", 0x141}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af58341a53c3d910e47a2523d4b83e6c3ded75548aee74b3a03320a202786503129056e9eec1f3decffe2ab6019ff0be7b18f4bcf89c7eccbc1747d27503674289bf6014a2099298645fef8e6ea5ce590d53a414363bc9824d8590af54581553f1e78", 0xc0}, {&(0x7f0000001080)="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", 0x2a8}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 194.607444ms ago: executing program 3 (id=137): capset(0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xcb3e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r8, r8, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) 0s ago: executing program 0 (id=138): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r9 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 89.813643][ T5826] cgroup: Unknown subsys name 'net' [ 90.110043][ T5826] cgroup: Unknown subsys name 'cpuset' [ 90.154824][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.048645][ T991] cfg80211: failed to load regulatory.db [ 92.097949][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.040555][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.047839][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.048931][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.053577][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.054811][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.056359][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.057298][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.057843][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.059834][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.066363][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.067228][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.114403][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.134212][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.146058][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.154855][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.235891][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.238078][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.239229][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.242658][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.243547][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.282440][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.292589][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.293314][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.312298][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.315465][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.269256][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 96.280036][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 96.344412][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 96.369645][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 96.596421][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 97.085781][ T5842] Bluetooth: hci0: command tx timeout [ 97.164225][ T5842] Bluetooth: hci2: command tx timeout [ 97.164239][ T59] Bluetooth: hci1: command tx timeout [ 97.325944][ T5842] Bluetooth: hci3: command tx timeout [ 97.376086][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.377321][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.377936][ T5841] bridge_slave_0: entered allmulticast mode [ 97.381193][ T5841] bridge_slave_0: entered promiscuous mode [ 97.406609][ T5842] Bluetooth: hci4: command tx timeout [ 97.500269][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.500386][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.500530][ T5839] bridge_slave_0: entered allmulticast mode [ 97.502604][ T5839] bridge_slave_0: entered promiscuous mode [ 97.638742][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.638891][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.639115][ T5841] bridge_slave_1: entered allmulticast mode [ 97.642000][ T5841] bridge_slave_1: entered promiscuous mode [ 97.775554][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.775808][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.776025][ T5839] bridge_slave_1: entered allmulticast mode [ 97.778981][ T5839] bridge_slave_1: entered promiscuous mode [ 97.783709][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.783850][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.814300][ T5845] bridge_slave_0: entered allmulticast mode [ 97.822322][ T5845] bridge_slave_0: entered promiscuous mode [ 98.045797][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.046017][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.046284][ T5836] bridge_slave_0: entered allmulticast mode [ 98.049417][ T5836] bridge_slave_0: entered promiscuous mode [ 98.051772][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.051916][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.052501][ T5845] bridge_slave_1: entered allmulticast mode [ 98.058269][ T5845] bridge_slave_1: entered promiscuous mode [ 98.266687][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.266857][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.267056][ T5836] bridge_slave_1: entered allmulticast mode [ 98.269833][ T5836] bridge_slave_1: entered promiscuous mode [ 98.365788][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.366198][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.366436][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.366652][ T5848] bridge_slave_0: entered allmulticast mode [ 98.369455][ T5848] bridge_slave_0: entered promiscuous mode [ 98.375748][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.703754][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.713636][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.713784][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.721843][ T5848] bridge_slave_1: entered allmulticast mode [ 98.740415][ T5848] bridge_slave_1: entered promiscuous mode [ 98.750836][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.851803][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.091067][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.098077][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.164343][ T5842] Bluetooth: hci0: command tx timeout [ 99.244215][ T5842] Bluetooth: hci1: command tx timeout [ 99.244223][ T59] Bluetooth: hci2: command tx timeout [ 99.330033][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.406111][ T59] Bluetooth: hci3: command tx timeout [ 99.409032][ T5841] team0: Port device team_slave_0 added [ 99.412793][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.426990][ T5839] team0: Port device team_slave_0 added [ 99.484501][ T59] Bluetooth: hci4: command tx timeout [ 99.577978][ T5841] team0: Port device team_slave_1 added [ 99.581149][ T5839] team0: Port device team_slave_1 added [ 99.596141][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.968534][ T5845] team0: Port device team_slave_0 added [ 100.117652][ T5836] team0: Port device team_slave_0 added [ 100.218561][ T5845] team0: Port device team_slave_1 added [ 100.347703][ T5836] team0: Port device team_slave_1 added [ 100.349003][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.349014][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.349045][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.447231][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.447249][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.447277][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.451186][ T5848] team0: Port device team_slave_0 added [ 100.546457][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.546474][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.546503][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.638764][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.638781][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.638809][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.642220][ T5848] team0: Port device team_slave_1 added [ 100.750514][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.750532][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.750560][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.860273][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.860292][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.860321][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.884680][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.884700][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.884731][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.079206][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.079224][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.079253][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.100977][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.100996][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.101024][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.244111][ T59] Bluetooth: hci0: command tx timeout [ 101.281214][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.281233][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.281253][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.324537][ T59] Bluetooth: hci1: command tx timeout [ 101.324577][ T59] Bluetooth: hci2: command tx timeout [ 101.495169][ T5842] Bluetooth: hci3: command tx timeout [ 101.515138][ T5841] hsr_slave_0: entered promiscuous mode [ 101.516982][ T5841] hsr_slave_1: entered promiscuous mode [ 101.564333][ T5842] Bluetooth: hci4: command tx timeout [ 101.591861][ T5839] hsr_slave_0: entered promiscuous mode [ 101.592809][ T5839] hsr_slave_1: entered promiscuous mode [ 101.593655][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 101.593753][ T5839] Cannot create hsr debugfs directory [ 101.846289][ T5845] hsr_slave_0: entered promiscuous mode [ 101.847375][ T5845] hsr_slave_1: entered promiscuous mode [ 101.848083][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 101.848104][ T5845] Cannot create hsr debugfs directory [ 102.039821][ T5836] hsr_slave_0: entered promiscuous mode [ 102.040821][ T5836] hsr_slave_1: entered promiscuous mode [ 102.041465][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 102.041485][ T5836] Cannot create hsr debugfs directory [ 102.393417][ T5848] hsr_slave_0: entered promiscuous mode [ 102.394803][ T5848] hsr_slave_1: entered promiscuous mode [ 102.395989][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 102.396016][ T5848] Cannot create hsr debugfs directory [ 103.324345][ T5842] Bluetooth: hci0: command tx timeout [ 103.404130][ T5842] Bluetooth: hci2: command tx timeout [ 103.404164][ T5842] Bluetooth: hci1: command tx timeout [ 103.564171][ T59] Bluetooth: hci3: command tx timeout [ 103.644251][ T59] Bluetooth: hci4: command tx timeout [ 104.061468][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.103176][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.123114][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.182627][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.300029][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.358186][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.391587][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.468905][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.640249][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.682680][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.730284][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.791390][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.976988][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.024775][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.062049][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.113863][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.329868][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.366818][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.383865][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.428214][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.464232][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.581801][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.600396][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.650185][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.650956][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.703910][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.704197][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.773331][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.832379][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.832537][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.872987][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.909659][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.909819][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.015832][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.049612][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.075379][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.075603][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.137781][ T3199] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.138193][ T3199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.257245][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.317638][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.333139][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.333297][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.432179][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.432721][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.559533][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.633176][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.633420][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.729651][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.733197][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.733475][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.079817][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.177338][ T5841] veth0_vlan: entered promiscuous mode [ 107.258878][ T5841] veth1_vlan: entered promiscuous mode [ 107.419414][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.503741][ T5839] veth0_vlan: entered promiscuous mode [ 107.542684][ T5841] veth0_macvtap: entered promiscuous mode [ 107.570063][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.584274][ T5841] veth1_macvtap: entered promiscuous mode [ 107.607984][ T5839] veth1_vlan: entered promiscuous mode [ 107.729825][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.792012][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.802753][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.806793][ T5845] veth0_vlan: entered promiscuous mode [ 107.853900][ T1112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.881823][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.893852][ T5845] veth1_vlan: entered promiscuous mode [ 107.897083][ T5839] veth0_macvtap: entered promiscuous mode [ 107.910777][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.927287][ T1112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.969179][ T5839] veth1_macvtap: entered promiscuous mode [ 108.250129][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.305594][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.362163][ T5845] veth0_macvtap: entered promiscuous mode [ 108.415032][ T1112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.418638][ T5848] veth0_vlan: entered promiscuous mode [ 108.425496][ T1112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.433353][ T3199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.433379][ T3199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.473600][ T5845] veth1_macvtap: entered promiscuous mode [ 108.480712][ T1112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.499428][ T1112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.632198][ T5848] veth1_vlan: entered promiscuous mode [ 108.736203][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.736226][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.766330][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.768340][ T5836] veth0_vlan: entered promiscuous mode [ 108.869801][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.922988][ T5836] veth1_vlan: entered promiscuous mode [ 108.977658][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.997389][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.017083][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.038939][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.049048][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.049071][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.175940][ T5848] veth0_macvtap: entered promiscuous mode [ 109.284036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.182208][ T5848] veth1_macvtap: entered promiscuous mode [ 110.540202][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.540270][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.997761][ T5836] veth0_macvtap: entered promiscuous mode [ 111.119462][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.125113][ T5836] veth1_macvtap: entered promiscuous mode [ 111.142692][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.142715][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.181914][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.313409][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.320087][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.322204][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.405374][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.240190][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.297282][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.380381][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.380399][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.417936][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.536073][ T1010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.536394][ T1010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.536825][ T1010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.537472][ T1010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.581854][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.725943][ T31] usb 1-1: device descriptor read/64, error -71 [ 112.848888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.900531][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.900554][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.014154][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.154041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.154246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.214074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.380615][ T31] usb 1-1: device descriptor read/64, error -71 [ 113.497101][ T31] usb usb1-port1: attempt power cycle [ 113.522490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.524058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.584033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.865416][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.865440][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.954251][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.981813][ T31] usb 1-1: device descriptor read/8, error -71 [ 115.176611][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.788099][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.772834][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.684029][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.812428][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.812451][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.904029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.914017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.954135][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.954181][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.040943][ C0] vcan0: j1939_tp_rxtimer: 0xffff88823bec0e00: rx timeout, send abort [ 120.412394][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039e5f000: rx timeout, send abort [ 120.541517][ C0] vcan0: j1939_tp_rxtimer: 0xffff88823bec0e00: abort rx timeout. Force session deactivation [ 120.912478][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039e5f000: abort rx timeout. Force session deactivation [ 123.275668][ T5928] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.416049][ T5928] usb 1-1: device descriptor read/64, error -110 [ 129.608702][ T5928] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.709045][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.616772][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.780370][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.900493][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.962367][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.173530][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.182667][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.745652][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cdde000: rx timeout, send abort [ 144.245753][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cdde000: abort rx timeout. Force session deactivation [ 144.350790][ T6114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.34'. [ 146.524138][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.654256][ T5912] usb 5-1: device descriptor read/64, error -71 [ 146.918661][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e13a800: rx timeout, send abort [ 146.918854][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e13a800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.944075][ T5912] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.076595][ T5912] usb 5-1: device descriptor read/64, error -71 [ 147.194402][ T5912] usb usb5-port1: attempt power cycle [ 147.574155][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.609601][ T5912] usb 5-1: device descriptor read/8, error -71 [ 147.914163][ T5912] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.986609][ T5912] usb 5-1: device descriptor read/8, error -71 [ 148.106463][ T5912] usb usb5-port1: unable to enumerate USB device [ 148.667172][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034b72800: rx timeout, send abort [ 148.873335][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880361f3400: rx timeout, send abort [ 148.873841][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880361f3400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.167237][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034b72800: abort rx timeout. Force session deactivation [ 150.656845][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034a00c00: rx timeout, send abort [ 150.666291][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888034a00c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.470091][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ec55400: rx timeout, send abort [ 152.970208][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ec55400: abort rx timeout. Force session deactivation [ 153.853650][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7d1400: rx timeout, send abort [ 154.353764][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7d1400: abort rx timeout. Force session deactivation [ 159.604791][ T6176] Zero length message leads to an empty skb [ 168.989588][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805adab800: rx timeout, send abort [ 170.121901][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805adab800: abort rx timeout. Force session deactivation [ 170.438454][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.931465][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dc90c00: rx timeout, send abort [ 172.431560][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dc90c00: abort rx timeout. Force session deactivation [ 172.504493][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803621f400: rx timeout, send abort [ 173.004649][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803621f400: abort rx timeout. Force session deactivation [ 174.564076][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.564865][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d769c00: rx timeout, send abort [ 175.763452][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d769c00: abort rx timeout. Force session deactivation [ 184.264042][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.396059][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802be01800: rx timeout, send abort [ 185.414111][ T5883] usb 3-1: device descriptor read/64, error -71 [ 185.513589][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802be03800: rx timeout, send abort [ 185.522332][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802be03800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 186.128830][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.919147][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.639524][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.896509][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.199009][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.233645][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.157472][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d68f000: rx timeout, send abort [ 199.867599][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.871356][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.283455][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f053800: rx timeout, send abort [ 201.783581][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f053800: abort rx timeout. Force session deactivation [ 204.221419][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027cf2c00: rx timeout, send abort [ 204.721726][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027cf2c00: abort rx timeout. Force session deactivation [ 211.073346][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880349f9800: rx timeout, send abort [ 211.076083][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880349f9800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 214.824310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a54d000: rx timeout, send abort [ 215.540323][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035a63800: rx timeout, send abort [ 215.540465][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a54d000: abort rx timeout. Force session deactivation [ 215.541669][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035a63800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.324141][ T5928] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 216.454098][ T5928] usb 2-1: device descriptor read/64, error -71 [ 216.731645][ T5928] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 217.684662][ T5928] usb 2-1: device descriptor read/64, error -71 [ 217.797606][ T5928] usb usb2-port1: attempt power cycle [ 217.978694][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.032894][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.453859][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.695947][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.882651][ T6516] [ 218.882665][ T6516] ====================================================== [ 218.882675][ T6516] WARNING: possible circular locking dependency detected [ 218.882695][ T6516] syzkaller #0 Not tainted [ 218.882707][ T6516] ------------------------------------------------------ [ 218.882716][ T6516] syz.1.135/6516 is trying to acquire lock: [ 218.882729][ T6516] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 218.882807][ T6516] [ 218.882807][ T6516] but task is already holding lock: [ 218.882814][ T6516] ffff8880241803a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 218.882867][ T6516] [ 218.882867][ T6516] which lock already depends on the new lock. [ 218.882867][ T6516] [ 218.882874][ T6516] [ 218.882874][ T6516] the existing dependency chain (in reverse order) is: [ 218.882882][ T6516] [ 218.882882][ T6516] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 218.882911][ T6516] lock_acquire+0x120/0x360 [ 218.882938][ T6516] rt_spin_lock+0x88/0x2c0 [ 218.882962][ T6516] drm_crtc_vblank_on_config+0x2cd/0x860 [ 218.882989][ T6516] drm_crtc_vblank_on+0x88/0xc0 [ 218.883014][ T6516] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 218.883048][ T6516] vkms_atomic_commit_tail+0x69/0x210 [ 218.883073][ T6516] commit_tail+0x284/0x3a0 [ 218.883098][ T6516] drm_atomic_helper_commit+0xa6b/0xb10 [ 218.883124][ T6516] drm_atomic_commit+0x262/0x2c0 [ 218.883147][ T6516] drm_client_modeset_commit_atomic+0x620/0x760 [ 218.883168][ T6516] drm_client_modeset_commit_locked+0xce/0x4d0 [ 218.883189][ T6516] drm_client_modeset_commit+0x4a/0x70 [ 218.883209][ T6516] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 218.883235][ T6516] drm_fb_helper_set_par+0xaf/0x100 [ 218.883260][ T6516] fbcon_init+0x1255/0x2370 [ 218.883289][ T6516] visual_init+0x2ef/0x650 [ 218.883316][ T6516] do_bind_con_driver+0x890/0xf70 [ 218.883345][ T6516] do_take_over_console+0x899/0xa10 [ 218.883375][ T6516] do_fbcon_takeover+0x118/0x200 [ 218.883404][ T6516] fbcon_fb_registered+0x35e/0x610 [ 218.883431][ T6516] register_framebuffer+0x70f/0x890 [ 218.883450][ T6516] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 218.883478][ T6516] drm_fbdev_client_hotplug+0x16f/0x230 [ 218.883506][ T6516] drm_client_register+0x16f/0x210 [ 218.883536][ T6516] drm_fbdev_client_setup+0x19f/0x3f0 [ 218.883578][ T6516] drm_client_setup+0x10a/0x230 [ 218.883604][ T6516] vkms_init+0x3e0/0x4b0 [ 218.883627][ T6516] do_one_initcall+0x233/0x820 [ 218.883646][ T6516] do_initcall_level+0x104/0x190 [ 218.883673][ T6516] do_initcalls+0x59/0xa0 [ 218.883698][ T6516] kernel_init_freeable+0x334/0x4b0 [ 218.883725][ T6516] kernel_init+0x1d/0x1d0 [ 218.883746][ T6516] ret_from_fork+0x436/0x7d0 [ 218.883770][ T6516] ret_from_fork_asm+0x1a/0x30 [ 218.883790][ T6516] [ 218.883790][ T6516] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 218.883819][ T6516] lock_acquire+0x120/0x360 [ 218.883843][ T6516] rt_spin_lock+0x88/0x2c0 [ 218.883866][ T6516] vblank_disable_fn+0x72/0x190 [ 218.883888][ T6516] call_timer_fn+0x17e/0x5f0 [ 218.883918][ T6516] __run_timer_base+0x648/0x970 [ 218.883940][ T6516] run_timer_softirq+0xb7/0x180 [ 218.883964][ T6516] handle_softirqs+0x22f/0x710 [ 218.883989][ T6516] run_ktimerd+0xcf/0x190 [ 218.884015][ T6516] smpboot_thread_fn+0x53f/0xa60 [ 218.884047][ T6516] kthread+0x70e/0x8a0 [ 218.884076][ T6516] ret_from_fork+0x436/0x7d0 [ 218.884100][ T6516] ret_from_fork_asm+0x1a/0x30 [ 218.884119][ T6516] [ 218.884119][ T6516] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 218.884148][ T6516] lock_acquire+0x120/0x360 [ 218.884173][ T6516] call_timer_fn+0xdb/0x5f0 [ 218.884198][ T6516] __run_timer_base+0x648/0x970 [ 218.884220][ T6516] run_timer_softirq+0xb7/0x180 [ 218.884244][ T6516] handle_softirqs+0x22f/0x710 [ 218.884267][ T6516] run_ktimerd+0xcf/0x190 [ 218.884294][ T6516] smpboot_thread_fn+0x53f/0xa60 [ 218.884317][ T6516] kthread+0x70e/0x8a0 [ 218.884345][ T6516] ret_from_fork+0x436/0x7d0 [ 218.884369][ T6516] ret_from_fork_asm+0x1a/0x30 [ 218.884387][ T6516] [ 218.884387][ T6516] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 218.884415][ T6516] lock_acquire+0x120/0x360 [ 218.884439][ T6516] rt_spin_lock+0x88/0x2c0 [ 218.884462][ T6516] __run_timer_base+0x114/0x970 [ 218.884484][ T6516] run_timer_softirq+0x67/0x180 [ 218.884507][ T6516] handle_softirqs+0x22f/0x710 [ 218.884531][ T6516] run_ktimerd+0xcf/0x190 [ 218.884557][ T6516] smpboot_thread_fn+0x53f/0xa60 [ 218.884581][ T6516] kthread+0x70e/0x8a0 [ 218.884609][ T6516] ret_from_fork+0x436/0x7d0 [ 218.884633][ T6516] ret_from_fork_asm+0x1a/0x30 [ 218.884651][ T6516] [ 218.884651][ T6516] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 218.884678][ T6516] validate_chain+0xb9b/0x2140 [ 218.884708][ T6516] __lock_acquire+0xab9/0xd20 [ 218.884733][ T6516] reacquire_held_locks+0x127/0x1d0 [ 218.884776][ T6516] lock_release+0x1b4/0x3e0 [ 218.884800][ T6516] __local_bh_enable_ip+0x10c/0x270 [ 218.884823][ T6516] hrtimer_cancel+0x39/0x60 [ 218.884850][ T6516] drm_vblank_disable_and_save+0x1bf/0x380 [ 218.884873][ T6516] drm_crtc_vblank_off+0x22e/0x820 [ 218.884897][ T6516] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 218.884923][ T6516] vkms_atomic_commit_tail+0x51/0x210 [ 218.884947][ T6516] commit_tail+0x284/0x3a0 [ 218.884971][ T6516] drm_atomic_helper_commit+0xa6b/0xb10 [ 218.884996][ T6516] drm_atomic_commit+0x262/0x2c0 [ 218.885024][ T6516] drm_atomic_helper_set_config+0xe2/0x160 [ 218.885051][ T6516] drm_mode_setcrtc+0x9a7/0x1c50 [ 218.885069][ T6516] drm_ioctl_kernel+0x2cf/0x3a0 [ 218.885097][ T6516] drm_ioctl+0x685/0xb20 [ 218.885124][ T6516] __se_sys_ioctl+0xff/0x170 [ 218.885146][ T6516] do_syscall_64+0xfa/0x3b0 [ 218.885164][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.885201][ T6516] [ 218.885201][ T6516] other info that might help us debug this: [ 218.885201][ T6516] [ 218.885208][ T6516] Chain exists of: [ 218.885208][ T6516] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 218.885208][ T6516] [ 218.885242][ T6516] Possible unsafe locking scenario: [ 218.885242][ T6516] [ 218.885248][ T6516] CPU0 CPU1 [ 218.885254][ T6516] ---- ---- [ 218.885261][ T6516] lock(&dev->vblank_time_lock); [ 218.885275][ T6516] lock(&dev->vbl_lock); [ 218.885290][ T6516] lock(&dev->vblank_time_lock); [ 218.885306][ T6516] lock((softirq_ctrl.lock)); [ 218.885321][ T6516] [ 218.885321][ T6516] *** DEADLOCK *** [ 218.885321][ T6516] [ 218.885326][ T6516] 8 locks held by syz.1.135/6516: [ 218.885338][ T6516] #0: ffffc9000cbc7b20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50 [ 218.885387][ T6516] #1: ffffc9000cbc7b48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50 [ 218.885435][ T6516] #2: ffff8880241804b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 218.885492][ T6516] #3: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 218.885545][ T6516] #4: ffff888024180420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 218.885602][ T6516] #5: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 218.885655][ T6516] #6: ffff8880241803a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 218.885711][ T6516] #7: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 218.885765][ T6516] [ 218.885765][ T6516] stack backtrace: [ 218.885798][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.1.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.885823][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 218.885840][ T6516] Call Trace: [ 218.885850][ T6516] [ 218.885859][ T6516] dump_stack_lvl+0x189/0x250 [ 218.885893][ T6516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.885925][ T6516] ? __pfx__printk+0x10/0x10 [ 218.885949][ T6516] ? print_lock_name+0xde/0x100 [ 218.885974][ T6516] print_circular_bug+0x2ee/0x310 [ 218.885996][ T6516] check_noncircular+0x134/0x160 [ 218.886040][ T6516] validate_chain+0xb9b/0x2140 [ 218.886075][ T6516] ? preempt_schedule+0xae/0xc0 [ 218.886106][ T6516] ? preempt_schedule_common+0x83/0xd0 [ 218.886139][ T6516] ? preempt_schedule+0xae/0xc0 [ 218.886170][ T6516] ? __pfx_preempt_schedule+0x10/0x10 [ 218.886206][ T6516] __lock_acquire+0xab9/0xd20 [ 218.886239][ T6516] reacquire_held_locks+0x127/0x1d0 [ 218.886271][ T6516] ? __local_bh_disable_ip+0x264/0x400 [ 218.886300][ T6516] lock_release+0x1b4/0x3e0 [ 218.886328][ T6516] ? __local_bh_enable_ip+0x100/0x270 [ 218.886357][ T6516] __local_bh_enable_ip+0x10c/0x270 [ 218.886384][ T6516] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 218.886415][ T6516] ? rt_spin_unlock+0x65/0x80 [ 218.886442][ T6516] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 218.886474][ T6516] ? hrtimer_cancel_wait_running+0x142/0x180 [ 218.886506][ T6516] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 218.886537][ T6516] hrtimer_cancel+0x39/0x60 [ 218.886569][ T6516] drm_vblank_disable_and_save+0x1bf/0x380 [ 218.886598][ T6516] drm_crtc_vblank_off+0x22e/0x820 [ 218.886630][ T6516] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 218.886666][ T6516] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 218.886700][ T6516] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 218.886736][ T6516] vkms_atomic_commit_tail+0x51/0x210 [ 218.886764][ T6516] ? read_tsc+0x9/0x20 [ 218.886787][ T6516] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 218.886815][ T6516] commit_tail+0x284/0x3a0 [ 218.886846][ T6516] drm_atomic_helper_commit+0xa6b/0xb10 [ 218.886879][ T6516] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 218.886907][ T6516] drm_atomic_commit+0x262/0x2c0 [ 218.886933][ T6516] ? __pfx_drm_atomic_commit+0x10/0x10 [ 218.886958][ T6516] ? __pfx___drm_printfn_info+0x10/0x10 [ 218.886995][ T6516] ? drm_atomic_state_init+0x231/0x310 [ 218.887028][ T6516] drm_atomic_helper_set_config+0xe2/0x160 [ 218.887061][ T6516] drm_mode_setcrtc+0x9a7/0x1c50 [ 218.887100][ T6516] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 218.887133][ T6516] ? rt_spin_unlock+0x65/0x80 [ 218.887161][ T6516] ? drm_is_current_master+0x1a2/0x210 [ 218.887191][ T6516] drm_ioctl_kernel+0x2cf/0x3a0 [ 218.887225][ T6516] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 218.887245][ T6516] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 218.887283][ T6516] drm_ioctl+0x685/0xb20 [ 218.887313][ T6516] ? smk_tskacc+0x2fc/0x370 [ 218.887347][ T6516] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 218.887369][ T6516] ? __pfx_drm_ioctl+0x10/0x10 [ 218.887409][ T6516] ? __fget_files+0x2a/0x420 [ 218.887441][ T6516] ? bpf_lsm_file_ioctl+0x9/0x20 [ 218.887479][ T6516] ? __pfx_drm_ioctl+0x10/0x10 [ 218.887510][ T6516] __se_sys_ioctl+0xff/0x170 [ 218.887552][ T6516] do_syscall_64+0xfa/0x3b0 [ 218.887572][ T6516] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.887603][ T6516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.887624][ T6516] ? clear_bhb_loop+0x60/0xb0 [ 218.887648][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.887670][ T6516] RIP: 0033:0x7fa30d46eba9 [ 218.887694][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.887713][ T6516] RSP: 002b:00007fa30b269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.887735][ T6516] RAX: ffffffffffffffda RBX: 00007fa30d6b6270 RCX: 00007fa30d46eba9 [ 218.887752][ T6516] RDX: 0000200000000740 RSI: 00000000c06864a2 RDI: 0000000000000005 [ 218.887766][ T6516] RBP: 00007fa30d4f1e19 R08: 0000000000000000 R09: 0000000000000000 [ 218.887779][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.887793][ T6516] R13: 00007fa30d6b6308 R14: 00007fa30d6b6270 R15: 00007ffd84c053a8 [ 218.887816][ T6516] [ 220.540226][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 220.686779][ T5928] usb 2-1: device descriptor read/64, error -71 [ 220.893401][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038e4c400: rx timeout, send abort [ 220.893585][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888038e4c400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 220.934065][ T5928] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 221.074158][ T5928] usb 2-1: device descriptor read/64, error -71 [ 221.184611][ T5928] usb usb2-port1: attempt power cycle [ 221.879721][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.684070][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 222.684108][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 222.684116][ T6520] Bluetooth: hci3: command 0x0406 tx timeout [ 222.684130][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 222.684168][ T5842] Bluetooth: hci1: command 0x0406 tx timeout