penat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = getpid() r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r6}]}, 0x28}], 0x1}, 0x0) 17:47:53 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = getpid() r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r6}]}, 0x28}], 0x1}, 0x0) 17:47:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) 17:47:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r4}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) [ 825.197460][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 825.216189][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 825.225921][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 825.236377][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 825.245020][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 825.255341][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 825.652914][T10784] chnl_net:caif_netlink_parms(): no params data found [ 825.944218][T10784] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.951534][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.959080][T10784] bridge_slave_0: entered allmulticast mode [ 825.974390][T10784] bridge_slave_0: entered promiscuous mode [ 825.992184][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 825.992685][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.007673][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.009993][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 826.015512][T10784] bridge_slave_1: entered allmulticast mode [ 826.018120][T10784] bridge_slave_1: entered promiscuous mode [ 826.035720][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 826.048999][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 826.058559][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 826.071327][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 826.139718][T10784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.159434][T10784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.274408][T10784] team0: Port device team_slave_0 added [ 826.303467][T10784] team0: Port device team_slave_1 added [ 826.384741][T10784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.391762][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.418844][T10784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.449761][T10784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.457627][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.490352][T10784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.628260][T10784] hsr_slave_0: entered promiscuous mode [ 826.635550][T10784] hsr_slave_1: entered promiscuous mode [ 826.964086][ T5118] Bluetooth: hci7: command 0x0406 tx timeout [ 827.015255][T10793] chnl_net:caif_netlink_parms(): no params data found [ 827.135911][T10784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.287068][ T5103] Bluetooth: hci2: command 0x0409 tx timeout [ 827.395612][T10784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.675684][T10784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.734897][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.742265][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.764115][T10793] bridge_slave_0: entered allmulticast mode [ 827.772910][T10793] bridge_slave_0: entered promiscuous mode [ 827.798646][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.824017][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.831456][T10793] bridge_slave_1: entered allmulticast mode [ 827.855969][T10793] bridge_slave_1: entered promiscuous mode [ 827.919907][T10784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.110507][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.130447][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.166019][ T5103] Bluetooth: hci3: command 0x0409 tx timeout [ 828.232136][T10793] team0: Port device team_slave_0 added [ 828.246847][T10793] team0: Port device team_slave_1 added [ 828.409084][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.433949][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.479071][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.496929][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.504426][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.534488][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.682440][T10784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 828.724607][T10784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 828.752633][T10793] hsr_slave_0: entered promiscuous mode [ 828.760589][T10793] hsr_slave_1: entered promiscuous mode [ 828.768173][T10793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.776562][T10793] Cannot create hsr debugfs directory [ 828.782390][T10784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 828.829179][T10784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 829.117093][T10793] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.210726][T10793] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.326236][T10793] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.373725][ T5103] Bluetooth: hci2: command 0x041b tx timeout [ 829.454095][T10784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.481191][T10793] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.535721][T10784] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.566504][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.573874][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.608596][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.615965][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.911354][T10793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 829.945074][T10793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 829.965273][T10793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 829.994842][T10793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 830.244562][ T5103] Bluetooth: hci3: command 0x041b tx timeout [ 830.401675][T10784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.514787][T10793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.641164][T10793] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.692377][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.699748][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.756249][T10784] veth0_vlan: entered promiscuous mode [ 830.786701][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.794063][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.909196][T10784] veth1_vlan: entered promiscuous mode [ 831.005340][T10793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 831.115758][T10784] veth0_macvtap: entered promiscuous mode [ 831.149492][T10784] veth1_macvtap: entered promiscuous mode [ 831.217926][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.229058][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.241563][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.254200][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.265358][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.277116][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.292501][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.303974][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.314905][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.327285][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.337489][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.348025][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.358606][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.372458][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.388146][T10784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.426830][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.439425][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.444687][ T5103] Bluetooth: hci2: command 0x040f tx timeout [ 831.466284][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.477505][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.487491][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.503392][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.513477][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.526891][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.537560][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.550195][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.560221][T10784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.570841][T10784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.584415][T10784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.611686][T10784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.625654][T10784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.635327][T10784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.644261][T10784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.711858][T10793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.892684][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.933834][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.041609][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.051033][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.323979][ T5103] Bluetooth: hci3: command 0x040f tx timeout [ 832.588713][T10793] veth0_vlan: entered promiscuous mode [ 832.642425][T10793] veth1_vlan: entered promiscuous mode [ 832.761138][T10793] veth0_macvtap: entered promiscuous mode [ 832.811326][T10793] veth1_macvtap: entered promiscuous mode [ 832.855193][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.869106][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.879716][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.894006][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.904574][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.916354][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.931599][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.942789][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.953403][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.965366][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.977727][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.988871][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.023181][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.044630][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.057953][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.074027][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.096941][T10793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.148572][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.179895][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.206181][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.224583][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.252648][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.274313][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.304396][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.324346][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.343674][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.363670][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.389453][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.405307][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.416678][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.427547][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.444785][T10793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.497474][T10793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.524553][ T5103] Bluetooth: hci2: command 0x0419 tx timeout [ 833.526981][T10793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.546753][T10793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.556281][T10793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 17:48:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = getpid() r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r6}]}, 0x28}], 0x1}, 0x0) 17:48:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000011000100000000002000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:48:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 833.960990][ T9745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:48:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) [ 834.019091][ T9745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.089397][T10839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:48:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:05 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 834.314713][T10839] veth3: entered promiscuous mode [ 834.319854][T10839] veth3: entered allmulticast mode 17:48:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) [ 834.404840][ T5103] Bluetooth: hci3: command 0x0419 tx timeout [ 834.725927][ T9740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.748363][ T9740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:48:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 17:48:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:06 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:06 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = getpid() r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r6}]}, 0x28}], 0x1}, 0x0) 17:48:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 17:48:06 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005f03000101000000185a000005000000000000000000000018400000faffffff00000000000000001838000001000000000000000000000085100000f9ffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x39, &(0x7f0000000100)=""/57, 0x40f00, 0x2e, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x9, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, r4, r5, 0xffffffffffffffff, 0x1, r6, 0x1], 0x0, 0x10, 0x7}, 0x90) sendfile(0xffffffffffffffff, r6, &(0x7f0000000500)=0xac6, 0xc6) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r8 = getpid() r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r8}]}, 0x28}], 0x1}, 0x0) 17:48:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (fail_nth: 1) 17:48:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) [ 836.213067][T10890] FAULT_INJECTION: forcing a failure. [ 836.213067][T10890] name failslab, interval 1, probability 0, space 0, times 1 [ 836.276146][T10890] CPU: 0 PID: 10890 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 836.286669][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 836.296789][T10890] Call Trace: [ 836.300122][T10890] [ 836.303103][T10890] dump_stack_lvl+0x125/0x1b0 [ 836.307955][T10890] should_fail_ex+0x496/0x5b0 [ 836.312821][T10890] should_failslab+0x9/0x20 [ 836.317453][T10890] __kmem_cache_alloc_node+0x6b/0x310 [ 836.322939][T10890] ? tls_get_rec+0xfa/0x650 [ 836.327608][T10890] ? tls_get_rec+0xfa/0x650 [ 836.332362][T10890] __kmalloc+0x49/0x90 [ 836.336528][T10890] tls_get_rec+0xfa/0x650 [ 836.341024][T10890] ? __local_bh_enable_ip+0xa4/0x120 [ 836.346440][T10890] tls_sw_sendmsg+0xeba/0x2c20 [ 836.351384][T10890] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 836.357513][T10890] ? find_held_lock+0x2d/0x110 [ 836.362385][T10890] ? preempt_count_sub+0x160/0x160 [ 836.368105][T10890] ? tx_work_handler+0x230/0x230 [ 836.373126][T10890] ? aa_sk_perm+0x2f8/0xb40 [ 836.377838][T10890] ? get_pid_task+0x101/0x240 [ 836.382598][T10890] ? aa_af_perm+0x250/0x250 [ 836.387196][T10890] ? __fget_files+0x1c6/0x340 [ 836.392081][T10890] inet6_sendmsg+0x9d/0xe0 [ 836.396663][T10890] ? inet6_compat_ioctl+0x360/0x360 [ 836.401938][T10890] __sock_sendmsg+0xd5/0x180 [ 836.406731][T10890] __sys_sendto+0x255/0x340 [ 836.411318][T10890] ? __ia32_sys_getpeername+0xb0/0xb0 [ 836.416763][T10890] ? vfs_write+0x14c/0xdf0 [ 836.421281][T10890] ? ksys_write+0x1a7/0x250 [ 836.425836][T10890] ? __ia32_sys_read+0xb0/0xb0 [ 836.430727][T10890] __x64_sys_sendto+0xe0/0x1b0 [ 836.435629][T10890] ? syscall_enter_from_user_mode+0x7f/0x120 [ 836.441718][T10890] do_syscall_64+0x40/0x110 [ 836.446267][T10890] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 836.452295][T10890] RIP: 0033:0x7f3c7187cce9 [ 836.456744][T10890] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 836.476411][T10890] RSP: 002b:00007f3c7256b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 836.484899][T10890] RAX: ffffffffffffffda RBX: 00007f3c7199bf80 RCX: 00007f3c7187cce9 [ 836.493000][T10890] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 0000000000000003 [ 836.501012][T10890] RBP: 00007f3c7256b120 R08: 0000000000000000 R09: 0000000003000137 [ 836.509092][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.517149][T10890] R13: 000000000000000b R14: 00007f3c7199bf80 R15: 00007ffde944ce68 [ 836.525181][T10890] 17:48:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = getpid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r5}]}, 0x28}], 0x1}, 0x0) 17:48:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (fail_nth: 2) 17:48:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:08 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x4723, 0xa444, 0x8}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) accept4(r1, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x80000) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac00000024000b0f000000ebff00000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080005000200000008000a0001000000100002800c00018008000400f355ea75"], 0xac}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x29, 0x4, 0x5, 0xfffffff7, 0xd, @remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7, 0x40, 0x2, 0xfff}}) sendto$inet(r1, &(0x7f0000000340)="d82e611cb32df0c6ba4b503fcd9aead6b2188f0109953a53d9dec543d34e22989377a75be7106445b37f54e51d35d4718b70e29785b5b554f7", 0x39, 0x4040004, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="4a0dab5dbfb0fbee0e86fecf1731087d4a2552658016b1d9e5d1e1681c333bf8a66073a7253d3b1c3e3c8b96e06a4f21782d6c79f014", 0x36}, {&(0x7f0000000080)="f4c3e73ecb6a45bbafcac37c09854299f8ce46b95898f6ce17fb1d101d0f34bd7d67384941fe95b0dd772349af2377a416286384649d2bd6a312c1a616be0ebad51c30ea72db256c0b3ab45b4886090fe8a7656e862bafe0001bab6a4c3f765ba50f9f5331115a9679068548a870264a9fbfbc50ef0bd860d28dc4d2cb6b714b8de4c0d1f52594f9cd8eca0532ca37f1b1031258a7d770cf1877", 0x9a}, {&(0x7f0000000140)="df56d492", 0x4}, {&(0x7f0000000180)="a09127244be8b9309a3e331d2d303929ffa6e2dc413e721411d9ddb51a9cadd7ed0fe574c92340eda711480cec4f2dcbbf38bed4b8c95fcf1e93b5df34c58aedbc110faf89f951b5b63fddd4c582575fc663136c47dd733f34e5f8", 0x5b}], 0x4, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa2}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4127}}], 0x60}, 0x4c005) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10) 17:48:08 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x4723, 0xa444, 0x8}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) accept4(r1, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x80000) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac00000024000b0f000000ebff00000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080005000200000008000a0001000000100002800c00018008000400f355ea75"], 0xac}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x29, 0x4, 0x5, 0xfffffff7, 0xd, @remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7, 0x40, 0x2, 0xfff}}) sendto$inet(r1, &(0x7f0000000340)="d82e611cb32df0c6ba4b503fcd9aead6b2188f0109953a53d9dec543d34e22989377a75be7106445b37f54e51d35d4718b70e29785b5b554f7", 0x39, 0x4040004, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="4a0dab5dbfb0fbee0e86fecf1731087d4a2552658016b1d9e5d1e1681c333bf8a66073a7253d3b1c3e3c8b96e06a4f21782d6c79f014", 0x36}, {&(0x7f0000000080)="f4c3e73ecb6a45bbafcac37c09854299f8ce46b95898f6ce17fb1d101d0f34bd7d67384941fe95b0dd772349af2377a416286384649d2bd6a312c1a616be0ebad51c30ea72db256c0b3ab45b4886090fe8a7656e862bafe0001bab6a4c3f765ba50f9f5331115a9679068548a870264a9fbfbc50ef0bd860d28dc4d2cb6b714b8de4c0d1f52594f9cd8eca0532ca37f1b1031258a7d770cf1877", 0x9a}, {&(0x7f0000000140)="df56d492", 0x4}, {&(0x7f0000000180)="a09127244be8b9309a3e331d2d303929ffa6e2dc413e721411d9ddb51a9cadd7ed0fe574c92340eda711480cec4f2dcbbf38bed4b8c95fcf1e93b5df34c58aedbc110faf89f951b5b63fddd4c582575fc663136c47dd733f34e5f8", 0x5b}], 0x4, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa2}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4127}}], 0x60}, 0x4c005) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10) 17:48:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:08 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x4723, 0xa444, 0x8}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) accept4(r1, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x80000) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac00000024000b0f000000ebff00000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080005000200000008000a0001000000100002800c00018008000400f355ea75"], 0xac}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x29, 0x4, 0x5, 0xfffffff7, 0xd, @remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7, 0x40, 0x2, 0xfff}}) sendto$inet(r1, &(0x7f0000000340)="d82e611cb32df0c6ba4b503fcd9aead6b2188f0109953a53d9dec543d34e22989377a75be7106445b37f54e51d35d4718b70e29785b5b554f7", 0x39, 0x4040004, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="4a0dab5dbfb0fbee0e86fecf1731087d4a2552658016b1d9e5d1e1681c333bf8a66073a7253d3b1c3e3c8b96e06a4f21782d6c79f014", 0x36}, {&(0x7f0000000080)="f4c3e73ecb6a45bbafcac37c09854299f8ce46b95898f6ce17fb1d101d0f34bd7d67384941fe95b0dd772349af2377a416286384649d2bd6a312c1a616be0ebad51c30ea72db256c0b3ab45b4886090fe8a7656e862bafe0001bab6a4c3f765ba50f9f5331115a9679068548a870264a9fbfbc50ef0bd860d28dc4d2cb6b714b8de4c0d1f52594f9cd8eca0532ca37f1b1031258a7d770cf1877", 0x9a}, {&(0x7f0000000140)="df56d492", 0x4}, {&(0x7f0000000180)="a09127244be8b9309a3e331d2d303929ffa6e2dc413e721411d9ddb51a9cadd7ed0fe574c92340eda711480cec4f2dcbbf38bed4b8c95fcf1e93b5df34c58aedbc110faf89f951b5b63fddd4c582575fc663136c47dd733f34e5f8", 0x5b}], 0x4, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa2}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4127}}], 0x60}, 0x4c005) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10) socket$inet(0x2b, 0x801, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x4723, 0xa444, 0x8}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) (async) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) (async) accept4(r1, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x80000) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac00000024000b0f000000ebff00000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080005000200000008000a0001000000100002800c00018008000400f355ea75"], 0xac}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x29, 0x4, 0x5, 0xfffffff7, 0xd, @remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7, 0x40, 0x2, 0xfff}}) (async) sendto$inet(r1, &(0x7f0000000340)="d82e611cb32df0c6ba4b503fcd9aead6b2188f0109953a53d9dec543d34e22989377a75be7106445b37f54e51d35d4718b70e29785b5b554f7", 0x39, 0x4040004, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="4a0dab5dbfb0fbee0e86fecf1731087d4a2552658016b1d9e5d1e1681c333bf8a66073a7253d3b1c3e3c8b96e06a4f21782d6c79f014", 0x36}, {&(0x7f0000000080)="f4c3e73ecb6a45bbafcac37c09854299f8ce46b95898f6ce17fb1d101d0f34bd7d67384941fe95b0dd772349af2377a416286384649d2bd6a312c1a616be0ebad51c30ea72db256c0b3ab45b4886090fe8a7656e862bafe0001bab6a4c3f765ba50f9f5331115a9679068548a870264a9fbfbc50ef0bd860d28dc4d2cb6b714b8de4c0d1f52594f9cd8eca0532ca37f1b1031258a7d770cf1877", 0x9a}, {&(0x7f0000000140)="df56d492", 0x4}, {&(0x7f0000000180)="a09127244be8b9309a3e331d2d303929ffa6e2dc413e721411d9ddb51a9cadd7ed0fe574c92340eda711480cec4f2dcbbf38bed4b8c95fcf1e93b5df34c58aedbc110faf89f951b5b63fddd4c582575fc663136c47dd733f34e5f8", 0x5b}], 0x4, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa2}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4127}}], 0x60}, 0x4c005) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) (async) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10) (async) 17:48:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (fail_nth: 3) 17:48:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 838.404170][T10932] FAULT_INJECTION: forcing a failure. [ 838.404170][T10932] name failslab, interval 1, probability 0, space 0, times 0 [ 838.518799][T10932] CPU: 0 PID: 10932 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 838.529404][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 838.539505][T10932] Call Trace: [ 838.542824][T10932] [ 838.545791][T10932] dump_stack_lvl+0x125/0x1b0 [ 838.550512][T10932] should_fail_ex+0x496/0x5b0 [ 838.555241][T10932] should_failslab+0x9/0x20 [ 838.559800][T10932] kmem_cache_alloc_node+0x71/0x330 [ 838.565089][T10932] ? __alloc_skb+0x287/0x330 [ 838.569958][T10932] __alloc_skb+0x287/0x330 [ 838.574452][T10932] ? __napi_build_skb+0x50/0x50 [ 838.579698][T10932] ? kernel_fpu_end+0x45/0x70 [ 838.584446][T10932] ? gcmaes_crypt_by_sg+0x5d2/0x830 [ 838.589684][T10932] alloc_skb_with_frags+0xe4/0x710 [ 838.594829][T10932] ? follow_page_pte+0x2ca/0x1d80 [ 838.599902][T10932] tcp_send_rcvq+0x113/0x4d0 [ 838.605357][T10932] ? tcp_sack_compress_send_ack+0x1d0/0x1d0 [ 838.611813][T10932] ? follow_page_pte+0x2d4/0x1d80 [ 838.616885][T10932] tcp_sendmsg_locked+0x2e1c/0x3440 [ 838.622218][T10932] ? scatterwalk_copychunks+0x22c/0x560 [ 838.627936][T10932] ? tcp_sendmsg_fastopen+0x700/0x700 [ 838.633355][T10932] ? scatterwalk_map_and_copy+0xc0/0x1d0 [ 838.639024][T10932] ? scatterwalk_copychunks+0x560/0x560 [ 838.644637][T10932] tls_push_sg+0x250/0x740 [ 838.649109][T10932] ? wait_on_pending_writer+0x500/0x500 [ 838.654705][T10932] ? gcmaes_crypt_by_sg+0x830/0x830 [ 838.659989][T10932] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 838.666049][T10932] ? mark_held_locks+0x9f/0xe0 [ 838.670962][T10932] tls_tx_records+0x343/0x6e0 [ 838.675690][T10932] tls_push_record+0x1f7c/0x3080 [ 838.680688][T10932] ? tls_tx_records+0x6e0/0x6e0 [ 838.685589][T10932] ? sk_psock_get+0x13f/0x470 [ 838.690491][T10932] ? tls_rx_reader_release.constprop.0+0x1b0/0x1b0 [ 838.697048][T10932] bpf_exec_tx_verdict+0xdee/0x1230 [ 838.702293][T10932] ? iov_iter_advance+0x85/0x3d0 [ 838.707384][T10932] ? tls_push_record+0x3080/0x3080 [ 838.712624][T10932] ? sk_msg_alloc+0x6f4/0xab0 [ 838.717391][T10932] tls_sw_sendmsg+0x1621/0x2c20 [ 838.722306][T10932] ? find_held_lock+0x2d/0x110 [ 838.727131][T10932] ? preempt_count_sub+0x160/0x160 [ 838.732298][T10932] ? tx_work_handler+0x230/0x230 [ 838.737299][T10932] ? aa_sk_perm+0x2f8/0xb40 [ 838.741845][T10932] ? get_pid_task+0x101/0x240 [ 838.746661][T10932] ? aa_af_perm+0x250/0x250 [ 838.751226][T10932] ? __fget_files+0x1c6/0x340 [ 838.756581][T10932] inet6_sendmsg+0x9d/0xe0 [ 838.761054][T10932] ? inet6_compat_ioctl+0x360/0x360 [ 838.766305][T10932] __sock_sendmsg+0xd5/0x180 [ 838.770945][T10932] __sys_sendto+0x255/0x340 [ 838.775500][T10932] ? __ia32_sys_getpeername+0xb0/0xb0 [ 838.780928][T10932] ? vfs_write+0x14c/0xdf0 [ 838.785419][T10932] ? ksys_write+0x1a7/0x250 [ 838.789954][T10932] ? __ia32_sys_read+0xb0/0xb0 [ 838.794798][T10932] __x64_sys_sendto+0xe0/0x1b0 [ 838.799611][T10932] ? syscall_enter_from_user_mode+0x7f/0x120 [ 838.805639][T10932] do_syscall_64+0x40/0x110 [ 838.810217][T10932] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 838.816190][T10932] RIP: 0033:0x7f3c7187cce9 [ 838.821155][T10932] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 838.841059][T10932] RSP: 002b:00007f3c7256b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 838.849513][T10932] RAX: ffffffffffffffda RBX: 00007f3c7199bf80 RCX: 00007f3c7187cce9 [ 838.857783][T10932] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 0000000000000003 [ 838.866159][T10932] RBP: 00007f3c7256b120 R08: 0000000000000000 R09: 0000000003000137 [ 838.874175][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.882192][T10932] R13: 000000000000000b R14: 00007f3c7199bf80 R15: 00007ffde944ce68 [ 838.890228][T10932] 17:48:09 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = getpid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r5}]}, 0x28}], 0x1}, 0x0) 17:48:09 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x4723, 0xa444, 0x8}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) (async, rerun: 64) accept4(r1, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x80000) (async, rerun: 32) r3 = socket(0x11, 0x800000003, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac00000024000b0f000000ebff00000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080005000200000008000a0001000000100002800c00018008000400f355ea75"], 0xac}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x29, 0x4, 0x5, 0xfffffff7, 0xd, @remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7, 0x40, 0x2, 0xfff}}) (async) sendto$inet(r1, &(0x7f0000000340)="d82e611cb32df0c6ba4b503fcd9aead6b2188f0109953a53d9dec543d34e22989377a75be7106445b37f54e51d35d4718b70e29785b5b554f7", 0x39, 0x4040004, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="4a0dab5dbfb0fbee0e86fecf1731087d4a2552658016b1d9e5d1e1681c333bf8a66073a7253d3b1c3e3c8b96e06a4f21782d6c79f014", 0x36}, {&(0x7f0000000080)="f4c3e73ecb6a45bbafcac37c09854299f8ce46b95898f6ce17fb1d101d0f34bd7d67384941fe95b0dd772349af2377a416286384649d2bd6a312c1a616be0ebad51c30ea72db256c0b3ab45b4886090fe8a7656e862bafe0001bab6a4c3f765ba50f9f5331115a9679068548a870264a9fbfbc50ef0bd860d28dc4d2cb6b714b8de4c0d1f52594f9cd8eca0532ca37f1b1031258a7d770cf1877", 0x9a}, {&(0x7f0000000140)="df56d492", 0x4}, {&(0x7f0000000180)="a09127244be8b9309a3e331d2d303929ffa6e2dc413e721411d9ddb51a9cadd7ed0fe574c92340eda711480cec4f2dcbbf38bed4b8c95fcf1e93b5df34c58aedbc110faf89f951b5b63fddd4c582575fc663136c47dd733f34e5f8", 0x5b}], 0x4, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa2}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4127}}], 0x60}, 0x4c005) (async, rerun: 64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) (rerun: 64) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10) 17:48:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:10 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = getpid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r5}]}, 0x28}], 0x1}, 0x0) 17:48:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (fail_nth: 4) 17:48:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = getpid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r5}]}, 0x28}], 0x1}, 0x0) 17:48:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (fail_nth: 5) 17:48:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (fail_nth: 6) 17:48:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r4}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:11 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = getpid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r5}]}, 0x28}], 0x1}, 0x0) 17:48:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 840.716827][T10986] FAULT_INJECTION: forcing a failure. [ 840.716827][T10986] name failslab, interval 1, probability 0, space 0, times 0 [ 840.750918][T10986] CPU: 1 PID: 10986 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 840.761526][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 840.771612][T10986] Call Trace: [ 840.774964][T10986] [ 840.777967][T10986] dump_stack_lvl+0x125/0x1b0 [ 840.782687][T10986] should_fail_ex+0x496/0x5b0 [ 840.787404][T10986] should_failslab+0x9/0x20 [ 840.791951][T10986] __kmem_cache_alloc_node+0x6b/0x310 [ 840.797408][T10986] ? tls_get_rec+0xfa/0x650 [ 840.802046][T10986] ? tls_get_rec+0xfa/0x650 [ 840.806595][T10986] __kmalloc+0x49/0x90 [ 840.810724][T10986] tls_get_rec+0xfa/0x650 [ 840.815114][T10986] tls_sw_sendmsg+0xeba/0x2c20 [ 840.819949][T10986] ? find_held_lock+0x2d/0x110 [ 840.825039][T10986] ? preempt_count_sub+0x160/0x160 [ 840.830218][T10986] ? tx_work_handler+0x230/0x230 [ 840.835222][T10986] ? aa_sk_perm+0x2f8/0xb40 [ 840.839863][T10986] ? get_pid_task+0x101/0x240 [ 840.844662][T10986] ? aa_af_perm+0x250/0x250 [ 840.849216][T10986] ? __fget_files+0x1c6/0x340 [ 840.853972][T10986] inet6_sendmsg+0x9d/0xe0 [ 840.858605][T10986] ? inet6_compat_ioctl+0x360/0x360 [ 840.863847][T10986] __sock_sendmsg+0xd5/0x180 [ 840.868484][T10986] __sys_sendto+0x255/0x340 [ 840.873040][T10986] ? __ia32_sys_getpeername+0xb0/0xb0 [ 840.878471][T10986] ? vfs_write+0x14c/0xdf0 [ 840.882963][T10986] ? ksys_write+0x1a7/0x250 [ 840.887498][T10986] ? __ia32_sys_read+0xb0/0xb0 [ 840.892477][T10986] __x64_sys_sendto+0xe0/0x1b0 [ 840.897484][T10986] ? syscall_enter_from_user_mode+0x7f/0x120 [ 840.903529][T10986] do_syscall_64+0x40/0x110 [ 840.908077][T10986] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 840.914034][T10986] RIP: 0033:0x7f3c7187cce9 [ 840.918501][T10986] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 840.938151][T10986] RSP: 002b:00007f3c7256b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 840.946653][T10986] RAX: ffffffffffffffda RBX: 00007f3c7199bf80 RCX: 00007f3c7187cce9 [ 840.954659][T10986] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 0000000000000003 [ 840.962661][T10986] RBP: 00007f3c7256b120 R08: 0000000000000000 R09: 0000000003000137 [ 840.970668][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.978671][T10986] R13: 000000000000000b R14: 00007f3c7199bf80 R15: 00007ffde944ce68 [ 840.986696][T10986] [ 841.195362][ T9742] hsr_slave_0: left promiscuous mode [ 841.269434][ T9742] hsr_slave_1: left promiscuous mode [ 841.289048][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.312215][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_0 17:48:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r4}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) [ 841.340251][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.374182][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_1 17:48:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (fail_nth: 7) [ 841.409636][ T9742] bridge_slave_1: left allmulticast mode [ 841.418054][ T9742] bridge_slave_1: left promiscuous mode [ 841.455375][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.545421][ T9742] bridge_slave_0: left allmulticast mode [ 841.551244][ T9742] bridge_slave_0: left promiscuous mode [ 841.592640][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state 17:48:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 17:48:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) [ 841.743550][ T9742] veth1_macvtap: left promiscuous mode 17:48:12 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 841.792415][ T9742] veth0_macvtap: left promiscuous mode [ 841.827067][ T9742] veth1_vlan: left promiscuous mode 17:48:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) [ 841.845518][ T9742] veth0_vlan: left promiscuous mode [ 842.935021][ T9742] team0 (unregistering): Port device team_slave_1 removed [ 842.983116][ T9742] team0 (unregistering): Port device team_slave_0 removed [ 843.012376][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.045542][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.240654][ T9742] bond0 (unregistering): Released all slaves 17:48:14 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = getpid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r5}]}, 0x28}], 0x1}, 0x0) 17:48:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:14 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x2, 0x0, 0x3000137) 17:48:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:14 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x3, 0x0, 0x3000137) 17:48:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r4}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x4, 0x0, 0x3000137) 17:48:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:15 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = getpid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r5}]}, 0x28}], 0x1}, 0x0) 17:48:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x5, 0x0, 0x3000137) 17:48:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x10001, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6=r4}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:15 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = getpid() r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r6}]}, 0x28}], 0x1}, 0x0) 17:48:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x7, 0x0, 0x3000137) 17:48:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001200)={r3, 0x0, "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", "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"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002280)) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002200)=@newlinkprop={0x44, 0x6c, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x2, 0x4}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x40}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x44}}, 0x0) 17:48:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8, 0x0, 0x3000137) 17:48:16 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = getpid() r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r4}]}, 0x28}], 0x1}, 0x0) 17:48:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xa, 0x0, 0x3000137) 17:48:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001200)={r3, 0x0, "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", "0fce8b10702da8f4a2fca083c93fa061b810b3528db8873a00a64a0f035719d5077a26974d87b6439ddfe08a5be5bc0a5882e47276fd74f8eefae0a9d5cdeeca1dd1711589e83f37e92a4abde6d8b820f6445386b4fd63dd80b50ef614ce6f8ede951eb737d5d97d46c6d466069f175f637885387326df08da6550813c817eb4432ae0e9b8bf9382b0d6531ee776e21f4378116241aac2502a4bccaf0b96ff8e44eb52e0bd8f5b9a7933fe0e26c61dada977642e241a478079eb6d343ee6c73fd4036a505d7485708fbe4e580da48da1c2a67e618dfc1a19895cc1671e1cce3fa2f155dc145babe3cbb12f1256b16432119009fd629a70f73ce177bd47b0a8121a56e67174a1a2888046305eaaafff82bdac8d09752bc77c32ed47b4e15234b0c7ac6d73bfbebda667d6322305b84ecc0d22cf52f6940a8789385c90158fab7af6021df1b5e000ad9d275d0c100ee39068b9f26fb08f25bbe8355e281e81234933f4bd51dfb2f81eddc031bccc61c9e937371308c80fb0926dd82e215508ed4d34985d91649e4051d9fb252b1900c5d9a3c912253781c28821e1d50a3d9810cc58e2c6015182e696b784b88319701a6edee518be559e71e6000e22f3734337d27287d0cec0960ed6b702dddc5cec5b79cd1bfc2f0c3c9252454a34f80e9b2a290b878a2fc24ca857ad2f0592a484c59ca40083af736676b995038409186624147d02eedc4bd4108f4e9a18b54a078fa1f14f9a504149c70e135a3eede9b284b53b4eb890fbc44edd2a1a60f6bc3f9fb3abec7badd0a470dc556a696454106c856d3a93c7b13da55cc13698403ed15ef477a0d61b6ed355595a9135ac4e7052f35ff3ca639d5983c7b889b82868bfe2dc5ae6474b0967edf9c527cf3513e637d0635ecf608f7e534d724e638906121245d0190bd38ed8962e4bbaa4faf808cbe2ab15de9c0e76b9acb36c9fbbe2f5b90711ab687bffb460664bc67acd5289fef904fd9c4f932f1bb7acd47429928ba39a4bf7c044f59f9ee83b08831a5edba09fa3ad05b5ef9fbe432898691b6ff0bb6ea21de9cbda849dd2a379de1028a3120987f6e1403ece01efec9312abcf3613ce8be13012f79354897abbcf569c124664a55c9ff8c4c7ba57cc61b34b917654465cbab0468d16ded739ec817f128b7f41a501c890087c883b8d847dc016b8427e157637f5612235e23d38f4e0f1e6e4784a5e114bbd115bd6a08befdf5c4df20f9fecfd3f8e64d6b6b4003e9a7a9c6faa88c759060ac70d54cff74bd4ed62b245f333b0c5f49905dd86cedf7818b28d0847ed0bc0b48e853356a9c7b508dc98339c9e858f2b3332a2e11294be3c053fecfccffc482df8d33d267c82462e1b7236301705645e43c2888fdbf6ca3180d9d832a88824e235f078e460339d1a23b44468b6d23c36b228e025fda2a6b480bd1350691e3b4ec01a54575bfdf7804312f0ef9fb536dfafb401fd0f8785ef060885555cb0f0a905690b8c58972b43f88c1480a28bab345719ffa2005ac2e7bba05fcee6e97293356d8b063e7e2503d827234128b03bf77e351d3f118d95263acdbf80045383c972b1837c55ee3ee78188d5c7e5ae5395851f6e30de78d892e0022e5e587df803dd4200d015f6fada19501b9604742aab7aa362be395c9fe45ae8207f86fa62039af5c7131f0f1d4a77a604a81e0979930ae8e0c58b5515255bcff726660123e8affaea2b9a3afd7d1fe199d2431a05af1af19965f6b1962c66ecd594ff7894e3b29134d7f264fddd43c5aaf23e7c17fd79643c33895b2ba5e5065f5a4753e1b2ef5edc4cc4b9859b6d87cfbeb9e41ef0af26661ad1284f807e3c16ee8bee4866fa6761d671381a1192a1537c16a1a58f47eea5130f72f506e3972fc186577b4bf39a41980b1ccab2a22a427db8b1c3f730081104e54fa7c915e1ae1a2269ef09f86d22b151bd5dcb390858a1b0174a171efb2b3e4bac8a512ee52e3267dd731a4fdcecd0e42a094fe6275ee90e9f0a0fe1b47bec52940985595bf51c5f947da633b630e73cfa725827d8fd97b77c5b84387c33ff07ff01032feff163ba6ac68beee0886cb46bb162186b6fe423a59088be65afea6934b499edca6a612c4924ccbd6ec190b1cb9ff8dfabdf0845c56d2ee88f1803b66b7db06a4b0d97fdfe30a583adbae5fa3e63073d19a2fde0d67f14e4913feee183f68bda59839ebb021216c3ed4de29d18576af2b46d2ef3ef4d8c2883f73ccd3b699aea6bd4fc053b84db7fc0d20546ac8d19ba2800e694c28e2d74d3bf3f3ab1d04a70b67bab9cf3008412855f6c01dccfeadb06d04ecf59489ebefa6b3138d7ac64d4bf5eb551a0c14f81298883d677ef82dd4266d0be1212ca334e7eec2ba611c5ef46f545d28133407c6cbbba6b7898e1ac7d9d1ecd9a8bfbdc51f64274d121ac25e75902ea3a46ce35bcf989ee46e7828c04b7d7120dff4baa5d1167e58dfd926546c9c8611ca86dcabf36c5e1640ecdea08606fd656f49f701f2dfbec50b0f9e0002b6603a7c80724afa33813d4b6f4576ff42ca177923a8e6472463b0f63bfd7354009ff03be2e0ecfbdda28de01166d742cc6b9c1b12d085c5244943345be56c8496da688d3001e5d5ae9a0ca18ad60955d12781c38fd3fbcf35b607251731f1a83473a75757e8c512084f9c04d3dd13f743490bae3afab78a03195515d4e27f2f45c3d18c043061fd1dd6953e93f05273c7456f730083d263d97f6cc7ed31a0d04ec28395e056575e68909f559b4f032c3adf7967864488e71a0091241adc35b98c087bca48469fe0247ffd29c5bb57e88091a355264ca61fa453679971568ba371eb485284e27972df591efdce4b9c42fd8686b2b8a2245ab885aeae96829df25bf0353fd2855a00669f55fa9d7d2de97e2e25e2b008357afaa3714d7e5e448d2af966702811b16d026b1ed727b2a461963ae8f8b7d94beb9270edd78eee0d7d55810de8e6e9cc9ed030f342c256936d18e3213b6bb90366011551e7a83f96d2d5a10a9c2bcaafaa1ed9ac47a8f8cc218631eb9895a0fcb3f0208f04b279755de3036a2d1a79cf85b3d4aedbb50039420e74b8ba4e8c6fd5c9e19d3edd4abd92341afdad3b0c8102c844483e539fc1af398aeb666d2d925b5213bd93fc96a6bdd5fa1f71b8be9a8fb737dd8fd1cb394aa6719d05b627ed5303b1fac36711a1333d9aadb85d38e52e5d1bc26fc7458ce8bf531c6505b9da684599ba3b4cc2aaf0902599baba8f7dd001700f2cb96e5c6fdf25a8f4fda794be27b3b160ccebf2be1821d282c61bc7ce19ef11e9764ea9b1fe4bd96b2adde2c7eb5b3af7fd8c2f30f7b8057fd553cca839a8b1caa62f74146abaf057dfe8ec9c5da54bf2e0c26959cd435fa1bda6b336e74e50b12d1f2ee99ced1a2e450201d40ddfdfe8352c4cccb1766dde89829cda668e10906b89cc31b98f2e8cfd903ef3def7090ab12184c01c76f1f8bc24621e7fd6832814d6908ec9c5ee8d8126cbc6c8cf796f605537f622e0d2434f324f9aaaee288171109dfa06e1a84a7c60389da90c4da27240ea8f0e77fda1361824fb29a8e09ec3b9856878ad1dae4c3facbe9db9d3af916815cbab32e8fccb6d084308d4ef458a5feee5c0099d2fff436697e0929429f8ef27d8685aefe13b9d97b93e24dd872c14c4735fcb76f8df7c3b7c217178834ff1e21bad469e5e5da440c210fa49093389cf2cc77e6ace21f9be852de857584d4421c014afead2dd29f9533ba39fd9700ebbd777f3361fb9e321bdea688bdf1f61ac49d3035d423ff67f144f1ca7079ae99de307aa7f15a7d57e3f5b44559f7e690711c2c7680576ca3f1f34c249cb61449eada34db26da1bf9a6333d1be3b57abb9663fd4520a4830d0ea90651712682c76be380e8977e44be63fcb29e2db0af66e710d710ec2b43bf5ec6247d802a2ab92f8f3c7224c2da5fdeedcb6d7cdd9715bc973765a48badd326502e5e8373f63175f469699562a5db85a66b678ebdc210dc4dfdf8b45ee99d31ddfbe2265f53229ce5a0550a60928e09b7b38f84498cd58021dfd73c431b49a8887e3d13fc8dcda916ec9bba408280c865bcb3595dbde7a6f526129254d9fd9bff53d0500c6a9a400f5bd94e87a61e82116ed145cc562ccc3f95a860c3b81b13bacfc51f21db923aa85ac6e881022be5a7f8a149493ca2a859b0d1a4479647da7e81d0f0bcef27d61dcc31f47ee63569cb480c52a9dca9e6be102ef600464e681b19492db5a7685564359f2971c5a04deba704d5c4eb4f92824a5ed12fa81265ccddbba4e64c73828002c0e0c62f33fc4e37b529934376bbf6ff5bfee708fb46db56fdefca46a00259f51f3db7f7693fb247c55488c77693a3028d9e88869f863488f47e9fc7a2b14a68829f7a617277c2a2d5094b6dfb1384647a696be2e140a346bc7cbfe2e25c0af2babc003de7338426b9372a7eea875c447b67701107b155b3b10bff5bab44a78ef912878b427ba4289570dfffe820c5be59ed076022b1645e474307199e61c8f70435578670de2ad157fa1f40fc4d0f123fabc3c60e4cf54b883482e52f6e1f405cb3c4e27e9ab903f755c4fe0b28211c7a5ec71d7b69240446a45294992165f1712a9532622c0ea4d63a24d06b06859a09c328d9b6e43fb5187e835dc97f0c293cb84e868b07191137b38b76be8faff682174c6a20264872d46b3ddd2d51efd225361ae0af2f84f63ab26a85dc03ff9e16c4c1c405134604b9ebd74f3259148c990ce347ea9b39d3b5a52e06afb2885b54aee239c0399c40230034059d8b4ff6893c43cbc1cf0c11c29913d59e7a9470964569d3643761e2a92d2d5bf3def0c6dade0d4c97ad1dbc416fcd0f37f9429f4357fb24bc1f76874ff4c3029ccdc01bc8ba7f956ad964f4e290d0dc99bf41a0344850a02ff95c68e55487ece91339aacd802e448e7409a8a5e5f16a8c249532d3b18dc17d7eed895404bf5e3e1b84fb6a0204e59f8dd8f64a12fb7e61d9b60d5234e3b1461cfcd3c4f815b60a14604c828bc654bf5ddce0ff61bb25052330dece834f95610988ea02f3a2b34ddb5ce0eb01fe82d3eb6e55c47d47e7c3eb611ec8267c6948cb48cd24ef5ad3db41399fc888896111f0ba4bd97dd627e1b5a3735dc8b4f5acb779f5789cf1a1892fb4493b1bdd16360e715169b643abc0948aaaf570453f129d250a008cdfb4d7f770b3ad4d3dd213177e263731f4a4ef97e17e656265add3cc35113be13670c18262c43ebdb86e9b7fc14c919b62be1520323a84339d60d60d1f2070a272b239a4b2fc5c348638d3b31f169f0fd271744658b5123d9135f5e428bab3a4419daf33b28e445a3cd03d22a783f93303a77f04d9dee87163279704eb1f39522b99e029d0"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002280)) (async, rerun: 64) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002200)=@newlinkprop={0x44, 0x6c, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x2, 0x4}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x40}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x44}}, 0x0) 17:48:16 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:16 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x11, 0x0, 0x3000137) 17:48:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)="e89859decf78938cd5d58de528b1f671fcb92cd333a153650b24502a143f3a470993f7e32caa62", &(0x7f0000000800)=@buf="8b16f5487c894faebf950843734ca7e7756a18f520b8b26b32f6f131dd6d45b0ba8c87e26b3d69b0e3653a034ed10573c16baa54b3cdc17167e56c7b6aecf62db19f0941528f846e6e6d086ae5861f9b9bf66dbceda8b84e3355a323d113be2ec99ceae7266ed515e22c53a9735f", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xb4, 0x0, 0x3000137) 17:48:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:17 executing program 3: socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "d7817d24ece9e667421bbe5fba891093bdcd6197719d81926ede78ef16302dcf0ccfc8e8cd30ae147f3f5efe16266b1ea8fcc9c653f53d71f8903ddc82ab16f87fe202b2af8b9b140ca633dda769c75b3164efd128452f0136ae663762ddb071c88faea74a8c30409de03d36627ec03b5dc95ae90ef39710a6b6e9787d9130371c7f83e0c45b9d845e54abfe8bc1bd4f8bc8a8ba56c04e5b32991e746b5bf8040d55902a2c7388188547200fd51ba1cec9d742ecd422578b29022f41be9bfbba524ac73fa0143fb761d4c157ac208bb7ed5df28ae7b4c9d601d956b9406ea033d64d01b3b095dc17927cf07cb3c06ad47b4e59c84ee074de860ed68135f65d27f7a997c37224569c732dddb64958204ae0d4ec845b01922f4a9e0460d0976f097c2bc6318f491160e2dd49de795581a343e17e21f9cad3ae50e392e7964f597115628910e63626d0bdcfd99b99e471f9c46d99b4fe8bd99f99a4ed179916e943622968630ac99dc44bbefbd4f9cce66f785b94ddea41d6db6627b8a2dccf833e2f5662d2e06aab38053c3192121cd96ed673b412bc2bbdbb916a2a70c6af7b9d2028d43462c6f79340832be4bc165db59364d3f2d5beb2af93e7b09b87f4003168b7ffeac021244a20b507592b1346e547c2ba400447e51a0d0b0b8bc7b1b24e7901faba8d85ac675847e54bcfa3bec1c34c634c65076c1839b8c940a2172b33840f53f40b2819fbc00672666c31c22edd7fa64727a8409e0fd23bad3462707abc19534f9b2f7a66592f62450e01113e59c9431e75c4830a3280ebb3c887046405c4028e6f271123d55332bd4c2e8922beebfb7446429be5dd9f2e38d9002c497a4292869ee5f31cba5803a8a0a9a9a610c4c1da008c5b0ba2c4ad1205279bf23f4043610d9855551bc525cec947ed2c3bf91cb5c81edba3c84319b33e28155850d925639e5840ca61c548d2da8e0bac020ffafc7a91c72e42a7bb8dc26c872644410b1d7f06ff4f90d01e131a482f5efbc3a00ede5832ca010a2d84ea5b4a6264cba37e9ba2cb446fb90a974c85003e1622bc517bdbe0de0076bb50a6c8a7cb1653768fc0ee20f25f59c89e5b44e5f40bc6fc271763b443fdef47300168ec1579a4bf465c675fa272d129e7cdc0195ed7afa33b0364057c40b0e9a2b4ae34e78b5a7cf4b452dc158623fc9f73325b7fb35f8d516ee4069732acd467b3a95581cb55ae6e999ddf0f13bb567791f94b0d1d67c6ee8731153dbabeb8d43f10b326d2d7f5502412ec3ee9eca2266886cbded4bd613d2ce147a539adadbc1e23b8028ec50903eceeee9873a2dfb297af22d9c6ea8d24ef77f7d96f4fdce1e9c3d16dd56a7305c6175513ec3d7cb459a8db0082d81ff65e55e166764973fae29d875eb55d95807889903807329c40a1c3ca20d619dd60aa595e5dae9929d047c7232167eb561e17726f21622c5b7766047d3a30ea464c4e729eb3da10f550925c754eac0ab1bd483badd5f905497244484e33d833e4c38e42826dad7e5cf199800f935fd16a31c0b0cb5ec425fbb8457270f734eea7e2fb216a15ce4f639fb69e65df8f0653987988dfc69da512419976d83200729dd616d93beee24e688ada0173082671b7621e02976f6d1d04c6d5504e0cf015f66a14a71c1fbfd4a06aae6cebd1a3d74bd1643d051cf96b6af9eaa84577ed893a504588d4cc37a1dab8b3c4f99d1b59712c0ae293b13273f77d8b936ae132974573912123f8d79a5081dcf59b1b40c53a2d8eb3abfc2b9c173c42d0c9c358d1135d9e532c597b20e5db69b61c1bf9fc7d7bb8ea23bf23f76c035e5273253161e8d1afdfa1b1c81dba1de3ee2ac27c3c07c5534dc12e84f8240f98c1bb71114c198f157b05aedf278934ce8eaab2ff7bb280665a86f126b815a87699be26b51b23e50da18fccd47f75a281ed3e874baa7e67d01b14ca6f96edbfe39c9371a58b2d6afb2dcbddb5e5d614a9858b52d6bfb8fa3e767baec00c36364bf35f4ab7caadbac6237fd71f56bfb9750937d9676d09abbcf0bca242bc74139d09eb9e303128bab66ad538c8cdd31ea3402911cd9cf8d3ed2498e7878d196bb1fed11704e248f95d1f204e6fea47368e3fb93cb927e769867d600de579c0b808a8d46fd8a202660ed659e4aad8583660fbd3588861d5ff4c8deba0fb5ad37d8b8b8fe30687206cf3afc4930effd955c62fc04990a466aee805f28def44d213c6bfeead9b9c32661a34b43778f7f307ad202070cea7cc9119a5b30de07c672af899af80ccdcdb5cd9c4b7358b4f885c6f9abb26110c393b587cc2f2f930f7dca6ff286f7192f7cdd96ecfeeda65e7801c59ea3f7c564976a5a802c5e3fe581a5cf7b96385bb83473cc1e3292d1dfdcfb65a86bf1c21fb6d6b928243fd1b0e052ce6016bc80f4f05cc27068af2a65b2ab202e97ba583c9a242953072dddb0e6c947c7229836a730eac29137a36ef18f36d2406f888bb4466fcf48e8d6b74b11c87dc4ba952af91fc10a29c1fe285e36f24f3797846247467a414f3535014d243dea673c1e1c2b11a8820592341d51386418429aa3c77b32a4f8660f606067d65e83111f2e0d518f7d00cfec9283fc5af0961da2f72d5c9c11ac531e0d4903436d777e37942e1056be445fe2e2dc657d1e114b4a97c49589446fd84da2df753e7afe3bfec87f9dde91af92e8a0fb34ddacbd1c2a4ab79584a1a9b9d53e7fe758042d7cbfb8c95e65ef2ab57e2ec6c3226a907aab8df373beaa1c3b20ae143c5746975803cdb3f06080efb5f56c373bd90f26b6d4d1647762020e0f17621e0663fc746748f07d3eec4cf0e73e658b3efb8f220ce49e93c65b18528d8d4866c2664e7cd6fbdc235760b8a7bccaee32b2d2726bfb6b3165b5a4eedcd45dfdb569980781092a9a96fdf2ad1794cbc202333758307b7405dd9959f3f2007e1b05a41c485139b2d8d8571114a70d5d0e04d3d0ba4a16dca19c73f9e743019e343e8f8cd57ddd1b3d1753cd89774aadbb82dc69431aacf6bdb18e151f8d0e6f9890143e25d70f8ba319db64b430a9093da064d19176f2c4f90eda7c6ef0d871ecfe2c7149ab97e5d41dddf727fcfd2154bdb0622a0634899a35826ff04a5b9385e54972abf58887694bb9315ae58f93e596aa0350e249b9248157a5f85d1ed5887ba4f648f1adadedf0e14508ef0cfccdb09608299b186f0e6504a946dd2d356e4b0ce4bb0ab8353056c83a272695205f1843cdcbf6d8c8bdfbea3e19d0cbfcac9f230590d272a7ec266602776f458378637814b83618b372d721122c002ec2a972f90c8f1f6313babd1e842c9539a3ed0c94eaee98b0b23e9d1eb6d05d8fd4045926ac4e8f04bbf7aabc44f411150fc6827571cc1d05618d745dce0ec8ac7faf08b70a43aa46cb12e8d32697151f327cf9d888567861b3532e4c805d2a4009699586b354a28620c24a8e577d3edd7af5d9591d07575e8f1330a9ffa38b0afa7a57f11dd9a84dc8b7ba8c40a4502d4e6ffb625783f740205bfed4fda1333332636ac524f19ce10238b26ff9558b35cfc0bd4951a3651bf855837582feb2b43b7ca508aa25964ad1285ccae3c40c5b4c0c317d777535a63628b4056246525733348b7f9a55240aa67cae6c7b2ddfc63823d878223c57a7541c639868108676a7a17ec774892f7f0920b1c37e13033e844de86e783e8c03f1a7710836e6aa12721abf72d357b5849ce595fdc75e9d286e06b72b990839ea3611bd4fab21d86f12c5201a7d02c5479ff88b670ae5a3946e71e2301f3acf2e5c98bc32c72897932a48210610d9802b4a8baa3f51275a774e1e4d66410d7b8f37bd463475aa8edd01a985663e8ae4728ba676fe3366ee28c68d46b14428869efb7a35df9bcdb2bfc5ee8439882e9382e33a2753992e5a3c60e2d83c669bf451da11133eceea3e0d22bdfd2e92fd4b5af006337aad8febe418e92d0732a05a2fe506babccb2e1f9fd13145b4297d0dbd1f81d1f56057d5f64cd9ee8ed08caeed2f27c45454d83ca54ea3d8dec123d9f59544fda8a1472d7334684786f10fa18e7d6e255b0a5b4048acdf4acd2972e6b134487fbb2f6d7bda618a5e7d4eca308e4298dfc417981a99c50d39cccc6b8ae1d66c87cfc70a676be7763d34d2b32b88ca77299d930b04664de17afecf2e9dd2d909b7406f5c524b7036dd1bf4b99a4269d79a611fbeb73e8b9734e9a4c0022776d2799b3886bf8e93941f07225b8046000004450d0c136dd7cf344104ee7f41b1d44d6c66a0ece53cbfb70c80009046d61186b7b0c36e53a5f6698b811912152424af6abbfdc7a902fc170a35ea5bda6e20b0232e288ad65e60ea3ae0daee12d79f82fb611b5b5e0fdc93ad4820bd2e091e66df96938b1869a7af03706d6db125e187bdb9e01dfc760bfd2a82264fd25b18ba8097640b68efe960e1bc975a72a6da39191f16a69c54ee5cb2425f292ce9f85dd1f181c4bf0eed09f8d262c4d70af0f54af1e76e52cdad855bf91412df0e39f4efd04d810f0d664da1cdf23224a97c3aa7b0964988b4265fe32d4b329f8a4a11ee27196ec4563fb9b063aa4e37380fd561bfbce7254542c2cdf1eeaa4849342214bd10f5d243b3ae9c19f793204e8b770f2aa0a081efba0f438bc40ccbea6e1704850e44173d6dc5d7e6102bdac27040e7df1b4abc71e36caa98fca859c27a6915054acad952885255951a6cd770e51ee39a0c514163a5222e537769e99d1d7f2eb913db213c84062bcbdba3a0683071fffde0dfebfb31d4159f64bf47c2392056a7e7ed30ba632a8027dd813fe88e936810834824520cf0938206b73f896186f4473ea687cd9aa2862f400c48becbedbe39d7880188fd7bda75815ff40edf454a132e9cacf6967c467fd319a8240be2a636fdb0b56744fd3eb16f80bf92ded734f2f0eef667fef37966140c66d7fa05414ba2e3d05eb4bcf87a943880c007d3fd09da46bc227f0f9f398cd080a4c0f3e91f147ced4880f8715f35706d9768290a0a3f16ee635ab8ce721996e5c5a1ae8660e759c45e1a79ba81705295b26ce160a68649c653a6dd116a9b142f2c3c05a1abc4d96e6d619f84a115606ce7852a2bffad7a3910a7e6271cd2c91bcdda79d5df960917e0f390862c6c2289b1eee832c36c4475e254cd652eb179d37c7193dc546f90e03cd16d607a73a7ff50a8b1b1909b69a6953c37e16e70299edf1c5cf81f928ca6546137eaa6ec6e1557159b7451b4efe1a92800ec37e33275d5968d0f2a212b02b8e3c10e7ccfb564b0ee8c7a0a3266a0aed836a9c60bd23789cbe7e64ba99d33d4b4b135d88f40f66f35cbf6c31051f2cd58bd8f5b4f7b3371b552c5e4682d0459b7caf8a34c6bdecaa9a0d42690238a439632b673816a19d9c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001200)={r3, 0x0, "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", "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"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002280)) socket$can_j1939(0x1d, 0x2, 0x7) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7}, 0x18) (async) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002200)=@newlinkprop={0x44, 0x6c, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x2, 0x4}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x40}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x44}}, 0x0) 17:48:18 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = getpid() r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r4}]}, 0x28}], 0x1}, 0x0) 17:48:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x240, 0x0, 0x3000137) 17:48:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x300, 0x0, 0x3000137) 17:48:18 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x4b8, 0x0, 0x3000137) 17:48:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1f, 0x458d64f4, 0x8, 0x2020, r0, 0x6aac, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x500, 0x0, 0x3000137) 17:48:19 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = getpid() r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r4}]}, 0x28}], 0x1}, 0x0) 17:48:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x700, 0x0, 0x3000137) 17:48:19 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x8, 0xfffffffff8a360b9) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x6, 0x1, 0x8c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @broadcast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x3200, 0x892f, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x36) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, r3}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) 17:48:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x810, 0x0, 0x3000137) 17:48:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xa00, 0x0, 0x3000137) 17:48:20 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = getpid() r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r4}]}, 0x28}], 0x1}, 0x0) 17:48:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000004b64ed1a7ddba1ea0b133b3bd073cfffec8500000000008500000005000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffef2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='block_split\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 17:48:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1008, 0x0, 0x3000137) 17:48:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x8, 0xfffffffff8a360b9) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x6, 0x1, 0x8c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @broadcast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x3200, 0x892f, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x36) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, r3}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) (rerun: 32) 17:48:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1100, 0x0, 0x3000137) 17:48:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000004b64ed1a7ddba1ea0b133b3bd073cfffec8500000000008500000005000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffef2) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000004b64ed1a7ddba1ea0b133b3bd073cfffec8500000000008500000005000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffef2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='block_split\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='block_split\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 17:48:21 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1640, 0x0, 0x3000137) 17:48:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x8, 0xfffffffff8a360b9) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x6, 0x1, 0x8c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @broadcast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x3200, 0x892f, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x36) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, r3}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) [ 850.965540][ T9742] IPVS: stopping backup sync thread 9980 ... 17:48:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1f00, 0x0, 0x3000137) 17:48:21 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:48:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000004b64ed1a7ddba1ea0b133b3bd073cfffec8500000000008500000005000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffef2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='block_split\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000004b64ed1a7ddba1ea0b133b3bd073cfffec8500000000008500000005000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffef2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='block_split\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) (async) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async) 17:48:21 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:48:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = getpid() r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r4}]}, 0x28}], 0x1}, 0x0) 17:48:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x4002, 0x0, 0x3000137) 17:48:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) [ 851.914716][ T9742] hsr_slave_0: left promiscuous mode [ 851.922031][ T9742] hsr_slave_1: left promiscuous mode [ 851.948571][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.956348][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.982117][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.013397][ T9742] hsr_slave_0: left promiscuous mode [ 852.033335][ T9742] hsr_slave_1: left promiscuous mode [ 852.040802][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.049204][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.068100][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.080115][ T9742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.090722][ T9742] bridge_slave_1: left allmulticast mode [ 852.096670][ T9742] bridge_slave_1: left promiscuous mode [ 852.102672][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.114123][ T9742] bridge_slave_0: left allmulticast mode [ 852.119935][ T9742] bridge_slave_0: left promiscuous mode [ 852.129683][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.161047][ T9742] veth1_macvtap: left promiscuous mode [ 852.167013][ T9742] veth0_macvtap: left promiscuous mode [ 852.182543][ T9742] veth1_vlan: left promiscuous mode [ 852.200320][ T9742] veth1_macvtap: left promiscuous mode [ 852.206230][ T9742] veth0_macvtap: left promiscuous mode [ 852.212293][ T9742] veth1_vlan: left promiscuous mode [ 852.218763][ T9742] veth0_vlan: left promiscuous mode [ 853.259235][ T9742] team_slave_1 (unregistering): left promiscuous mode [ 853.271733][ T9742] team0 (unregistering): Port device team_slave_1 removed [ 853.295642][ T9742] team_slave_0 (unregistering): left promiscuous mode [ 853.308478][ T9742] team0 (unregistering): Port device team_slave_0 removed [ 853.352033][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.380898][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.582165][ T9742] bond0 (unregistering): Released all slaves [ 853.955527][ T9742] team0 (unregistering): Port device team_slave_1 removed [ 853.985628][ T9742] team0 (unregistering): Port device team_slave_0 removed [ 854.011914][ T9742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.042256][ T9742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.230198][ T9742] bond0 (unregistering): Released all slaves [ 855.991366][ T9742] IPVS: stop unused estimator thread 0... [ 876.088438][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.095180][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 888.405275][ T5103] Bluetooth: hci9: command 0x0406 tx timeout 17:49:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) 17:49:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:49:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:49:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x4016, 0x0, 0x3000137) 17:49:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1640, 0x0, 0x3000137) 17:49:15 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:49:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8080, 0x0, 0x3000137) 17:49:16 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:49:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:49:16 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:49:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:49:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xb400, 0x0, 0x3000137) [ 907.307801][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 907.320306][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 907.330508][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 907.340389][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 907.350086][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 907.360394][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 907.716486][T11295] chnl_net:caif_netlink_parms(): no params data found [ 907.864330][T11295] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.871639][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.881385][T11295] bridge_slave_0: entered allmulticast mode [ 907.896018][T11295] bridge_slave_0: entered promiscuous mode [ 907.908515][T11295] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.916256][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.925000][T11295] bridge_slave_1: entered allmulticast mode [ 907.933530][T11295] bridge_slave_1: entered promiscuous mode [ 907.997675][T11295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.027254][T11295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.100768][T11295] team0: Port device team_slave_0 added [ 908.112326][T11295] team0: Port device team_slave_1 added [ 908.171505][T11295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.178618][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.207789][T11295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.224628][T11295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.231746][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.260912][T11295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.354528][T11295] hsr_slave_0: entered promiscuous mode [ 908.361963][T11295] hsr_slave_1: entered promiscuous mode [ 908.375638][T11295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.383315][T11295] Cannot create hsr debugfs directory [ 908.647081][T11295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.825415][T11295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.025207][T11295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.164613][T11295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.425901][T11295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 909.439660][T11295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 909.454985][T11295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 909.455985][ T5118] Bluetooth: hci0: command 0x0409 tx timeout [ 909.476967][T11295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 909.653825][T11295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.689626][T11295] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.711378][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.718709][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.755395][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.762711][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.100306][T11295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.197615][T11295] veth0_vlan: entered promiscuous mode [ 910.221834][T11295] veth1_vlan: entered promiscuous mode [ 910.290607][T11295] veth0_macvtap: entered promiscuous mode [ 910.310944][T11295] veth1_macvtap: entered promiscuous mode [ 910.356047][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.367588][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.377518][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.388093][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.398856][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.412518][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.422600][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.433121][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.445928][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.459088][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.469405][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.480369][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.494258][T11295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.515915][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.527135][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.537711][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.550920][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.561165][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.571924][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.583937][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.594641][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.604671][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.615767][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.626174][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.639234][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.656896][T11295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.672582][T11295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.682270][T11295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.691491][T11295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.700781][T11295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.874279][ T9742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.882230][ T9742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.941584][ T9742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.950749][ T9742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.534187][ T5118] Bluetooth: hci0: command 0x041b tx timeout [ 913.613704][ T5118] Bluetooth: hci0: command 0x040f tx timeout [ 915.684828][ T5118] Bluetooth: hci0: command 0x0419 tx timeout [ 937.528734][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.536018][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 949.843881][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 949.849985][ T5110] Bluetooth: hci3: command 0x0406 tx timeout 17:50:16 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) 17:50:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:50:16 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:50:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xb804, 0x0, 0x3000137) 17:50:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="180000a9f843149a8abb33ef0000000000000000000000004b718437f936c9e39b52351a9152e45670235e39d18dc29a34fe2900dcea5273c50da329fa67e983dfcebc39ecc55c71af35e4b836ec36bf3278b75b7a6cb3d1cd1b90b4b0834b3d487ae5d77c4ab926b8aa112cace5be801b3a6d7ac080faf66bd3b6366bcd8d877d643487fbed1f22205fa2bace7fc89af71248be2363984255f750304c3032f801aa9f122a1a"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 17:50:16 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:50:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1313a, 0x0, 0x3000137) 17:50:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:50:17 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:50:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:50:17 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:50:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x20000, 0x0, 0x3000137) [ 968.154682][ T5103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 968.164638][ T5103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 968.175050][ T5103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 968.183251][ T5103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 968.192207][ T5103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 968.202879][ T5103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 968.548810][T11343] chnl_net:caif_netlink_parms(): no params data found [ 968.701321][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.712013][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.720013][T11343] bridge_slave_0: entered allmulticast mode [ 968.729632][T11343] bridge_slave_0: entered promiscuous mode [ 968.741398][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.749334][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.758480][T11343] bridge_slave_1: entered allmulticast mode [ 968.769670][T11343] bridge_slave_1: entered promiscuous mode [ 968.840655][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.857474][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.935331][T11343] team0: Port device team_slave_0 added [ 968.948573][T11343] team0: Port device team_slave_1 added [ 969.008053][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.018267][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.046864][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.061523][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.068850][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.094985][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.189055][T11343] hsr_slave_0: entered promiscuous mode [ 969.196619][T11343] hsr_slave_1: entered promiscuous mode [ 969.204688][T11343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.212299][T11343] Cannot create hsr debugfs directory [ 969.478342][T11343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.614313][T11343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.815325][T11343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.968598][T11343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.243797][ T5118] Bluetooth: hci5: command 0x0409 tx timeout [ 970.291646][T11343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 970.306800][T11343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 970.320998][T11343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 970.335759][T11343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 970.530529][T11343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.579250][T11343] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.600477][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.607807][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.631801][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.639087][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.003758][T11343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.099391][T11343] veth0_vlan: entered promiscuous mode [ 971.119885][T11343] veth1_vlan: entered promiscuous mode [ 971.184603][T11343] veth0_macvtap: entered promiscuous mode [ 971.201861][T11343] veth1_macvtap: entered promiscuous mode [ 971.237677][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.249574][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.260222][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.273061][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.283130][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.294285][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.306671][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.317437][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.327585][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.342163][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.352086][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.362908][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.375422][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.386624][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.399741][T11343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.424707][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.435762][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.453672][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.465142][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.481558][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.492174][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.502678][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.513539][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.537385][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.548076][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.561824][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.573151][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.586340][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.597408][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.609959][T11343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.633023][T11343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.645264][T11343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.654990][T11343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.667237][T11343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.813594][ T9742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.821562][ T9742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.905425][ T2447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.913430][ T2447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.333869][ T5118] Bluetooth: hci5: command 0x041b tx timeout [ 974.404332][ T5118] Bluetooth: hci5: command 0x040f tx timeout [ 976.486282][ T5118] Bluetooth: hci5: command 0x0419 tx timeout [ 998.970630][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.977792][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 17:51:17 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:51:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 17:51:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x8, 0xfffffffff8a360b9) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x6, 0x1, 0x8c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @broadcast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x3200, 0x892f, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x36) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, r3}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) 17:51:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x50000, 0x0, 0x3000137) 17:51:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1640, 0x0, 0x3000137) 17:51:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:51:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x80000, 0x0, 0x3000137) 17:51:18 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:51:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:51:18 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYRES32, @ANYRESDEC=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5}, 0x18) r6 = socket(0x10, 0x803, 0x0) sendto$inet6(r6, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6_vti0\x00', r7, 0x2f, 0x0, 0x2, 0xfff, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7, 0x10, 0x4, 0x1}}) r8 = socket(0x10, 0x803, 0x0) sendto$inet6(r8, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r9}, 0x18) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x328, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CSA_IES={0x300, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd9, 0x3, "8acb1bb4fdbea66cb3e802258a45e69fe0cf0ce6ec285ddc3fa59ef62dae30b756559b033a6f8adac21174cd2f11ac66e714377606f2b9eed6b27f3b626db83a427fa3ed7bafb3e4f20ac34903767f9442cc6ee28631b95a96f2a76aa19a8bd3784c02543b67a5a1a5c28af01497b609c0d84aab48eed432af9489b26a766cd63f7f1e0324e51e325bfb75d1fa74f2cfd09a7ad4d893d0335de269ddce30f29f4d23009d7ac38630f2a6bb0cd75c99d2e10a5e13d3d3350c0baac920cd19019155265cc7c61a2314ec9f9536a6c7eb066c97ccba71"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x159, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="e00cce159393"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x5, 0x15, {0x0, 0x0, 0x0, "b5491027577982d8853ab34f5fa2665f7598"}}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x74, "7b4486ff6d0ad6835a880860262d0718c10989b04a60f7f440cc2ff4839816cf3f6459eb35220e673f3f05c226e2bd25ab53f7c8b5e75a22643e072adf1b047de7348a88fd50145ca454e0ac612360e37d6a64f3cf59779bfcb21ff6a19997b8a80b35685ebd2e791f4cce6e55ea1c2177a187e7"}, {0xdd, 0x4b, "6bfc2506e1fb8d7bfd363a3468f779d03e9c2d5702b837cc06680faf789abc8767261836dd9097f4045fd0651567f826c570905ef403a01c91edcc380de1675d9e4477d466d43a6a3c0f1c"}, {0xdd, 0x22, "f8bfda0e5a707e5492c35fceba5fce7c689493a6e4d76095a36f349c061c154c3c8b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x79, 0x80, [@mic={0x8c, 0x10, {0x0, "d4a9eeab2ebe", @short="b7dfe74cae0ec86e"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x1, @random='!'}, @random_vendor={0xdd, 0x12, "55d71cac0ef7ada6f76dacf599d874d287fb"}, @mesh_chsw={0x76, 0x6}, @challenge={0x10, 0x1}, @erp={0x2a, 0x1}, @ht={0x2d, 0x1a}, @link_id={0x65, 0x12, {@random="194837a79c64", @broadcast}}, @chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@supported_rates={0x1, 0x1, [{}]}, @random]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x328}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r11, r10, 0x0, 0x10000a006) 17:51:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x80101, 0x0, 0x3000137) 17:51:18 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:51:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xb40000, 0x0, 0x3000137) [ 1028.064160][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1028.064183][ T29] audit: type=1804 audit(1704477078.896:203): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3448300101/syzkaller.MaLwh6/25/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1028.143829][ T29] audit: type=1804 audit(1704477078.946:204): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3448300101/syzkaller.MaLwh6/25/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1029.554895][ T5103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1029.566448][ T5103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1029.575919][ T5103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1029.586470][ T5103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1029.594966][ T5103] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1029.603328][ T5103] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1030.005208][T11394] chnl_net:caif_netlink_parms(): no params data found [ 1030.196579][T11394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.204348][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.211645][T11394] bridge_slave_0: entered allmulticast mode [ 1030.220929][T11394] bridge_slave_0: entered promiscuous mode [ 1030.232995][T11394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.247457][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.257409][T11394] bridge_slave_1: entered allmulticast mode [ 1030.266461][T11394] bridge_slave_1: entered promiscuous mode [ 1030.328168][T11394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.346302][T11394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.423380][T11394] team0: Port device team_slave_0 added [ 1030.434444][T11394] team0: Port device team_slave_1 added [ 1030.502998][T11394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.510314][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.536505][T11394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.551085][T11394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.560816][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.592378][T11394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.685532][T11394] hsr_slave_0: entered promiscuous mode [ 1030.692630][T11394] hsr_slave_1: entered promiscuous mode [ 1030.703907][T11394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1030.711612][T11394] Cannot create hsr debugfs directory [ 1030.984500][T11394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.133947][T11394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.312883][T11394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.441760][T11394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.686723][T11310] Bluetooth: hci6: command 0x0409 tx timeout [ 1031.742493][T11394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1031.759999][T11394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1031.774771][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 1031.796561][T11394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1031.814710][T11394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1032.001790][T11394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.042600][T11394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.066743][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.074234][T10653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.106742][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.114080][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.477468][T11394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.571739][T11394] veth0_vlan: entered promiscuous mode [ 1032.594476][T11394] veth1_vlan: entered promiscuous mode [ 1032.667273][T11394] veth0_macvtap: entered promiscuous mode [ 1032.680908][T11394] veth1_macvtap: entered promiscuous mode [ 1032.722495][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.734837][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.751382][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.761956][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.771948][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.782604][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.792650][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.803194][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.816137][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.826945][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.836865][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.847532][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.860299][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.873724][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.886322][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.898470][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.923783][T11394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.963066][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.975470][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.986311][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.997896][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.008566][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.025890][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.036228][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.047743][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.058503][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.069676][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.079612][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.090190][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.100762][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.112550][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.128894][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.139897][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.156560][T11394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.183993][T11394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.192782][T11394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.203037][T11394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.226140][T11394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.380773][ T9737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.388992][ T9737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.467203][ T9741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.475275][ T9741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.764405][ T5118] Bluetooth: hci6: command 0x041b tx timeout [ 1035.844093][ T5118] Bluetooth: hci6: command 0x040f tx timeout [ 1037.924753][ T5118] Bluetooth: hci6: command 0x0419 tx timeout [ 1060.408646][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.415299][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 17:52:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 17:52:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1000000, 0x0, 0x3000137) 17:52:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:52:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:52:19 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:52:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYRES32, @ANYRESDEC=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5}, 0x18) (async) r6 = socket(0x10, 0x803, 0x0) sendto$inet6(r6, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6_vti0\x00', r7, 0x2f, 0x0, 0x2, 0xfff, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7, 0x10, 0x4, 0x1}}) r8 = socket(0x10, 0x803, 0x0) sendto$inet6(r8, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r9}, 0x18) (async, rerun: 32) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x328, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CSA_IES={0x300, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd9, 0x3, "8acb1bb4fdbea66cb3e802258a45e69fe0cf0ce6ec285ddc3fa59ef62dae30b756559b033a6f8adac21174cd2f11ac66e714377606f2b9eed6b27f3b626db83a427fa3ed7bafb3e4f20ac34903767f9442cc6ee28631b95a96f2a76aa19a8bd3784c02543b67a5a1a5c28af01497b609c0d84aab48eed432af9489b26a766cd63f7f1e0324e51e325bfb75d1fa74f2cfd09a7ad4d893d0335de269ddce30f29f4d23009d7ac38630f2a6bb0cd75c99d2e10a5e13d3d3350c0baac920cd19019155265cc7c61a2314ec9f9536a6c7eb066c97ccba71"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x159, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="e00cce159393"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x5, 0x15, {0x0, 0x0, 0x0, "b5491027577982d8853ab34f5fa2665f7598"}}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x74, "7b4486ff6d0ad6835a880860262d0718c10989b04a60f7f440cc2ff4839816cf3f6459eb35220e673f3f05c226e2bd25ab53f7c8b5e75a22643e072adf1b047de7348a88fd50145ca454e0ac612360e37d6a64f3cf59779bfcb21ff6a19997b8a80b35685ebd2e791f4cce6e55ea1c2177a187e7"}, {0xdd, 0x4b, "6bfc2506e1fb8d7bfd363a3468f779d03e9c2d5702b837cc06680faf789abc8767261836dd9097f4045fd0651567f826c570905ef403a01c91edcc380de1675d9e4477d466d43a6a3c0f1c"}, {0xdd, 0x22, "f8bfda0e5a707e5492c35fceba5fce7c689493a6e4d76095a36f349c061c154c3c8b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x79, 0x80, [@mic={0x8c, 0x10, {0x0, "d4a9eeab2ebe", @short="b7dfe74cae0ec86e"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x1, @random='!'}, @random_vendor={0xdd, 0x12, "55d71cac0ef7ada6f76dacf599d874d287fb"}, @mesh_chsw={0x76, 0x6}, @challenge={0x10, 0x1}, @erp={0x2a, 0x1}, @ht={0x2d, 0x1a}, @link_id={0x65, 0x12, {@random="194837a79c64", @broadcast}}, @chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@supported_rates={0x1, 0x1, [{}]}, @random]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x328}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async, rerun: 64) sendfile(r11, r10, 0x0, 0x10000a006) (rerun: 64) 17:52:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1010800, 0x0, 0x3000137) 17:52:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:52:19 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:52:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 17:52:20 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYRES32, @ANYRESDEC=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x48000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5}, 0x18) r6 = socket(0x10, 0x803, 0x0) sendto$inet6(r6, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6_vti0\x00', r7, 0x2f, 0x0, 0x2, 0xfff, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7, 0x10, 0x4, 0x1}}) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendto$inet6(r8, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r9}, 0x18) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x328, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CSA_IES={0x300, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd9, 0x3, "8acb1bb4fdbea66cb3e802258a45e69fe0cf0ce6ec285ddc3fa59ef62dae30b756559b033a6f8adac21174cd2f11ac66e714377606f2b9eed6b27f3b626db83a427fa3ed7bafb3e4f20ac34903767f9442cc6ee28631b95a96f2a76aa19a8bd3784c02543b67a5a1a5c28af01497b609c0d84aab48eed432af9489b26a766cd63f7f1e0324e51e325bfb75d1fa74f2cfd09a7ad4d893d0335de269ddce30f29f4d23009d7ac38630f2a6bb0cd75c99d2e10a5e13d3d3350c0baac920cd19019155265cc7c61a2314ec9f9536a6c7eb066c97ccba71"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x159, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="e00cce159393"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x5, 0x15, {0x0, 0x0, 0x0, "b5491027577982d8853ab34f5fa2665f7598"}}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x74, "7b4486ff6d0ad6835a880860262d0718c10989b04a60f7f440cc2ff4839816cf3f6459eb35220e673f3f05c226e2bd25ab53f7c8b5e75a22643e072adf1b047de7348a88fd50145ca454e0ac612360e37d6a64f3cf59779bfcb21ff6a19997b8a80b35685ebd2e791f4cce6e55ea1c2177a187e7"}, {0xdd, 0x4b, "6bfc2506e1fb8d7bfd363a3468f779d03e9c2d5702b837cc06680faf789abc8767261836dd9097f4045fd0651567f826c570905ef403a01c91edcc380de1675d9e4477d466d43a6a3c0f1c"}, {0xdd, 0x22, "f8bfda0e5a707e5492c35fceba5fce7c689493a6e4d76095a36f349c061c154c3c8b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x79, 0x80, [@mic={0x8c, 0x10, {0x0, "d4a9eeab2ebe", @short="b7dfe74cae0ec86e"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x1, @random='!'}, @random_vendor={0xdd, 0x12, "55d71cac0ef7ada6f76dacf599d874d287fb"}, @mesh_chsw={0x76, 0x6}, @challenge={0x10, 0x1}, @erp={0x2a, 0x1}, @ht={0x2d, 0x1a}, @link_id={0x65, 0x12, {@random="194837a79c64", @broadcast}}, @chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@supported_rates={0x1, 0x1, [{}]}, @random]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x328}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x328, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CSA_IES={0x300, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd9, 0x3, "8acb1bb4fdbea66cb3e802258a45e69fe0cf0ce6ec285ddc3fa59ef62dae30b756559b033a6f8adac21174cd2f11ac66e714377606f2b9eed6b27f3b626db83a427fa3ed7bafb3e4f20ac34903767f9442cc6ee28631b95a96f2a76aa19a8bd3784c02543b67a5a1a5c28af01497b609c0d84aab48eed432af9489b26a766cd63f7f1e0324e51e325bfb75d1fa74f2cfd09a7ad4d893d0335de269ddce30f29f4d23009d7ac38630f2a6bb0cd75c99d2e10a5e13d3d3350c0baac920cd19019155265cc7c61a2314ec9f9536a6c7eb066c97ccba71"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x159, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="e00cce159393"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x5, 0x15, {0x0, 0x0, 0x0, "b5491027577982d8853ab34f5fa2665f7598"}}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x74, "7b4486ff6d0ad6835a880860262d0718c10989b04a60f7f440cc2ff4839816cf3f6459eb35220e673f3f05c226e2bd25ab53f7c8b5e75a22643e072adf1b047de7348a88fd50145ca454e0ac612360e37d6a64f3cf59779bfcb21ff6a19997b8a80b35685ebd2e791f4cce6e55ea1c2177a187e7"}, {0xdd, 0x4b, "6bfc2506e1fb8d7bfd363a3468f779d03e9c2d5702b837cc06680faf789abc8767261836dd9097f4045fd0651567f826c570905ef403a01c91edcc380de1675d9e4477d466d43a6a3c0f1c"}, {0xdd, 0x22, "f8bfda0e5a707e5492c35fceba5fce7c689493a6e4d76095a36f349c061c154c3c8b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x79, 0x80, [@mic={0x8c, 0x10, {0x0, "d4a9eeab2ebe", @short="b7dfe74cae0ec86e"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x1, @random='!'}, @random_vendor={0xdd, 0x12, "55d71cac0ef7ada6f76dacf599d874d287fb"}, @mesh_chsw={0x76, 0x6}, @challenge={0x10, 0x1}, @erp={0x2a, 0x1}, @ht={0x2d, 0x1a}, @link_id={0x65, 0x12, {@random="194837a79c64", @broadcast}}, @chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@supported_rates={0x1, 0x1, [{}]}, @random]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x328}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r11, r10, 0x0, 0x10000a006) 17:52:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x2000000, 0x0, 0x3000137) [ 1091.051791][T11310] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1091.062820][T11310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1091.071521][T11310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1091.086785][T11310] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1091.095038][T11310] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1091.102540][T11310] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1091.483204][T11448] chnl_net:caif_netlink_parms(): no params data found [ 1091.652046][T11448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.659610][T11448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.667011][T11448] bridge_slave_0: entered allmulticast mode [ 1091.675769][T11448] bridge_slave_0: entered promiscuous mode [ 1091.686754][T11448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.698623][T11448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.706184][T11448] bridge_slave_1: entered allmulticast mode [ 1091.715351][T11448] bridge_slave_1: entered promiscuous mode [ 1091.783935][T11448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.804772][T11448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.883999][T11448] team0: Port device team_slave_0 added [ 1091.900669][T11448] team0: Port device team_slave_1 added [ 1091.961652][T11448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.970613][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.997428][T11448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.017501][T11448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.025081][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.051564][T11448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.150760][T11448] hsr_slave_0: entered promiscuous mode [ 1092.158460][T11448] hsr_slave_1: entered promiscuous mode [ 1092.166810][T11448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1092.174693][T11448] Cannot create hsr debugfs directory [ 1092.472593][T11448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.668466][T11448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.854062][T11448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.952712][T11448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.126660][ T5103] Bluetooth: hci7: command 0x0409 tx timeout [ 1093.206250][ T5103] Bluetooth: hci5: command 0x0406 tx timeout [ 1093.240505][T11448] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1093.255678][T11448] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1093.269166][T11448] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1093.282031][T11448] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1093.495883][T11448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.542940][T11448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.569434][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.576890][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.598539][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.605912][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.995300][T11448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.090254][T11448] veth0_vlan: entered promiscuous mode [ 1094.114937][T11448] veth1_vlan: entered promiscuous mode [ 1094.185484][T11448] veth0_macvtap: entered promiscuous mode [ 1094.201116][T11448] veth1_macvtap: entered promiscuous mode [ 1094.241404][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.258553][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.270060][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.281679][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.292442][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.303302][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.315891][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.328522][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.340813][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.360059][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.370581][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.381452][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.391841][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.402648][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.414878][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.425842][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.436320][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.447355][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.466604][T11448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.500397][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.515612][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.525872][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.538521][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.553561][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.570594][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.582242][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.593239][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.604153][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.615257][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.625160][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.635723][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.647984][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.658520][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.675974][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.686531][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.697790][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.708488][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.721923][T11448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.748991][T11448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.760262][T11448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.773319][T11448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.783157][T11448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.937053][ T9742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.958110][ T9742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.042358][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.053441][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.204149][T11310] Bluetooth: hci7: command 0x041b tx timeout [ 1097.284364][T11310] Bluetooth: hci7: command 0x040f tx timeout [ 1099.367935][T11310] Bluetooth: hci7: command 0x0419 tx timeout [ 1121.864185][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.870607][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 17:53:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 17:53:20 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f0000000400)) 17:53:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:53:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x3000000, 0x0, 0x3000137) 17:53:20 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:53:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xa50c554a76980563) 17:53:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 17:53:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x4000000, 0x0, 0x3000137) 17:53:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 17:53:21 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:53:21 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:53:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x5000000, 0x0, 0x3000137) [ 1152.591318][ T5118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1152.602024][ T5118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1152.611833][ T5118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1152.630711][ T5118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1152.640623][ T5118] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1152.648545][ T5118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1153.046716][T11493] chnl_net:caif_netlink_parms(): no params data found [ 1153.198719][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.206627][T11493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.214346][T11493] bridge_slave_0: entered allmulticast mode [ 1153.224989][T11493] bridge_slave_0: entered promiscuous mode [ 1153.241029][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.248606][T11493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.256113][T11493] bridge_slave_1: entered allmulticast mode [ 1153.266499][T11493] bridge_slave_1: entered promiscuous mode [ 1153.332264][T11493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.352387][T11493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.431721][T11493] team0: Port device team_slave_0 added [ 1153.449543][T11493] team0: Port device team_slave_1 added [ 1153.512620][T11493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.519711][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.550487][T11493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.565954][T11493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.572961][T11493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.599409][T11493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.703942][T11493] hsr_slave_0: entered promiscuous mode [ 1153.711526][T11493] hsr_slave_1: entered promiscuous mode [ 1153.718668][T11493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1153.726592][T11493] Cannot create hsr debugfs directory [ 1154.006606][T11493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.165154][T11493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.350317][T11493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.519174][T11493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.646313][ T5118] Bluetooth: hci6: command 0x0406 tx timeout [ 1154.724225][ T5103] Bluetooth: hci10: command 0x0409 tx timeout [ 1154.828625][T11493] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1154.848439][T11493] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1154.863282][T11493] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1154.881452][T11493] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1155.098636][T11493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.146384][T11493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.169306][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.176659][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.206652][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.214225][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.597540][T11493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.712855][T11493] veth0_vlan: entered promiscuous mode [ 1155.740659][T11493] veth1_vlan: entered promiscuous mode [ 1155.811064][T11493] veth0_macvtap: entered promiscuous mode [ 1155.832358][T11493] veth1_macvtap: entered promiscuous mode [ 1155.868740][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.880035][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.890840][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.907628][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.918161][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.933008][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.943570][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.954093][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.967998][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.978880][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.988981][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.003117][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.015154][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.025765][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.038249][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.049037][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.059048][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.072192][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.086180][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1156.097097][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.114800][T11493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.143373][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.156968][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.170851][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.181985][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.192983][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.210869][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.220984][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.231604][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.241532][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.252894][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.262878][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.275846][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.285853][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.296453][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.310051][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.325256][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.336999][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.348123][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.358605][T11493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1156.369411][T11493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.382380][T11493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.439334][T11493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.451364][T11493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.460236][T11493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.469256][T11493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.649506][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.673593][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.737361][ T9740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.745616][ T9740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.804312][ T5103] Bluetooth: hci10: command 0x041b tx timeout [ 1158.884302][ T5103] Bluetooth: hci10: command 0x040f tx timeout [ 1160.963876][ T5103] Bluetooth: hci10: command 0x0419 tx timeout [ 1183.293413][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.299911][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 17:54:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x2, &(0x7f0000000380)) 17:54:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001200)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20}, 0x0) 17:54:22 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:54:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x7000000, 0x0, 0x3000137) 17:54:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xce23, @remote}, 0x10) 17:54:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8000000, 0x0, 0x3000137) 17:54:23 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') ioctl$TUNGETDEVNETNS(r0, 0x541b, 0x1000000000000) 17:54:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x80108907, 0x0) 17:54:23 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:54:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:23 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000110"], 0x44}}, 0x0) 17:54:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 17:54:23 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:54:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:23 executing program 3: bpf$PROG_LOAD_XDP(0x10, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0}, 0x90) [ 1212.914820][T11540] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 17:54:23 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002fc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 1214.348470][T11310] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1214.359861][T11310] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1214.373053][T11310] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1214.383110][T11310] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1214.391405][T11310] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1214.399158][T11310] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1214.793937][T11551] chnl_net:caif_netlink_parms(): no params data found [ 1214.962767][T11551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.970349][T11551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.978364][T11551] bridge_slave_0: entered allmulticast mode [ 1214.992729][T11551] bridge_slave_0: entered promiscuous mode [ 1215.006640][T11551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.014082][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.021451][T11551] bridge_slave_1: entered allmulticast mode [ 1215.031485][T11551] bridge_slave_1: entered promiscuous mode [ 1215.109658][T11551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.127635][T11551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.206763][T11551] team0: Port device team_slave_0 added [ 1215.219746][T11551] team0: Port device team_slave_1 added [ 1215.282809][T11551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.298035][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.325151][T11551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.342323][T11551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.350163][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.377239][T11551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.482924][T11551] hsr_slave_0: entered promiscuous mode [ 1215.490541][T11551] hsr_slave_1: entered promiscuous mode [ 1215.505090][T11551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1215.512938][T11551] Cannot create hsr debugfs directory [ 1215.819156][T11551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.960260][T11551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.084081][T11310] Bluetooth: hci7: command 0x0406 tx timeout [ 1216.166478][T11551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.355225][T11551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.484015][ T5118] Bluetooth: hci11: command 0x0409 tx timeout [ 1216.632248][T11551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1216.648471][T11551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1216.662473][T11551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1216.678581][T11551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1216.880117][T11551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.921708][T11551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.951553][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.958962][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.987209][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.994548][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.101096][T11551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1217.396420][T11551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.500669][T11551] veth0_vlan: entered promiscuous mode [ 1217.526013][T11551] veth1_vlan: entered promiscuous mode [ 1217.594035][T11551] veth0_macvtap: entered promiscuous mode [ 1217.611239][T11551] veth1_macvtap: entered promiscuous mode [ 1217.656812][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.668759][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.679273][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.691716][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.702648][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.713736][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.725961][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.736519][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.751252][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.762126][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.773915][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.784647][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.794531][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.805253][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.815151][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.825755][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.837863][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.863066][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.877075][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.895024][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.905063][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.916534][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.930679][T11551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.972317][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.983032][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.994068][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.007117][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.018106][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.028640][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.038624][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.049761][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.067029][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.081205][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.092818][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.104101][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.114380][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.126599][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.137195][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.148511][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.165267][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.176038][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.188265][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.199751][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.209764][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.220256][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.233828][T11551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.265169][T11551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.274071][T11551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.282839][T11551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.295788][T11551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.490705][ T9740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.511064][ T9740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.569755][ T5118] Bluetooth: hci11: command 0x041b tx timeout [ 1218.577828][T10806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.585812][T10806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:54:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 17:54:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8100000, 0x0, 0x3000137) 17:54:29 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:54:29 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x400000, 0x3, 0x0, 0xffffffffffffffff, 0xe}, 0x48) 17:54:29 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8901, 0x0) 17:54:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x19) 17:54:29 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:29 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2cdc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 17:54:30 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x6, &(0x7f0000000140)=@framed={{}, [@call, @map_fd]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x85, &(0x7f00000001c0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000300)=[{}, {}, {}, {}, {}]}, 0xffffffffffffffa5) 17:54:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) 17:54:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 17:54:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xa000000, 0x0, 0x3000137) 17:54:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:30 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:30 executing program 5: socket(0x6360d1051e4e3eaa, 0x0, 0x0) 17:54:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x100, @fixed, 0xb4}, 0xe) 17:54:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x0) 17:54:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0xc1000000}, 0x0) 17:54:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0xc0}}, 0x0) 17:54:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0xfffffdef}}, 0x0) 17:54:30 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x11000000, 0x0, 0x3000137) 17:54:31 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 17:54:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), 0x4) 17:54:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 17:54:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x16400000, 0x0, 0x3000137) 17:54:31 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x100, @fixed}, 0xe) 17:54:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0xf}}, 0x0) 17:54:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) [ 1220.654451][ T5118] Bluetooth: hci11: command 0x040f tx timeout 17:54:31 executing program 5: socket(0x1, 0x0, 0x200) 17:54:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1f000000, 0x0, 0x3000137) 17:54:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0xb4, 0x2}, 0xe) 17:54:31 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000880), 0x4) 17:54:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x3a310100, 0x0, 0x3000137) 17:54:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 17:54:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'io'}, {0x2b, 'blkio'}]}, 0xb) 17:54:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 17:54:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x40020000, 0x0, 0x3000137) 17:54:32 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0xff1f, &(0x7f0000000940)=@raw=[@map_fd, @kfunc, @alu], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x0, 0x10, &(0x7f0000000a00), 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000bc0)=[{}, {}]}, 0x6c) 17:54:32 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:32 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140), 0x48) close(r0) 17:54:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) close(r0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 17:54:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x80800000, 0x0, 0x3000137) 17:54:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 17:54:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8dffffff, 0x0, 0x3000137) 17:54:32 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 17:54:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 17:54:32 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140), 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r0, &(0x7f0000000900)='Y', 0x0}, 0x20) 17:54:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xb8040000, 0x0, 0x3000137) 17:54:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18}, 0x0) 17:54:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/59, 0x3b}], 0x1}, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 17:54:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) 17:54:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}], 0x20}, 0x0) 17:54:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:33 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xffffff8d, 0x0, 0x3000137) 17:54:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 17:54:33 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), 0x0}, 0x20) 17:54:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1222.735472][ T5118] Bluetooth: hci11: command 0x0419 tx timeout 17:54:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x20000000000, 0x0, 0x3000137) 17:54:33 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getpid() sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:54:34 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'freezer'}]}, 0x9) 17:54:34 executing program 3: bpf$MAP_GET_NEXT_KEY(0x5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/149}, 0x20) 17:54:34 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140), 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000012c0)={r0, 0x0, 0x0, 0x4}, 0x20) 17:54:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'memory'}]}, 0x8) 17:54:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:34 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x80000000000, 0x0, 0x3000137) 17:54:34 executing program 1: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000100)="3aff891c", 0x4) 17:54:34 executing program 5: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000)='R', 0x1) 17:54:34 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000080)="596688fcff000006", 0x8) 17:54:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:34 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000008abd850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 17:54:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xffffff8d, 0x0, 0x3000137) 17:54:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x80800000, 0x0, 0x3000137) 17:54:34 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:35 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:35 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1000000000000, 0x0, 0x3000137) 17:54:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x11000000, 0x0, 0x3000137) 17:54:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8000000, 0x0, 0x3000137) 17:54:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x5000000000000, 0x0, 0x3000137) 17:54:36 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:36 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:54:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1000000000000, 0x0, 0x3000137) 17:54:36 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 1) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:36 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1226.021864][T11800] FAULT_INJECTION: forcing a failure. [ 1226.021864][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.067380][T11800] CPU: 1 PID: 11800 Comm: syz-executor.5 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1226.077904][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1226.088026][T11800] Call Trace: [ 1226.091352][T11800] [ 1226.094337][T11800] dump_stack_lvl+0x125/0x1b0 [ 1226.099090][T11800] should_fail_ex+0x496/0x5b0 [ 1226.103841][T11800] should_failslab+0x9/0x20 [ 1226.108427][T11800] __kmem_cache_alloc_node+0x6b/0x310 [ 1226.113887][T11800] ? kernfs_fop_write_iter+0x225/0x500 [ 1226.119484][T11800] ? kernfs_fop_write_iter+0x225/0x500 [ 1226.125022][T11800] __kmalloc+0x49/0x90 [ 1226.129211][T11800] kernfs_fop_write_iter+0x225/0x500 [ 1226.134586][T11800] vfs_write+0x64f/0xdf0 [ 1226.138943][T11800] ? kernel_write+0x6c0/0x6c0 [ 1226.143721][T11800] ksys_write+0x12f/0x250 [ 1226.148117][T11800] ? __ia32_sys_read+0xb0/0xb0 [ 1226.152957][T11800] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1226.159057][T11800] do_syscall_64+0x40/0x110 [ 1226.163624][T11800] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1226.169591][T11800] RIP: 0033:0x7f00ae67cce9 [ 1226.174038][T11800] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1226.193685][T11800] RSP: 002b:00007f00af3460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1226.202152][T11800] RAX: ffffffffffffffda RBX: 00007f00ae79bf80 RCX: 00007f00ae67cce9 [ 1226.210150][T11800] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1226.218149][T11800] RBP: 00007f00af346120 R08: 0000000000000000 R09: 0000000000000000 [ 1226.226171][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.234165][T11800] R13: 000000000000000b R14: 00007f00ae79bf80 R15: 00007ffeb9410098 [ 1226.242191][T11800] 17:54:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x846512678b3a18b2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x9, 0x1, 0x0, 0x4}]}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x11003, 0x40800}, [@IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x28}}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'\x00', 0x400}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="29a5c1e9a613cc30077ef51d86dd9580efeb00092f004f31e04aea696b686ef4a91debe353a2e26889e038c9", 0x2c}, {&(0x7f0000000480)="f75b1e0a34643d69a1", 0x9}, {&(0x7f00000000c0)="b528", 0x2}], 0x1000000000000221) 17:54:37 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 2) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1226.650639][T11810] FAULT_INJECTION: forcing a failure. [ 1226.650639][T11810] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1226.711710][T11810] CPU: 1 PID: 11810 Comm: syz-executor.5 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1226.722246][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1226.732465][T11810] Call Trace: [ 1226.735799][T11810] [ 1226.738799][T11810] dump_stack_lvl+0x125/0x1b0 [ 1226.743557][T11810] should_fail_ex+0x496/0x5b0 [ 1226.748312][T11810] _copy_from_iter+0x246/0x10f0 [ 1226.753268][T11810] ? page_copy_sane+0x2c0/0x2c0 [ 1226.758234][T11810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.764242][T11810] ? __virt_addr_valid+0x5e/0x2d0 [ 1226.769352][T11810] ? __phys_addr_symbol+0x30/0x70 [ 1226.774477][T11810] ? __check_object_size+0x323/0x730 [ 1226.779855][T11810] kernfs_fop_write_iter+0x1a3/0x500 [ 1226.785232][T11810] vfs_write+0x64f/0xdf0 [ 1226.789559][T11810] ? kernel_write+0x6c0/0x6c0 [ 1226.794339][T11810] ksys_write+0x12f/0x250 [ 1226.798752][T11810] ? __ia32_sys_read+0xb0/0xb0 [ 1226.803610][T11810] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1226.809690][T11810] do_syscall_64+0x40/0x110 [ 1226.814270][T11810] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1226.820253][T11810] RIP: 0033:0x7f00ae67cce9 [ 1226.824732][T11810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1226.844410][T11810] RSP: 002b:00007f00af3460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1226.853072][T11810] RAX: ffffffffffffffda RBX: 00007f00ae79bf80 RCX: 00007f00ae67cce9 17:54:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xb4000000000000, 0x0, 0x3000137) 17:54:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1000000000000, 0x0, 0x3000137) [ 1226.861100][T11810] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1226.869233][T11810] RBP: 00007f00af346120 R08: 0000000000000000 R09: 0000000000000000 [ 1226.877269][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.885306][T11810] R13: 000000000000000b R14: 00007f00ae79bf80 R15: 00007ffeb9410098 [ 1226.893379][T11810] 17:54:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x846512678b3a18b2}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x9, 0x1, 0x0, 0x4}]}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x6db6e571) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x11003, 0x40800}, [@IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x28}}, 0x0) (async, rerun: 32) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'\x00', 0x400}) (async, rerun: 32) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="29a5c1e9a613cc30077ef51d86dd9580efeb00092f004f31e04aea696b686ef4a91debe353a2e26889e038c9", 0x2c}, {&(0x7f0000000480)="f75b1e0a34643d69a1", 0x9}, {&(0x7f00000000c0)="b528", 0x2}], 0x1000000000000221) 17:54:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:37 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 3) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1227.216550][T11825] FAULT_INJECTION: forcing a failure. [ 1227.216550][T11825] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.289506][T11825] CPU: 1 PID: 11825 Comm: syz-executor.5 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1227.300026][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1227.310146][T11825] Call Trace: [ 1227.313477][T11825] [ 1227.316498][T11825] dump_stack_lvl+0x125/0x1b0 [ 1227.321280][T11825] should_fail_ex+0x496/0x5b0 [ 1227.326045][T11825] should_failslab+0x9/0x20 [ 1227.330638][T11825] __kmem_cache_alloc_node+0x6b/0x310 [ 1227.336095][T11825] ? find_css_set+0x74e/0x1ba0 [ 1227.340939][T11825] kmalloc_trace+0x25/0x60 [ 1227.345415][T11825] find_css_set+0x74e/0x1ba0 [ 1227.350065][T11825] ? put_css_set_locked+0x10c0/0x10c0 [ 1227.355477][T11825] ? print_usage_bug.part.0+0x550/0x550 [ 1227.361099][T11825] ? cgroup_attach_task+0x483/0x8d0 [ 1227.366352][T11825] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1227.372141][T11825] cgroup_attach_task+0x48f/0x8d0 [ 1227.377252][T11825] ? cgroup_migrate+0x150/0x150 [ 1227.382185][T11825] ? __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1227.388747][T11825] __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1227.395168][T11825] ? cgroup_pidlist_show+0x60/0x60 [ 1227.400395][T11825] ? lock_sync+0x190/0x190 [ 1227.404951][T11825] cgroup_file_write+0x209/0x7c0 [ 1227.409960][T11825] ? cgroup1_procs_write+0x30/0x30 [ 1227.415127][T11825] ? kill_css+0x3b0/0x3b0 [ 1227.419490][T11825] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1227.425462][T11825] kernfs_fop_write_iter+0x33f/0x500 [ 1227.430791][T11825] ? kill_css+0x3b0/0x3b0 [ 1227.435160][T11825] vfs_write+0x64f/0xdf0 [ 1227.439462][T11825] ? kernel_write+0x6c0/0x6c0 [ 1227.444218][T11825] ksys_write+0x12f/0x250 [ 1227.448593][T11825] ? __ia32_sys_read+0xb0/0xb0 [ 1227.453486][T11825] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1227.459534][T11825] do_syscall_64+0x40/0x110 [ 1227.464074][T11825] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1227.470029][T11825] RIP: 0033:0x7f00ae67cce9 [ 1227.474481][T11825] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1227.494146][T11825] RSP: 002b:00007f00af3460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1227.502597][T11825] RAX: ffffffffffffffda RBX: 00007f00ae79bf80 RCX: 00007f00ae67cce9 [ 1227.510609][T11825] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1227.518608][T11825] RBP: 00007f00af346120 R08: 0000000000000000 R09: 0000000000000000 [ 1227.526619][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.534634][T11825] R13: 000000000000000b R14: 00007f00ae79bf80 R15: 00007ffeb9410098 [ 1227.542675][T11825] 17:54:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:38 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 4) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1228.031632][T11837] FAULT_INJECTION: forcing a failure. [ 1228.031632][T11837] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.053913][T11837] CPU: 1 PID: 11837 Comm: syz-executor.5 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1228.064443][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1228.074563][T11837] Call Trace: [ 1228.077903][T11837] 17:54:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1228.080891][T11837] dump_stack_lvl+0x125/0x1b0 [ 1228.085818][T11837] should_fail_ex+0x496/0x5b0 [ 1228.090639][T11837] should_failslab+0x9/0x20 [ 1228.095243][T11837] __kmem_cache_alloc_node+0x6b/0x310 [ 1228.100705][T11837] ? allocate_cgrp_cset_links+0xc6/0x230 [ 1228.106420][T11837] kmalloc_trace+0x25/0x60 [ 1228.110923][T11837] allocate_cgrp_cset_links+0xc6/0x230 [ 1228.116478][T11837] find_css_set+0x775/0x1ba0 [ 1228.121195][T11837] ? put_css_set_locked+0x10c0/0x10c0 [ 1228.126652][T11837] ? print_usage_bug.part.0+0x550/0x550 [ 1228.132312][T11837] ? cgroup_attach_task+0x483/0x8d0 [ 1228.137601][T11837] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1228.143415][T11837] cgroup_attach_task+0x48f/0x8d0 [ 1228.148532][T11837] ? cgroup_migrate+0x150/0x150 [ 1228.153500][T11837] ? __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1228.160090][T11837] __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1228.166503][T11837] ? cgroup_pidlist_show+0x60/0x60 [ 1228.171677][T11837] ? lock_sync+0x190/0x190 [ 1228.176150][T11837] cgroup_file_write+0x209/0x7c0 [ 1228.181128][T11837] ? cgroup1_procs_write+0x30/0x30 [ 1228.186295][T11837] ? kill_css+0x3b0/0x3b0 [ 1228.190673][T11837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1228.196645][T11837] kernfs_fop_write_iter+0x33f/0x500 [ 1228.201995][T11837] ? kill_css+0x3b0/0x3b0 [ 1228.206389][T11837] vfs_write+0x64f/0xdf0 [ 1228.210690][T11837] ? kernel_write+0x6c0/0x6c0 [ 1228.215450][T11837] ksys_write+0x12f/0x250 [ 1228.219821][T11837] ? __ia32_sys_read+0xb0/0xb0 [ 1228.224713][T11837] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1228.230831][T11837] do_syscall_64+0x40/0x110 [ 1228.235369][T11837] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1228.241303][T11837] RIP: 0033:0x7f00ae67cce9 [ 1228.245743][T11837] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1228.265383][T11837] RSP: 002b:00007f00af3460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1228.273830][T11837] RAX: ffffffffffffffda RBX: 00007f00ae79bf80 RCX: 00007f00ae67cce9 [ 1228.281826][T11837] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1228.289820][T11837] RBP: 00007f00af346120 R08: 0000000000000000 R09: 0000000000000000 [ 1228.297821][T11837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.305820][T11837] R13: 000000000000000b R14: 00007f00ae79bf80 R15: 00007ffeb9410098 [ 1228.313840][T11837] 17:54:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x100000000000000, 0x0, 0x3000137) 17:54:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1000000000000, 0x0, 0x3000137) 17:54:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:39 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 5) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1228.751074][T11850] FAULT_INJECTION: forcing a failure. [ 1228.751074][T11850] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.783375][T11850] CPU: 0 PID: 11850 Comm: syz-executor.5 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1228.793988][T11850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1228.804116][T11850] Call Trace: [ 1228.807450][T11850] [ 1228.810448][T11850] dump_stack_lvl+0x125/0x1b0 [ 1228.815208][T11850] should_fail_ex+0x496/0x5b0 [ 1228.819968][T11850] should_failslab+0x9/0x20 [ 1228.824566][T11850] __kmem_cache_alloc_node+0x6b/0x310 [ 1228.830032][T11850] ? allocate_cgrp_cset_links+0xc6/0x230 [ 1228.835756][T11850] kmalloc_trace+0x25/0x60 [ 1228.840277][T11850] allocate_cgrp_cset_links+0xc6/0x230 [ 1228.845878][T11850] find_css_set+0x775/0x1ba0 [ 1228.850656][T11850] ? put_css_set_locked+0x10c0/0x10c0 [ 1228.856112][T11850] ? print_usage_bug.part.0+0x550/0x550 [ 1228.861786][T11850] ? cgroup_attach_task+0x483/0x8d0 [ 1228.867083][T11850] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1228.872910][T11850] cgroup_attach_task+0x48f/0x8d0 [ 1228.878027][T11850] ? cgroup_migrate+0x150/0x150 [ 1228.882995][T11850] ? __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1228.889629][T11850] __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1228.896069][T11850] ? cgroup_pidlist_show+0x60/0x60 [ 1228.901291][T11850] ? lock_sync+0x190/0x190 [ 1228.905801][T11850] cgroup_file_write+0x209/0x7c0 [ 1228.910812][T11850] ? cgroup1_procs_write+0x30/0x30 [ 1228.916008][T11850] ? kill_css+0x3b0/0x3b0 [ 1228.920434][T11850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1228.926444][T11850] kernfs_fop_write_iter+0x33f/0x500 [ 1228.931816][T11850] ? kill_css+0x3b0/0x3b0 [ 1228.936221][T11850] vfs_write+0x64f/0xdf0 [ 1228.940547][T11850] ? kernel_write+0x6c0/0x6c0 [ 1228.945340][T11850] ksys_write+0x12f/0x250 [ 1228.949741][T11850] ? __ia32_sys_read+0xb0/0xb0 [ 1228.954587][T11850] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1228.960654][T11850] do_syscall_64+0x40/0x110 [ 1228.965222][T11850] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1228.971188][T11850] RIP: 0033:0x7f00ae67cce9 [ 1228.975659][T11850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 17:54:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x846512678b3a18b2}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x9, 0x1, 0x0, 0x4}]}) (async) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x11003, 0x40800}, [@IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x28}}, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'\x00', 0x400}) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="29a5c1e9a613cc30077ef51d86dd9580efeb00092f004f31e04aea696b686ef4a91debe353a2e26889e038c9", 0x2c}, {&(0x7f0000000480)="f75b1e0a34643d69a1", 0x9}, {&(0x7f00000000c0)="b528", 0x2}], 0x1000000000000221) 17:54:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1228.995337][T11850] RSP: 002b:00007f00af3460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1229.003827][T11850] RAX: ffffffffffffffda RBX: 00007f00ae79bf80 RCX: 00007f00ae67cce9 [ 1229.011854][T11850] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1229.019882][T11850] RBP: 00007f00af346120 R08: 0000000000000000 R09: 0000000000000000 [ 1229.027918][T11850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.035947][T11850] R13: 000000000000000b R14: 00007f00ae79bf80 R15: 00007ffeb9410098 [ 1229.044006][T11850] 17:54:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x101080000000000, 0x0, 0x3000137) 17:54:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:40 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 6) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x846512678b3a18b2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x9, 0x1, 0x0, 0x4}]}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x11003, 0x40800}, [@IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x28}}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'\x00', 0x400}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="29a5c1e9a613cc30077ef51d86dd9580efeb00092f004f31e04aea696b686ef4a91debe353a2e26889e038c9", 0x2c}, {&(0x7f0000000480)="f75b1e0a34643d69a1", 0x9}, {&(0x7f00000000c0)="b528", 0x2}], 0x1000000000000221) 17:54:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) [ 1229.766483][T11871] FAULT_INJECTION: forcing a failure. [ 1229.766483][T11871] name failslab, interval 1, probability 0, space 0, times 0 17:54:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1229.855208][T11871] CPU: 0 PID: 11871 Comm: syz-executor.5 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1229.865742][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1229.875856][T11871] Call Trace: [ 1229.879179][T11871] [ 1229.882154][T11871] dump_stack_lvl+0x125/0x1b0 [ 1229.886897][T11871] should_fail_ex+0x496/0x5b0 [ 1229.891657][T11871] should_failslab+0x9/0x20 [ 1229.896255][T11871] __kmem_cache_alloc_node+0x6b/0x310 [ 1229.901715][T11871] ? allocate_cgrp_cset_links+0xc6/0x230 [ 1229.907432][T11871] kmalloc_trace+0x25/0x60 [ 1229.911933][T11871] allocate_cgrp_cset_links+0xc6/0x230 [ 1229.917447][T11871] find_css_set+0x775/0x1ba0 [ 1229.922088][T11871] ? put_css_set_locked+0x10c0/0x10c0 [ 1229.927515][T11871] ? print_usage_bug.part.0+0x550/0x550 [ 1229.933141][T11871] ? cgroup_attach_task+0x483/0x8d0 [ 1229.938393][T11871] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1229.944185][T11871] cgroup_attach_task+0x48f/0x8d0 [ 1229.949259][T11871] ? cgroup_migrate+0x150/0x150 [ 1229.954178][T11871] ? __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1229.960727][T11871] __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1229.967107][T11871] ? cgroup_pidlist_show+0x60/0x60 [ 1229.972274][T11871] ? lock_sync+0x190/0x190 [ 1229.976742][T11871] cgroup_file_write+0x209/0x7c0 [ 1229.981716][T11871] ? cgroup1_procs_write+0x30/0x30 [ 1229.986882][T11871] ? kill_css+0x3b0/0x3b0 [ 1229.991264][T11871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1229.997211][T11871] kernfs_fop_write_iter+0x33f/0x500 [ 1230.002537][T11871] ? kill_css+0x3b0/0x3b0 [ 1230.006903][T11871] vfs_write+0x64f/0xdf0 [ 1230.011205][T11871] ? kernel_write+0x6c0/0x6c0 [ 1230.015946][T11871] ksys_write+0x12f/0x250 [ 1230.020312][T11871] ? __ia32_sys_read+0xb0/0xb0 [ 1230.025116][T11871] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1230.031152][T11871] do_syscall_64+0x40/0x110 [ 1230.035694][T11871] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1230.041653][T11871] RIP: 0033:0x7f00ae67cce9 [ 1230.046106][T11871] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1230.065748][T11871] RSP: 002b:00007f00af3460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1230.074220][T11871] RAX: ffffffffffffffda RBX: 00007f00ae79bf80 RCX: 00007f00ae67cce9 [ 1230.082217][T11871] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1230.090231][T11871] RBP: 00007f00af346120 R08: 0000000000000000 R09: 0000000000000000 [ 1230.098251][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.106306][T11871] R13: 000000000000000b R14: 00007f00ae79bf80 R15: 00007ffeb9410098 [ 1230.114356][T11871] 17:54:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x200000000000000, 0x0, 0x3000137) 17:54:41 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:41 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:54:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:54:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x101080000000000, 0x0, 0x3000137) [ 1230.662311][T11885] FAULT_INJECTION: forcing a failure. [ 1230.662311][T11885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.748317][T11885] CPU: 1 PID: 11885 Comm: syz-executor.5 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1230.758835][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1230.768954][T11885] Call Trace: [ 1230.772283][T11885] [ 1230.775262][T11885] dump_stack_lvl+0x125/0x1b0 [ 1230.780021][T11885] should_fail_ex+0x496/0x5b0 [ 1230.784783][T11885] _copy_to_user+0x30/0xb0 [ 1230.789359][T11885] simple_read_from_buffer+0xd0/0x160 [ 1230.794816][T11885] proc_fail_nth_read+0x1b0/0x280 [ 1230.799921][T11885] ? proc_fault_inject_read+0x280/0x280 [ 1230.805562][T11885] ? security_file_permission+0xdc/0x100 [ 1230.811375][T11885] ? proc_fault_inject_read+0x280/0x280 [ 1230.817015][T11885] vfs_read+0x1ce/0x8f0 [ 1230.821248][T11885] ? __fdget_pos+0xe7/0x170 [ 1230.825806][T11885] ? exit_signals+0x960/0x960 [ 1230.830561][T11885] ? kernel_read+0x1b0/0x1b0 [ 1230.835221][T11885] ? mutex_trylock+0x130/0x130 [ 1230.840504][T11885] ? __fget_files+0x1c6/0x340 [ 1230.845287][T11885] ksys_read+0x12f/0x250 [ 1230.849604][T11885] ? vfs_write+0xdf0/0xdf0 [ 1230.854139][T11885] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1230.860217][T11885] do_syscall_64+0x40/0x110 [ 1230.864925][T11885] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1230.870914][T11885] RIP: 0033:0x7f00ae67b98c [ 1230.875386][T11885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1230.895062][T11885] RSP: 002b:00007f00af3460c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1230.903536][T11885] RAX: ffffffffffffffda RBX: 00007f00ae79bf80 RCX: 00007f00ae67b98c [ 1230.911548][T11885] RDX: 000000000000000f RSI: 00007f00af346130 RDI: 0000000000000006 [ 1230.919553][T11885] RBP: 00007f00af346120 R08: 0000000000000000 R09: 0000000000000000 [ 1230.928006][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.936024][T11885] R13: 000000000000000b R14: 00007f00ae79bf80 R15: 00007ffeb9410098 [ 1230.944060][T11885] 17:54:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:41 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:54:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:42 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x300000000000000, 0x0, 0x3000137) 17:54:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x200000000000000, 0x0, 0x3000137) 17:54:42 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x101080000000000, 0x0, 0x3000137) 17:54:42 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xf000) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:42 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfdef) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:54:42 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:54:42 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffff000) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1244.735897][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.742322][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1277.529165][ T5118] Bluetooth: hci10: command 0x0406 tx timeout 17:55:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x400000000000000, 0x0, 0x3000137) 17:55:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) 17:55:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x101080000000000, 0x0, 0x3000137) 17:55:36 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffffdef) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:55:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x200000000000000, 0x0, 0x3000137) 17:55:36 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:55:37 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffffffffffff000) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:55:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:55:37 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffffffffffffdef) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:55:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:55:37 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendfile(r2, r1, &(0x7f0000000200)=0x10000, 0x80) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000240)=r4, 0x3e) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:55:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x500000000000000, 0x0, 0x3000137) 17:55:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) [ 1288.322570][ T5118] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1288.333592][ T5118] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1288.342370][ T5118] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1288.352217][ T5118] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1288.360807][ T5118] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1288.369283][ T5118] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1288.779686][T11953] chnl_net:caif_netlink_parms(): no params data found [ 1288.983239][T11953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.992800][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.000261][T11953] bridge_slave_0: entered allmulticast mode [ 1289.010702][T11953] bridge_slave_0: entered promiscuous mode [ 1289.026156][T11953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.033785][T11953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.041188][T11953] bridge_slave_1: entered allmulticast mode [ 1289.050026][T11953] bridge_slave_1: entered promiscuous mode [ 1289.129032][T11953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.146323][T11953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.236655][T11953] team0: Port device team_slave_0 added [ 1289.250145][T11953] team0: Port device team_slave_1 added [ 1289.314007][T11953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.321042][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.356375][T11953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.371620][T11953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.379194][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.407782][T11953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.510250][T11953] hsr_slave_0: entered promiscuous mode [ 1289.521501][T11953] hsr_slave_1: entered promiscuous mode [ 1289.536156][T11953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.544390][T11953] Cannot create hsr debugfs directory [ 1289.832031][T11953] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.035184][T11953] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.168460][T11953] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.300439][T11953] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.404660][ T5118] Bluetooth: hci12: command 0x0409 tx timeout [ 1290.606168][T11953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1290.624038][T11953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1290.640299][T11953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1290.666086][T11953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1290.878969][T11953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.920338][T11953] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.941310][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.948638][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.995832][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.003200][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.107161][T11953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1291.401703][T11953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.506592][T11953] veth0_vlan: entered promiscuous mode [ 1291.529238][T11953] veth1_vlan: entered promiscuous mode [ 1291.606646][T11953] veth0_macvtap: entered promiscuous mode [ 1291.622617][T11953] veth1_macvtap: entered promiscuous mode [ 1291.662234][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.674027][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.692245][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.703221][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.713920][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.725055][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.735797][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.746979][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.757714][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.770013][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.785744][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.798567][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.808932][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.821283][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.831688][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.842811][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.855826][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.867789][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.878292][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.894568][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.908236][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.919950][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.931351][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.942625][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.957690][T11953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.980298][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.997702][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.012187][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.025172][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.037032][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.047964][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.058434][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.069596][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.080135][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.097987][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.108826][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.119834][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.130390][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.143237][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.153310][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.166102][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.176032][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.188100][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.203481][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.214792][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.225163][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.235738][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.250306][T11953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.261176][T11953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.275242][T11953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.321409][T11953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.336394][T11953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.345846][T11953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.356699][T11953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.485124][ T5118] Bluetooth: hci12: command 0x041b tx timeout [ 1292.554733][ T5168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.562605][ T5168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.636574][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.646355][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.564738][ T5118] Bluetooth: hci12: command 0x040f tx timeout [ 1296.656269][ T5118] Bluetooth: hci12: command 0x0419 tx timeout [ 1306.179352][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.185930][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1338.964219][ T5118] Bluetooth: hci11: command 0x0406 tx timeout 17:56:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) 17:56:38 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendfile(r2, r1, &(0x7f0000000200)=0x10000, 0x80) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000240)=r4, 0x3e) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) pipe(&(0x7f0000000180)) (async) sendfile(r2, r1, &(0x7f0000000200)=0x10000, 0x80) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) (async) gettid() (async) write$cgroup_pid(r3, &(0x7f0000000240)=r4, 0x3e) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) 17:56:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:56:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x50f79f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1f, @mcast1, 0x100}], 0x1c) mmap(&(0x7f0000398000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x29ad4000) sendto$inet(r4, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r3, r2, 0x0, 0x100000002) 17:56:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:56:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x700000000000000, 0x0, 0x3000137) [ 1347.924724][ T29] audit: type=1804 audit(1704477398.756:205): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2483571212/syzkaller.OYpclR/24/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0 17:56:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:56:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:56:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x800000000000000, 0x0, 0x3000137) 17:56:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)={'#! ', './file0', [{0x20, '*-!'}], 0xa, "f9dc54380d24f7566dffd42dbc620ed10bd85c310467da393df8af4acf5abab8fb9878259761799bdc10ac022a5d46a6f9f7cff9ea959e8ec7d4d7c2feb5dfab0349fb4a05481153b375ff745948616a90286808b5314c71c6"}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001900)=ANY=[], 0x208e280) openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000640)={0xffffffffffffffff, 0x7, 0x200, 0x5}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000002b92e48fb23bb42d75fbd3c4077d819b93cb3f951fc983ed520a02eb6858faf5bec138367778f06b4a17f576de19f900658d119311", @ANYRES16=r6, @ANYBLOB="00042abd7000fbdbdf25630000000c0099000000820027000000"], 0x20}, 0x1, 0x0, 0x0, 0x20080001}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000821}, 0x4044040) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) openat$cgroup_ro(r7, &(0x7f0000000600)='memory.stat\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x20, r10, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008841) 17:56:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x50f79f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1f, @mcast1, 0x100}], 0x1c) mmap(&(0x7f0000398000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x29ad4000) sendto$inet(r4, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r3, r2, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x50f79f) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1f, @mcast1, 0x100}], 0x1c) (async) mmap(&(0x7f0000398000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x29ad4000) (async) sendto$inet(r4, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (async) sendfile(r3, r2, 0x0, 0x100000002) (async) 17:56:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1348.998732][ T29] audit: type=1804 audit(1704477399.816:206): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2483571212/syzkaller.OYpclR/25/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 [ 1349.095204][ T29] audit: type=1804 audit(1704477399.926:207): pid=11995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3366408147/syzkaller.FeqjQY/66/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 1349.138857][ T29] audit: type=1804 audit(1704477399.956:208): pid=11995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3366408147/syzkaller.FeqjQY/66/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 1349.202832][ T29] audit: type=1804 audit(1704477399.966:209): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2483571212/syzkaller.OYpclR/25/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 [ 1349.272896][ T29] audit: type=1804 audit(1704477399.996:210): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2483571212/syzkaller.OYpclR/25/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 [ 1350.029848][ T5118] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1350.041404][ T5118] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1350.055423][ T5118] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1350.064570][ T5118] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1350.072786][ T5118] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1350.080954][ T5118] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1350.516477][T12006] chnl_net:caif_netlink_parms(): no params data found [ 1350.709095][T12006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.716819][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.727543][T12006] bridge_slave_0: entered allmulticast mode [ 1350.737229][T12006] bridge_slave_0: entered promiscuous mode [ 1350.749642][T12006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.757243][T12006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.771945][T12006] bridge_slave_1: entered allmulticast mode [ 1350.784893][T12006] bridge_slave_1: entered promiscuous mode [ 1350.851249][T12006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.872143][T12006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.947506][T12006] team0: Port device team_slave_0 added [ 1350.960024][T12006] team0: Port device team_slave_1 added [ 1351.033945][T12006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.040965][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.067422][T12006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.088577][T12006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.095836][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.124269][T12006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.223584][T12006] hsr_slave_0: entered promiscuous mode [ 1351.231120][T12006] hsr_slave_1: entered promiscuous mode [ 1351.241918][T12006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1351.250165][T12006] Cannot create hsr debugfs directory [ 1351.565377][T12006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.816751][T12006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.955690][T12006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.115223][T12006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.174245][T11310] Bluetooth: hci13: command 0x0409 tx timeout [ 1352.390541][T12006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1352.427783][T12006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1352.440404][T12006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1352.459439][T12006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1352.656716][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.697424][T12006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.729914][T11968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.737276][T11968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.760746][T11968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.768122][T11968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.177134][T12006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.279450][T12006] veth0_vlan: entered promiscuous mode [ 1353.306283][T12006] veth1_vlan: entered promiscuous mode [ 1353.378198][T12006] veth0_macvtap: entered promiscuous mode [ 1353.393362][T12006] veth1_macvtap: entered promiscuous mode [ 1353.440903][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.452783][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.464515][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.476026][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.486324][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.497254][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.507734][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.521383][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.541831][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.552810][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.563241][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.574382][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.584651][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.595726][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.607513][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.618529][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.639004][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.650420][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.660876][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.671977][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.682303][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.694622][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.705127][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.716105][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.726540][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.742836][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.758575][T12006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.783373][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.795853][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.806793][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.817815][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.828378][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.845405][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.858417][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.871203][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.881741][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.892806][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.903598][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.915048][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.926814][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.944150][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.954736][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.965975][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.978029][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.989248][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.999567][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.012066][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.022513][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.033481][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.049878][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.060810][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.071175][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.082600][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.098441][T12006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.150294][T12006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.160902][T12006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.171759][T12006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.186526][T12006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.247507][T11310] Bluetooth: hci13: command 0x041b tx timeout [ 1354.427786][ T9745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.443454][ T9745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.505479][ T9737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.513371][ T9737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.324008][T11310] Bluetooth: hci13: command 0x040f tx timeout [ 1358.414222][T11310] Bluetooth: hci13: command 0x0419 tx timeout [ 1367.618914][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.625447][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 17:57:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 17:57:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)={'#! ', './file0', [{0x20, '*-!'}], 0xa, "f9dc54380d24f7566dffd42dbc620ed10bd85c310467da393df8af4acf5abab8fb9878259761799bdc10ac022a5d46a6f9f7cff9ea959e8ec7d4d7c2feb5dfab0349fb4a05481153b375ff745948616a90286808b5314c71c6"}, 0x68) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001900)=ANY=[], 0x208e280) (async) openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000640)={0xffffffffffffffff, 0x7, 0x200, 0x5}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000002b92e48fb23bb42d75fbd3c4077d819b93cb3f951fc983ed520a02eb6858faf5bec138367778f06b4a17f576de19f900658d119311", @ANYRES16=r6, @ANYBLOB="00042abd7000fbdbdf25630000000c0099000000820027000000"], 0x20}, 0x1, 0x0, 0x0, 0x20080001}, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000821}, 0x4044040) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) (async) openat$cgroup_ro(r7, &(0x7f0000000600)='memory.stat\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x20, r10, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008841) 17:57:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:57:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x50f79f) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1f, @mcast1, 0x100}], 0x1c) mmap(&(0x7f0000398000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x29ad4000) (async, rerun: 32) sendto$inet(r4, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) (rerun: 32) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r3, r2, 0x0, 0x100000002) 17:57:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x810000000000000, 0x0, 0x3000137) 17:57:40 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendfile(r2, r1, &(0x7f0000000200)=0x10000, 0x80) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) gettid() (async) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000240)=r4, 0x3e) (async) write$cgroup_pid(r3, &(0x7f0000000240)=r4, 0x3e) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:57:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:57:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)={'#! ', './file0', [{0x20, '*-!'}], 0xa, "f9dc54380d24f7566dffd42dbc620ed10bd85c310467da393df8af4acf5abab8fb9878259761799bdc10ac022a5d46a6f9f7cff9ea959e8ec7d4d7c2feb5dfab0349fb4a05481153b375ff745948616a90286808b5314c71c6"}, 0x68) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001900)=ANY=[], 0x208e280) (async) openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000640)={0xffffffffffffffff, 0x7, 0x200, 0x5}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000002b92e48fb23bb42d75fbd3c4077d819b93cb3f951fc983ed520a02eb6858faf5bec138367778f06b4a17f576de19f900658d119311", @ANYRES16=r6, @ANYBLOB="00042abd7000fbdbdf25630000000c0099000000820027000000"], 0x20}, 0x1, 0x0, 0x0, 0x20080001}, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000821}, 0x4044040) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r8, r7, 0x0, 0x10000a006) (async) openat$cgroup_ro(r7, &(0x7f0000000600)='memory.stat\x00', 0x0, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x20, r10, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008841) 17:57:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:57:41 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1410.643792][ T5118] Bluetooth: hci12: command 0x0406 tx timeout 17:57:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x800000000000000, 0x0, 0x3000137) 17:57:41 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1412.594926][ T5118] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1412.608412][ T5118] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1412.624436][ T5118] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1412.633118][ T5118] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1412.642452][ T5118] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1412.655247][ T5118] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1412.991478][ T5118] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1413.007857][ T5118] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1413.016310][ T5118] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1413.030548][ T5118] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1413.039130][ T5118] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1413.047713][ T5118] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1413.289626][T12057] chnl_net:caif_netlink_parms(): no params data found [ 1413.584587][T12057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.591998][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.599577][T12057] bridge_slave_0: entered allmulticast mode [ 1413.616275][T12057] bridge_slave_0: entered promiscuous mode [ 1413.647062][T12057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.654576][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.662485][T12057] bridge_slave_1: entered allmulticast mode [ 1413.672896][T12057] bridge_slave_1: entered promiscuous mode [ 1413.878040][T12057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.915121][T12057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.007931][T12057] team0: Port device team_slave_0 added [ 1414.030095][T12057] team0: Port device team_slave_1 added [ 1414.036813][T12059] chnl_net:caif_netlink_parms(): no params data found [ 1414.178445][T12057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.185666][T12057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.213814][T12057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.268201][T12057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.275436][T12057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.301457][T12057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.436395][T12059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.444758][T12059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.452147][T12059] bridge_slave_0: entered allmulticast mode [ 1414.469793][T12059] bridge_slave_0: entered promiscuous mode [ 1414.506258][T12059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.513968][T12059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.521354][T12059] bridge_slave_1: entered allmulticast mode [ 1414.531626][T12059] bridge_slave_1: entered promiscuous mode [ 1414.588699][T12057] hsr_slave_0: entered promiscuous mode [ 1414.598201][T12057] hsr_slave_1: entered promiscuous mode [ 1414.606015][T12057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1414.615428][T12057] Cannot create hsr debugfs directory [ 1414.666752][T12059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.716297][T12059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.725862][ T5118] Bluetooth: hci14: command 0x0409 tx timeout [ 1414.886408][T12059] team0: Port device team_slave_0 added [ 1414.900238][T12059] team0: Port device team_slave_1 added [ 1415.015383][T12059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.022419][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1415.068526][T12059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.093637][T12059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.100686][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1415.127387][ T5118] Bluetooth: hci15: command 0x0409 tx timeout [ 1415.139795][T12059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1415.327576][T12059] hsr_slave_0: entered promiscuous mode [ 1415.336462][T12059] hsr_slave_1: entered promiscuous mode [ 1415.344067][T12059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1415.351689][T12059] Cannot create hsr debugfs directory [ 1415.555776][T12057] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.808333][T12057] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.967009][T12057] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.117814][T12057] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.508798][T12059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.557154][T12057] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1416.592171][T12057] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1416.630111][T12057] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1416.745110][T12059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.785122][T12057] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1416.803790][ T5118] Bluetooth: hci14: command 0x041b tx timeout [ 1416.880496][T12059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.044475][T12059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.204443][ T5118] Bluetooth: hci15: command 0x041b tx timeout [ 1417.380960][T12057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.471774][T12057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.544234][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.551523][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.562488][T12059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1417.579086][T12059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1417.607161][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.614513][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.643550][T12059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1417.670044][T12059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1418.056136][T12059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.168540][T12059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.216634][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.224151][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.264867][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.272145][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.355919][T12057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.884190][ T5118] Bluetooth: hci14: command 0x040f tx timeout [ 1418.995312][T12059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.026873][T12057] veth0_vlan: entered promiscuous mode [ 1419.081410][T12057] veth1_vlan: entered promiscuous mode [ 1419.195997][T12059] veth0_vlan: entered promiscuous mode [ 1419.212607][T12057] veth0_macvtap: entered promiscuous mode [ 1419.228676][T12057] veth1_macvtap: entered promiscuous mode [ 1419.275374][T12059] veth1_vlan: entered promiscuous mode [ 1419.284599][ T5118] Bluetooth: hci15: command 0x040f tx timeout [ 1419.356751][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.369226][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.386192][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.397092][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.407013][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.421285][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.431496][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.442306][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.458942][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.470587][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.489208][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.500126][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.510814][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.521627][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.535218][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.546957][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.557005][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.567801][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.585855][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.596764][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.607099][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.617830][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.628038][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.638675][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.648892][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.659661][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.670366][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.690466][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.704174][T12057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.761319][T12059] veth0_macvtap: entered promiscuous mode [ 1419.777394][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.801122][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.812105][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.823344][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.833650][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.845564][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.859186][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.869763][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.879669][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.897519][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.908571][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.919699][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.933958][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.945388][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.955988][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.969132][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.979613][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.998778][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.009712][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.020433][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.034013][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.045413][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.055560][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.066144][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.079896][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.100509][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.111047][T12057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.122103][T12057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.138374][T12057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.176523][T12059] veth1_macvtap: entered promiscuous mode [ 1420.224203][T12057] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.234508][T12057] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.243264][T12057] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.256579][T12057] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.282408][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.302741][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.317563][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.329892][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.340250][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.351441][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.362000][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.373078][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.383597][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.403739][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.415051][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.426911][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.438926][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.449992][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.460677][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.471852][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.482922][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.495963][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.515557][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.527856][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.538324][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.553421][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.563304][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.589107][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.607130][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.617955][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.627949][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.639287][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.649334][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.660350][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.675299][T12059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.688961][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.706066][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.716956][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.731352][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.741588][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.752537][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.763068][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.774106][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.784416][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.795351][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.815638][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.826345][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.836586][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.847654][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.857960][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.868751][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.879168][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.891538][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.901554][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.920288][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.930745][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.941366][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.951705][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.962262][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.964132][ T5118] Bluetooth: hci14: command 0x0419 tx timeout [ 1420.973545][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.989162][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.999699][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.018921][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.029318][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.040342][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.058367][T12059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.100959][T12059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.110597][T12059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.128521][T12059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.138745][T12059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.364489][ T5118] Bluetooth: hci15: command 0x0419 tx timeout [ 1421.446579][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.464041][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.562016][ T9737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.581743][ T9737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.638948][ T921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.651811][ T921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.697632][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.708252][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.411530][ T9741] hsr_slave_0: left promiscuous mode [ 1423.423524][ T9741] hsr_slave_1: left promiscuous mode [ 1423.430487][ T9741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.438313][ T9741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.452276][ T9741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.461943][ T9741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.480907][ T9741] bridge_slave_1: left allmulticast mode [ 1423.486924][ T9741] bridge_slave_1: left promiscuous mode [ 1423.492943][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.508795][ T9741] bridge_slave_0: left allmulticast mode [ 1423.514598][ T9741] bridge_slave_0: left promiscuous mode [ 1423.520508][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.546166][ T9741] veth1_macvtap: left promiscuous mode [ 1423.551941][ T9741] veth0_macvtap: left promiscuous mode [ 1423.560255][ T9741] veth1_vlan: left promiscuous mode [ 1423.568107][ T9741] veth0_vlan: left promiscuous mode [ 1424.179866][ T9741] team0 (unregistering): Port device team_slave_1 removed [ 1424.237518][ T9741] team0 (unregistering): Port device team_slave_0 removed [ 1424.271397][ T9741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.307022][ T9741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.535606][ T9741] bond0 (unregistering): Released all slaves [ 1429.078300][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.084822][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 17:58:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 17:58:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x810000000000000, 0x0, 0x3000137) 17:58:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xa00000000000000, 0x0, 0x3000137) 17:58:47 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:58:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:58:47 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x8, 0x0, 0xee, 0x22}, 0x9c) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) read(r3, &(0x7f00000000c0)=""/90, 0x5a) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1477.203795][T12062] Bluetooth: hci13: command 0x0406 tx timeout 17:58:48 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:58:48 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x8, 0x0, 0xee, 0x22}, 0x9c) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) read(r3, &(0x7f00000000c0)=""/90, 0x5a) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:58:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:58:48 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x8, 0x0, 0xee, 0x22}, 0x9c) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) read(r3, &(0x7f00000000c0)=""/90, 0x5a) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17:58:48 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:58:48 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FREEZING\x00', 0x9) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) [ 1479.318237][T12062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1479.328937][T12062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1479.337702][T12062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1479.347163][T12062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1479.359098][T12062] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1479.368464][T12062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1479.772769][T12128] chnl_net:caif_netlink_parms(): no params data found [ 1479.965063][T12128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.972411][T12128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.980900][T12128] bridge_slave_0: entered allmulticast mode [ 1480.002639][T12128] bridge_slave_0: entered promiscuous mode [ 1480.015003][T12128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.030573][T12128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.042801][T12128] bridge_slave_1: entered allmulticast mode [ 1480.051844][T12128] bridge_slave_1: entered promiscuous mode [ 1480.132418][T12128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.148007][T12128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.228607][T12128] team0: Port device team_slave_0 added [ 1480.244941][T12128] team0: Port device team_slave_1 added [ 1480.336129][T12128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.343192][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1480.372984][T12128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.391500][T12128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.399312][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1480.431319][T12128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.548050][T12128] hsr_slave_0: entered promiscuous mode [ 1480.555682][T12128] hsr_slave_1: entered promiscuous mode [ 1480.562882][T12128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1480.575751][T12128] Cannot create hsr debugfs directory [ 1480.877686][T12128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.095207][T12128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.265440][T12128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.397701][T12128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.443925][ T5118] Bluetooth: hci3: command 0x0409 tx timeout [ 1481.727842][T12128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1481.754151][T12128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1481.773643][T12128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1481.790519][T12128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1482.011819][T12128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.065618][T12128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.085801][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.093080][T10653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.118714][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.126024][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.236349][T12128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1482.538449][T12128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.642250][T12128] veth0_vlan: entered promiscuous mode [ 1482.682458][T12128] veth1_vlan: entered promiscuous mode [ 1482.778278][T12128] veth0_macvtap: entered promiscuous mode [ 1482.801300][T12128] veth1_macvtap: entered promiscuous mode [ 1482.848652][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.872373][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.886105][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.897184][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.909246][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.920634][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.931880][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.942952][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.954114][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.980173][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.990714][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.001685][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.012123][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.023177][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.034048][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.045979][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.056365][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.079976][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.092268][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.104979][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.116748][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.129859][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.139840][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.152179][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.162113][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.178370][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.188375][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.201155][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.211436][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.223208][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.239319][T12128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1483.265544][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.301391][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.312352][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.326535][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.337133][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.347765][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.357978][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.378678][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.389149][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.401858][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.412215][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.424987][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.435597][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.447796][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.460030][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.471155][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.485652][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.496643][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.508872][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.520537][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.531460][ T5118] Bluetooth: hci3: command 0x041b tx timeout [ 1483.543090][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.554311][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.566383][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.581318][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.591735][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.602660][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.623061][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.636051][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.648213][T12128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.659196][T12128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.672938][T12128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1483.699816][T12128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.708735][T12128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.717736][T12128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.726595][T12128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.935823][ T9742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.959488][ T9742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.024610][ T9742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.032513][ T9742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.604575][ T5118] Bluetooth: hci3: command 0x040f tx timeout [ 1487.684309][ T5118] Bluetooth: hci3: command 0x0419 tx timeout [ 1490.491933][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.498740][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1538.643902][ T5103] Bluetooth: hci15: command 0x0406 tx timeout [ 1538.651529][ T5103] Bluetooth: hci14: command 0x0406 tx timeout 17:59:49 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 17:59:49 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:59:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:59:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1100000000000000, 0x0, 0x3000137) 17:59:49 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) (async, rerun: 32) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (rerun: 32) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FREEZING\x00', 0x9) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) 17:59:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 17:59:50 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:59:50 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FREEZING\x00', 0x9) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FREEZING\x00', 0x9) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) 17:59:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x50f79f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1f, @mcast1, 0x100}], 0x1c) mmap(&(0x7f0000398000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x29ad4000) sendto$inet(r4, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r3, r2, 0x0, 0x100000002) 17:59:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x50f79f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1f, @mcast1, 0x100}], 0x1c) mmap(&(0x7f0000398000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x29ad4000) sendto$inet(r4, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r3, r2, 0x0, 0x100000002) 17:59:50 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 17:59:50 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) [ 1539.874156][ T29] audit: type=1804 audit(1704477590.706:211): pid=12166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3366408147/syzkaller.FeqjQY/73/cgroup.controllers" dev="sda1" ino=1990 res=1 errno=0 [ 1539.982659][ T29] audit: type=1804 audit(1704477590.806:212): pid=12171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2483571212/syzkaller.OYpclR/30/cgroup.controllers" dev="sda1" ino=1999 res=1 errno=0 [ 1541.418505][T12147] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1541.429416][T12147] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1541.447616][T12147] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1541.458741][T12147] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1541.469096][T12147] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1541.477858][T12147] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1541.908606][T12179] chnl_net:caif_netlink_parms(): no params data found [ 1542.100574][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.108134][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.116109][T12179] bridge_slave_0: entered allmulticast mode [ 1542.125088][T12179] bridge_slave_0: entered promiscuous mode [ 1542.138338][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.145878][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.161361][T12179] bridge_slave_1: entered allmulticast mode [ 1542.171674][T12179] bridge_slave_1: entered promiscuous mode [ 1542.238588][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.268654][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.340618][T12179] team0: Port device team_slave_0 added [ 1542.367894][T12179] team0: Port device team_slave_1 added [ 1542.427725][T12179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.434934][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.470736][T12179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.487941][T12179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.495537][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.522206][T12179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.640551][T12179] hsr_slave_0: entered promiscuous mode [ 1542.649980][T12179] hsr_slave_1: entered promiscuous mode [ 1542.658808][T12179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1542.677137][T12179] Cannot create hsr debugfs directory [ 1542.995703][T12179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.179132][T12179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.348382][T12179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.523698][T12147] Bluetooth: hci16: command 0x0409 tx timeout [ 1543.537070][T12179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.859093][T12179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1543.879282][T12179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1543.903748][T12179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1543.918695][T12179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1544.145375][T12179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.188956][T12179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.221362][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.228717][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.264745][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.271978][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.689005][T12179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.793107][T12179] veth0_vlan: entered promiscuous mode [ 1544.831535][T12179] veth1_vlan: entered promiscuous mode [ 1544.903691][T12179] veth0_macvtap: entered promiscuous mode [ 1544.928032][T12179] veth1_macvtap: entered promiscuous mode [ 1544.967404][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.982101][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.993004][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.009590][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.024014][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.035091][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.045517][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.056412][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.066798][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.077785][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.088928][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.099993][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.110988][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.145973][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.159329][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.170234][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.181024][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.191943][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.202397][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.215102][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.229563][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.242224][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.256479][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.267486][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.277837][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.290132][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.300523][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.311651][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.321940][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.337123][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.349377][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.360354][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.377000][T12179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.406178][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.417446][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.436061][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.448607][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.460764][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.471730][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.483964][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.496820][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.507091][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.518019][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.534993][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.546009][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.556287][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.571655][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.589709][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.604001][T12147] Bluetooth: hci16: command 0x041b tx timeout [ 1545.611152][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.624551][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.640808][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.651144][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.662058][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.672337][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.685341][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.697346][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.710289][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.720586][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.731506][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.749565][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.760566][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.771138][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.782036][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.792390][T12179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.806691][T12179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.838431][T12179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.866324][T12179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.875231][T12179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.887335][T12179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.896561][T12179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.125911][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.161993][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.238497][ T9737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.258196][ T9737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.684694][T12147] Bluetooth: hci16: command 0x040f tx timeout [ 1549.764228][T12147] Bluetooth: hci16: command 0x0419 tx timeout [ 1551.966137][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.972553][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 18:00:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1640000000000000, 0x0, 0x3000137) 18:00:52 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) 18:00:52 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 18:00:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 18:00:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1100000000000000, 0x0, 0x3000137) 18:00:52 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 18:00:52 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) 18:00:52 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:00:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 1) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:00:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:00:53 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1602.498320][T12220] FAULT_INJECTION: forcing a failure. [ 1602.498320][T12220] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.512229][T12220] CPU: 0 PID: 12220 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1602.522778][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1602.532897][T12220] Call Trace: [ 1602.536235][T12220] [ 1602.539221][T12220] dump_stack_lvl+0x125/0x1b0 [ 1602.543979][T12220] should_fail_ex+0x496/0x5b0 [ 1602.548739][T12220] should_failslab+0x9/0x20 [ 1602.553336][T12220] __kmem_cache_alloc_node+0x6b/0x310 [ 1602.558813][T12220] ? kernfs_fop_write_iter+0x225/0x500 [ 1602.564359][T12220] ? kernfs_fop_write_iter+0x225/0x500 [ 1602.569912][T12220] __kmalloc+0x49/0x90 [ 1602.574074][T12220] kernfs_fop_write_iter+0x225/0x500 [ 1602.579464][T12220] vfs_write+0x64f/0xdf0 [ 1602.583823][T12220] ? kernel_write+0x6c0/0x6c0 [ 1602.588609][T12220] ksys_write+0x12f/0x250 [ 1602.593016][T12220] ? __ia32_sys_read+0xb0/0xb0 [ 1602.597885][T12220] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1602.603973][T12220] do_syscall_64+0x40/0x110 [ 1602.608564][T12220] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1602.614553][T12220] RIP: 0033:0x7f566f87cce9 [ 1602.619026][T12220] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1602.638709][T12220] RSP: 002b:00007f56705260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:00:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1602.647291][T12220] RAX: ffffffffffffffda RBX: 00007f566f99bf80 RCX: 00007f566f87cce9 [ 1602.655328][T12220] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000006 [ 1602.663543][T12220] RBP: 00007f5670526120 R08: 0000000000000000 R09: 0000000000000000 [ 1602.671585][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.679623][T12220] R13: 000000000000000b R14: 00007f566f99bf80 R15: 00007ffce52a32b8 [ 1602.687691][T12220] 18:00:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1f00000000000000, 0x0, 0x3000137) 18:00:53 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xb4, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0xb4}}, 0x4000004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom(r4, &(0x7f0000000280)=""/126, 0x7e, 0x40000000, &(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x80) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6041}, 0x4000) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x50000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x3, 0x0, 0x3000005, 0x7000000}}], 0xe100, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'netpci0\x00'}) 18:00:53 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:00:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 2) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:00:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1603.135304][T12242] FAULT_INJECTION: forcing a failure. [ 1603.135304][T12242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.166317][T12242] CPU: 0 PID: 12242 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1603.176848][T12242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1603.186960][T12242] Call Trace: [ 1603.190319][T12242] [ 1603.193305][T12242] dump_stack_lvl+0x125/0x1b0 [ 1603.198064][T12242] should_fail_ex+0x496/0x5b0 [ 1603.202829][T12242] _copy_from_iter+0x246/0x10f0 [ 1603.207794][T12242] ? page_copy_sane+0x2c0/0x2c0 [ 1603.212752][T12242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1603.218783][T12242] ? __virt_addr_valid+0x5e/0x2d0 [ 1603.223894][T12242] ? __phys_addr_symbol+0x30/0x70 [ 1603.229083][T12242] ? __check_object_size+0x323/0x730 [ 1603.234456][T12242] kernfs_fop_write_iter+0x1a3/0x500 [ 1603.239836][T12242] vfs_write+0x64f/0xdf0 [ 1603.244161][T12242] ? kernel_write+0x6c0/0x6c0 [ 1603.248946][T12242] ksys_write+0x12f/0x250 [ 1603.253342][T12242] ? __ia32_sys_read+0xb0/0xb0 [ 1603.258181][T12242] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1603.264244][T12242] do_syscall_64+0x40/0x110 [ 1603.268825][T12242] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1603.274800][T12242] RIP: 0033:0x7f566f87cce9 [ 1603.279281][T12242] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1603.298939][T12242] RSP: 002b:00007f56705260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1603.307455][T12242] RAX: ffffffffffffffda RBX: 00007f566f99bf80 RCX: 00007f566f87cce9 [ 1603.315471][T12242] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000006 [ 1603.323476][T12242] RBP: 00007f5670526120 R08: 0000000000000000 R09: 0000000000000000 [ 1603.331489][T12242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.339488][T12242] R13: 000000000000000b R14: 00007f566f99bf80 R15: 00007ffce52a32b8 [ 1603.347506][T12242] [ 1604.034108][T11310] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1604.045583][T11310] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1604.054709][T11310] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1604.063746][T11310] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1604.073199][T11310] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 1604.081529][T11310] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1604.535980][T12246] chnl_net:caif_netlink_parms(): no params data found [ 1604.710414][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.726743][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.735306][T12246] bridge_slave_0: entered allmulticast mode [ 1604.746185][T12246] bridge_slave_0: entered promiscuous mode [ 1604.757787][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.765770][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.773216][T12246] bridge_slave_1: entered allmulticast mode [ 1604.782668][T12246] bridge_slave_1: entered promiscuous mode [ 1604.871570][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.887910][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.974193][T12246] team0: Port device team_slave_0 added [ 1604.986844][T12246] team0: Port device team_slave_1 added [ 1605.067240][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.074545][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.101143][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.119218][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.138627][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.165603][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.203582][T11310] Bluetooth: hci3: command 0x0406 tx timeout [ 1605.283000][T12246] hsr_slave_0: entered promiscuous mode [ 1605.292062][T12246] hsr_slave_1: entered promiscuous mode [ 1605.303398][T12246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1605.311193][T12246] Cannot create hsr debugfs directory [ 1605.668508][T12246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.821591][T12246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.966801][T12246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.119266][T12246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.163884][T12147] Bluetooth: hci17: command 0x0409 tx timeout [ 1606.390917][T12246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1606.409365][T12246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1606.425725][T12246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1606.441101][T12246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1606.677804][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.718761][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.745987][T12197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.753349][T12197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.788065][T12197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.795406][T12197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.256748][T12246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.372142][T12246] veth0_vlan: entered promiscuous mode [ 1607.408311][T12246] veth1_vlan: entered promiscuous mode [ 1607.496334][T12246] veth0_macvtap: entered promiscuous mode [ 1607.517013][T12246] veth1_macvtap: entered promiscuous mode [ 1607.566932][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.577551][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.593378][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.617526][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.629914][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.640451][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.650473][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.661133][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.674836][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.698704][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.708773][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.719880][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.730001][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.742470][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.752424][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.763109][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.778063][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.794920][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.805596][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.816292][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.826415][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.837428][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.850787][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.862366][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.872963][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.885506][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.901711][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.914780][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.926637][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.937631][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.948569][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.961726][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.972542][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.983096][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.010925][T12246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.046544][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.058201][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.068802][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.079915][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.090731][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.112925][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.123542][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.134559][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.145024][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.157822][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.169082][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.180522][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.191458][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.210691][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.222667][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.233759][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.252062][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.261721][T12147] Bluetooth: hci17: command 0x041b tx timeout [ 1608.266061][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.282494][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.293767][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.314884][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.326826][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.336924][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.349295][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.359406][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.369953][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.381532][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.392211][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.406711][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.419435][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.429443][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.439965][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.450108][T12246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.462394][T12246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.475726][T12246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.515574][T12246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.526675][T12246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.536138][T12246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.545602][T12246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.795691][ T9740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.826706][ T9740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.897211][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.905461][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:00:59 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xb4, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0xb4}}, 0x4000004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom(r4, &(0x7f0000000280)=""/126, 0x7e, 0x40000000, &(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x80) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6041}, 0x4000) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x50000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x3, 0x0, 0x3000005, 0x7000000}}], 0xe100, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'netpci0\x00'}) 18:00:59 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) read(r0, &(0x7f0000000180)=""/8, 0x8) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:00:59 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 18:00:59 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xb4, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0xb4}}, 0x4000004) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept$alg(r2, 0x0, 0x0) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom(r4, &(0x7f0000000280)=""/126, 0x7e, 0x40000000, &(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x80) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6041}, 0x4000) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x50000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x3, 0x0, 0x3000005, 0x7000000}}], 0xe100, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'netpci0\x00'}) (rerun: 32) 18:00:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x3a31010000000000, 0x0, 0x3000137) 18:00:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 3) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1609.234512][T12271] FAULT_INJECTION: forcing a failure. [ 1609.234512][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.262077][T12271] CPU: 1 PID: 12271 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1609.272603][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 18:01:00 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xb4, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0xb4}}, 0x4000004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept$alg(r2, 0x0, 0x0) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom(r4, &(0x7f0000000280)=""/126, 0x7e, 0x40000000, &(0x7f0000000300)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x80) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6041}, 0x4000) (async) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x50000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x3, 0x0, 0x3000005, 0x7000000}}], 0xe100, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'netpci0\x00'}) (rerun: 64) [ 1609.282731][T12271] Call Trace: [ 1609.286079][T12271] [ 1609.289069][T12271] dump_stack_lvl+0x125/0x1b0 [ 1609.293828][T12271] should_fail_ex+0x496/0x5b0 [ 1609.298595][T12271] should_failslab+0x9/0x20 [ 1609.303203][T12271] __kmem_cache_alloc_node+0x6b/0x310 [ 1609.308674][T12271] ? find_css_set+0x74e/0x1ba0 [ 1609.313538][T12271] kmalloc_trace+0x25/0x60 [ 1609.318071][T12271] find_css_set+0x74e/0x1ba0 [ 1609.322775][T12271] ? put_css_set_locked+0x10c0/0x10c0 [ 1609.328225][T12271] ? print_usage_bug.part.0+0x550/0x550 [ 1609.333894][T12271] ? cgroup_attach_task+0x483/0x8d0 [ 1609.339199][T12271] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1609.345026][T12271] cgroup_attach_task+0x48f/0x8d0 [ 1609.350146][T12271] ? cgroup_migrate+0x150/0x150 [ 1609.355118][T12271] ? __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1609.361726][T12271] __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1609.368153][T12271] ? cgroup_pidlist_show+0x60/0x60 [ 1609.373370][T12271] ? lock_sync+0x190/0x190 [ 1609.377890][T12271] cgroup_file_write+0x209/0x7c0 [ 1609.383011][T12271] ? cgroup1_procs_write+0x30/0x30 [ 1609.388231][T12271] ? kill_css+0x3b0/0x3b0 [ 1609.392664][T12271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1609.398673][T12271] kernfs_fop_write_iter+0x33f/0x500 [ 1609.404045][T12271] ? kill_css+0x3b0/0x3b0 [ 1609.408465][T12271] vfs_write+0x64f/0xdf0 [ 1609.412823][T12271] ? kernel_write+0x6c0/0x6c0 [ 1609.417623][T12271] ksys_write+0x12f/0x250 [ 1609.422034][T12271] ? __ia32_sys_read+0xb0/0xb0 [ 1609.426972][T12271] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1609.433051][T12271] do_syscall_64+0x40/0x110 [ 1609.437636][T12271] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1609.443616][T12271] RIP: 0033:0x7f566f87cce9 [ 1609.448099][T12271] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1609.467778][T12271] RSP: 002b:00007f56705260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1609.476273][T12271] RAX: ffffffffffffffda RBX: 00007f566f99bf80 RCX: 00007f566f87cce9 [ 1609.484310][T12271] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000006 [ 1609.492435][T12271] RBP: 00007f5670526120 R08: 0000000000000000 R09: 0000000000000000 [ 1609.500474][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.508518][T12271] R13: 000000000000000b R14: 00007f566f99bf80 R15: 00007ffce52a32b8 [ 1609.516687][T12271] 18:01:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 4) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:00 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) read(r0, &(0x7f0000000180)=""/8, 0x8) (async) read(r0, &(0x7f0000000180)=""/8, 0x8) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 18:01:00 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 18:01:00 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1609.824833][T12283] FAULT_INJECTION: forcing a failure. [ 1609.824833][T12283] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.912473][T12283] CPU: 0 PID: 12283 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1609.922995][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1609.933118][T12283] Call Trace: [ 1609.936463][T12283] [ 1609.939441][T12283] dump_stack_lvl+0x125/0x1b0 [ 1609.944199][T12283] should_fail_ex+0x496/0x5b0 [ 1609.948958][T12283] should_failslab+0x9/0x20 [ 1609.953557][T12283] __kmem_cache_alloc_node+0x6b/0x310 [ 1609.959012][T12283] ? allocate_cgrp_cset_links+0xc6/0x230 [ 1609.964729][T12283] kmalloc_trace+0x25/0x60 [ 1609.969323][T12283] allocate_cgrp_cset_links+0xc6/0x230 [ 1609.974866][T12283] find_css_set+0x775/0x1ba0 [ 1609.979555][T12283] ? put_css_set_locked+0x10c0/0x10c0 [ 1609.985018][T12283] ? print_usage_bug.part.0+0x550/0x550 [ 1609.990691][T12283] ? cgroup_attach_task+0x483/0x8d0 [ 1609.995989][T12283] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1610.001787][T12283] cgroup_attach_task+0x48f/0x8d0 [ 1610.006886][T12283] ? cgroup_migrate+0x150/0x150 [ 1610.011816][T12283] ? __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1610.018470][T12283] __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1610.024871][T12283] ? cgroup_pidlist_show+0x60/0x60 [ 1610.030035][T12283] ? lock_sync+0x190/0x190 [ 1610.034504][T12283] cgroup_file_write+0x209/0x7c0 [ 1610.039487][T12283] ? cgroup1_procs_write+0x30/0x30 [ 1610.044671][T12283] ? kill_css+0x3b0/0x3b0 [ 1610.049041][T12283] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1610.055080][T12283] kernfs_fop_write_iter+0x33f/0x500 [ 1610.060541][T12283] ? kill_css+0x3b0/0x3b0 [ 1610.064914][T12283] vfs_write+0x64f/0xdf0 [ 1610.069201][T12283] ? kernel_write+0x6c0/0x6c0 [ 1610.073946][T12283] ksys_write+0x12f/0x250 [ 1610.078313][T12283] ? __ia32_sys_read+0xb0/0xb0 [ 1610.083112][T12283] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1610.089145][T12283] do_syscall_64+0x40/0x110 [ 1610.093683][T12283] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1610.099631][T12283] RIP: 0033:0x7f566f87cce9 [ 1610.104075][T12283] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1610.123734][T12283] RSP: 002b:00007f56705260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1610.132358][T12283] RAX: ffffffffffffffda RBX: 00007f566f99bf80 RCX: 00007f566f87cce9 [ 1610.140367][T12283] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000006 [ 1610.148367][T12283] RBP: 00007f5670526120 R08: 0000000000000000 R09: 0000000000000000 [ 1610.156372][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1610.164639][T12283] R13: 000000000000000b R14: 00007f566f99bf80 R15: 00007ffce52a32b8 [ 1610.172675][T12283] [ 1610.323688][T12147] Bluetooth: hci17: command 0x040f tx timeout 18:01:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x4002000000000000, 0x0, 0x3000137) 18:01:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) read(r0, &(0x7f0000000180)=""/8, 0x8) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) read(r0, &(0x7f0000000180)=""/8, 0x8) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) 18:01:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 5) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x3a31010000000000, 0x0, 0x3000137) 18:01:01 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) 18:01:01 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r2}]}, 0x28}], 0x1}, 0x0) [ 1610.679573][T12302] FAULT_INJECTION: forcing a failure. [ 1610.679573][T12302] name failslab, interval 1, probability 0, space 0, times 0 18:01:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1610.782220][T12302] CPU: 1 PID: 12302 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1610.792762][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1610.802879][T12302] Call Trace: [ 1610.806213][T12302] [ 1610.809213][T12302] dump_stack_lvl+0x125/0x1b0 [ 1610.814028][T12302] should_fail_ex+0x496/0x5b0 [ 1610.818808][T12302] should_failslab+0x9/0x20 [ 1610.823391][T12302] __kmem_cache_alloc_node+0x6b/0x310 [ 1610.828941][T12302] ? allocate_cgrp_cset_links+0xc6/0x230 [ 1610.834672][T12302] kmalloc_trace+0x25/0x60 [ 1610.839197][T12302] allocate_cgrp_cset_links+0xc6/0x230 [ 1610.844745][T12302] find_css_set+0x775/0x1ba0 [ 1610.849517][T12302] ? put_css_set_locked+0x10c0/0x10c0 [ 1610.854976][T12302] ? print_usage_bug.part.0+0x550/0x550 [ 1610.860678][T12302] ? cgroup_attach_task+0x483/0x8d0 [ 1610.865973][T12302] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1610.871890][T12302] cgroup_attach_task+0x48f/0x8d0 [ 1610.877104][T12302] ? cgroup_migrate+0x150/0x150 [ 1610.882165][T12302] ? __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1610.888888][T12302] __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1610.895495][T12302] ? cgroup_pidlist_show+0x60/0x60 [ 1610.900716][T12302] ? lock_sync+0x190/0x190 [ 1610.905272][T12302] cgroup_file_write+0x209/0x7c0 [ 1610.910298][T12302] ? cgroup1_procs_write+0x30/0x30 [ 1610.915563][T12302] ? kill_css+0x3b0/0x3b0 [ 1610.919966][T12302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1610.925969][T12302] kernfs_fop_write_iter+0x33f/0x500 [ 1610.931355][T12302] ? kill_css+0x3b0/0x3b0 [ 1610.935798][T12302] vfs_write+0x64f/0xdf0 [ 1610.940166][T12302] ? kernel_write+0x6c0/0x6c0 [ 1610.944971][T12302] ksys_write+0x12f/0x250 [ 1610.949399][T12302] ? __ia32_sys_read+0xb0/0xb0 [ 1610.954256][T12302] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1610.960357][T12302] do_syscall_64+0x40/0x110 [ 1610.964932][T12302] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1610.970912][T12302] RIP: 0033:0x7f566f87cce9 [ 1610.975392][T12302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1610.995068][T12302] RSP: 002b:00007f56705050c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1611.003562][T12302] RAX: ffffffffffffffda RBX: 00007f566f99c050 RCX: 00007f566f87cce9 [ 1611.011605][T12302] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000005 [ 1611.019733][T12302] RBP: 00007f5670505120 R08: 0000000000000000 R09: 0000000000000000 [ 1611.027768][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.035812][T12302] R13: 000000000000006e R14: 00007f566f99c050 R15: 00007ffce52a32b8 [ 1611.043885][T12302] 18:01:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@delqdisc={0x21c, 0x25, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x9}, {0xf, 0x3}, {0xe, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1f}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x81}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7fff}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1f, 0x2, 0x0, 0x1, 0xfffff211, 0xd85b, 0x2}}, {0x8, 0x2, [0x8000, 0x5]}}, {{0x1c, 0x1, {0x0, 0x1, 0x1, 0x8, 0x0, 0xcf, 0xfffffff7, 0x6}}, {0x10, 0x2, [0x81, 0x3ff, 0x7f, 0x101, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x1, 0x0, 0x1000, 0x80000000, 0x1, 0x7ff, 0xb09}}, {0x4}}, {{0x1c, 0x1, {0xed, 0x1, 0x7, 0xffffff34, 0x2, 0x6, 0x20, 0x7}}, {0x12, 0x2, [0x0, 0x1ff, 0x8, 0x200, 0x0, 0x1f, 0xc427]}}, {{0x1c, 0x1, {0x6, 0x5, 0x8, 0x8, 0x2, 0x3, 0x4, 0x7}}, {0x12, 0x2, [0x4, 0x81, 0x0, 0x2c, 0x6, 0x5, 0x0]}}, {{0x1c, 0x1, {0xc, 0x80, 0xff, 0xfffffffc, 0x0, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x3, 0xda7, 0x6, 0x2, 0x0, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x3, 0x4, 0x871, 0x941, 0x1, 0x41f4, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0xa49]}}, {{0x1c, 0x1, {0x4, 0x4, 0x400, 0x4, 0x2, 0x100, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x0, 0x3ff, 0x9dfd, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x7, 0x41}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000002000010000000000000000000a001400000000000000000008000e000000000008001000f277000014000200000000000000000000000000000000011400030064f66d72703000"/84], 0x54}}, 0x0) 18:01:02 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8080000000000000, 0x0, 0x3000137) 18:01:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@delqdisc={0x21c, 0x25, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x9}, {0xf, 0x3}, {0xe, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1f}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x81}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7fff}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1f, 0x2, 0x0, 0x1, 0xfffff211, 0xd85b, 0x2}}, {0x8, 0x2, [0x8000, 0x5]}}, {{0x1c, 0x1, {0x0, 0x1, 0x1, 0x8, 0x0, 0xcf, 0xfffffff7, 0x6}}, {0x10, 0x2, [0x81, 0x3ff, 0x7f, 0x101, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x1, 0x0, 0x1000, 0x80000000, 0x1, 0x7ff, 0xb09}}, {0x4}}, {{0x1c, 0x1, {0xed, 0x1, 0x7, 0xffffff34, 0x2, 0x6, 0x20, 0x7}}, {0x12, 0x2, [0x0, 0x1ff, 0x8, 0x200, 0x0, 0x1f, 0xc427]}}, {{0x1c, 0x1, {0x6, 0x5, 0x8, 0x8, 0x2, 0x3, 0x4, 0x7}}, {0x12, 0x2, [0x4, 0x81, 0x0, 0x2c, 0x6, 0x5, 0x0]}}, {{0x1c, 0x1, {0xc, 0x80, 0xff, 0xfffffffc, 0x0, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x3, 0xda7, 0x6, 0x2, 0x0, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x3, 0x4, 0x871, 0x941, 0x1, 0x41f4, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0xa49]}}, {{0x1c, 0x1, {0x4, 0x4, 0x400, 0x4, 0x2, 0x100, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x0, 0x3ff, 0x9dfd, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x7, 0x41}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@delqdisc={0x21c, 0x25, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x9}, {0xf, 0x3}, {0xe, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1f}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x81}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7fff}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1f, 0x2, 0x0, 0x1, 0xfffff211, 0xd85b, 0x2}}, {0x8, 0x2, [0x8000, 0x5]}}, {{0x1c, 0x1, {0x0, 0x1, 0x1, 0x8, 0x0, 0xcf, 0xfffffff7, 0x6}}, {0x10, 0x2, [0x81, 0x3ff, 0x7f, 0x101, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x1, 0x0, 0x1000, 0x80000000, 0x1, 0x7ff, 0xb09}}, {0x4}}, {{0x1c, 0x1, {0xed, 0x1, 0x7, 0xffffff34, 0x2, 0x6, 0x20, 0x7}}, {0x12, 0x2, [0x0, 0x1ff, 0x8, 0x200, 0x0, 0x1f, 0xc427]}}, {{0x1c, 0x1, {0x6, 0x5, 0x8, 0x8, 0x2, 0x3, 0x4, 0x7}}, {0x12, 0x2, [0x4, 0x81, 0x0, 0x2c, 0x6, 0x5, 0x0]}}, {{0x1c, 0x1, {0xc, 0x80, 0xff, 0xfffffffc, 0x0, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x3, 0xda7, 0x6, 0x2, 0x0, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x3, 0x4, 0x871, 0x941, 0x1, 0x41f4, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0xa49]}}, {{0x1c, 0x1, {0x4, 0x4, 0x400, 0x4, 0x2, 0x100, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x0, 0x3ff, 0x9dfd, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x7, 0x41}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000002000010000000000000000000a001400000000000000000008000e000000000008001000f277000014000200000000000000000000000000000000011400030064f66d72703000"/84], 0x54}}, 0x0) 18:01:02 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 6) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:02 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffc, 0x200002, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 18:01:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@delqdisc={0x21c, 0x25, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x9}, {0xf, 0x3}, {0xe, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1f}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x81}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7fff}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1f, 0x2, 0x0, 0x1, 0xfffff211, 0xd85b, 0x2}}, {0x8, 0x2, [0x8000, 0x5]}}, {{0x1c, 0x1, {0x0, 0x1, 0x1, 0x8, 0x0, 0xcf, 0xfffffff7, 0x6}}, {0x10, 0x2, [0x81, 0x3ff, 0x7f, 0x101, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x1, 0x0, 0x1000, 0x80000000, 0x1, 0x7ff, 0xb09}}, {0x4}}, {{0x1c, 0x1, {0xed, 0x1, 0x7, 0xffffff34, 0x2, 0x6, 0x20, 0x7}}, {0x12, 0x2, [0x0, 0x1ff, 0x8, 0x200, 0x0, 0x1f, 0xc427]}}, {{0x1c, 0x1, {0x6, 0x5, 0x8, 0x8, 0x2, 0x3, 0x4, 0x7}}, {0x12, 0x2, [0x4, 0x81, 0x0, 0x2c, 0x6, 0x5, 0x0]}}, {{0x1c, 0x1, {0xc, 0x80, 0xff, 0xfffffffc, 0x0, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x3, 0xda7, 0x6, 0x2, 0x0, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x3, 0x4, 0x871, 0x941, 0x1, 0x41f4, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0xa49]}}, {{0x1c, 0x1, {0x4, 0x4, 0x400, 0x4, 0x2, 0x100, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x0, 0x3ff, 0x9dfd, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x7, 0x41}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000002000010000000000000000000a001400000000000000000008000e000000000008001000f277000014000200000000000000000000000000000000011400030064f66d72703000"/84], 0x54}}, 0x0) [ 1611.911211][T12336] FAULT_INJECTION: forcing a failure. [ 1611.911211][T12336] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.963615][T12336] CPU: 0 PID: 12336 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1611.974144][T12336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1611.984299][T12336] Call Trace: [ 1611.987632][T12336] [ 1611.990650][T12336] dump_stack_lvl+0x125/0x1b0 [ 1611.995398][T12336] should_fail_ex+0x496/0x5b0 [ 1612.000200][T12336] should_failslab+0x9/0x20 [ 1612.004823][T12336] __kmem_cache_alloc_node+0x6b/0x310 [ 1612.010281][T12336] ? allocate_cgrp_cset_links+0xc6/0x230 [ 1612.016008][T12336] kmalloc_trace+0x25/0x60 [ 1612.020525][T12336] allocate_cgrp_cset_links+0xc6/0x230 [ 1612.026067][T12336] find_css_set+0x775/0x1ba0 [ 1612.030836][T12336] ? put_css_set_locked+0x10c0/0x10c0 [ 1612.036289][T12336] ? print_usage_bug.part.0+0x550/0x550 [ 1612.041958][T12336] ? cgroup_attach_task+0x483/0x8d0 [ 1612.047259][T12336] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1612.053082][T12336] cgroup_attach_task+0x48f/0x8d0 [ 1612.058196][T12336] ? cgroup_migrate+0x150/0x150 [ 1612.063170][T12336] ? __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1612.069760][T12336] __cgroup1_procs_write.constprop.0+0x2fb/0x420 [ 1612.076157][T12336] ? cgroup_pidlist_show+0x60/0x60 [ 1612.081330][T12336] ? lock_sync+0x190/0x190 [ 1612.085810][T12336] cgroup_file_write+0x209/0x7c0 [ 1612.090788][T12336] ? cgroup1_procs_write+0x30/0x30 [ 1612.095956][T12336] ? kill_css+0x3b0/0x3b0 [ 1612.100317][T12336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1612.106263][T12336] kernfs_fop_write_iter+0x33f/0x500 [ 1612.111587][T12336] ? kill_css+0x3b0/0x3b0 [ 1612.115956][T12336] vfs_write+0x64f/0xdf0 [ 1612.120239][T12336] ? kernel_write+0x6c0/0x6c0 [ 1612.125000][T12336] ksys_write+0x12f/0x250 [ 1612.129380][T12336] ? __ia32_sys_read+0xb0/0xb0 [ 1612.134186][T12336] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1612.140214][T12336] do_syscall_64+0x40/0x110 [ 1612.144752][T12336] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1612.150688][T12336] RIP: 0033:0x7f566f87cce9 [ 1612.155130][T12336] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1612.174792][T12336] RSP: 002b:00007f56705260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1612.183257][T12336] RAX: ffffffffffffffda RBX: 00007f566f99bf80 RCX: 00007f566f87cce9 [ 1612.191311][T12336] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 0000000000000006 [ 1612.199324][T12336] RBP: 00007f5670526120 R08: 0000000000000000 R09: 0000000000000000 [ 1612.207322][T12336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.215314][T12336] R13: 000000000000000b R14: 00007f566f99bf80 R15: 00007ffce52a32b8 [ 1612.223342][T12336] 18:01:03 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (fail_nth: 7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1612.405668][T12147] Bluetooth: hci17: command 0x0419 tx timeout 18:01:03 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffc, 0x200002, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) openat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffc, 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) 18:01:03 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1612.622644][T12352] FAULT_INJECTION: forcing a failure. [ 1612.622644][T12352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1612.659159][T12352] CPU: 0 PID: 12352 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1612.669733][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1612.679835][T12352] Call Trace: [ 1612.683168][T12352] [ 1612.686154][T12352] dump_stack_lvl+0x125/0x1b0 [ 1612.690905][T12352] should_fail_ex+0x496/0x5b0 [ 1612.695665][T12352] _copy_to_user+0x30/0xb0 [ 1612.700205][T12352] simple_read_from_buffer+0xd0/0x160 [ 1612.705659][T12352] proc_fail_nth_read+0x1b0/0x280 [ 1612.710764][T12352] ? proc_fault_inject_read+0x280/0x280 [ 1612.716413][T12352] ? security_file_permission+0xdc/0x100 [ 1612.722139][T12352] ? proc_fault_inject_read+0x280/0x280 [ 1612.727768][T12352] vfs_read+0x1ce/0x8f0 [ 1612.731999][T12352] ? __fdget_pos+0xe7/0x170 [ 1612.736578][T12352] ? exit_signals+0x960/0x960 [ 1612.741333][T12352] ? kernel_read+0x1b0/0x1b0 [ 1612.745980][T12352] ? mutex_trylock+0x130/0x130 [ 1612.750893][T12352] ? __fget_files+0x1c6/0x340 [ 1612.755666][T12352] ksys_read+0x12f/0x250 [ 1612.759986][T12352] ? vfs_write+0xdf0/0xdf0 [ 1612.764511][T12352] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1612.770581][T12352] do_syscall_64+0x40/0x110 [ 1612.775158][T12352] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1612.781136][T12352] RIP: 0033:0x7f566f87b98c [ 1612.785607][T12352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1612.805283][T12352] RSP: 002b:00007f56705260c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1612.813763][T12352] RAX: ffffffffffffffda RBX: 00007f566f99bf80 RCX: 00007f566f87b98c 18:01:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8dffffff00000000, 0x0, 0x3000137) 18:01:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8080000000000000, 0x0, 0x3000137) [ 1612.821834][T12352] RDX: 000000000000000f RSI: 00007f5670526130 RDI: 0000000000000007 [ 1612.829879][T12352] RBP: 00007f5670526120 R08: 0000000000000000 R09: 0000000000000000 [ 1612.837950][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.846070][T12352] R13: 000000000000000b R14: 00007f566f99bf80 R15: 00007ffce52a32b8 [ 1612.854122][T12352] 18:01:03 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffc, 0x200002, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 18:01:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:03 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:04 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) [ 1613.408003][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.414609][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 18:01:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xf000) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:04 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async, rerun: 32) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) (rerun: 32) 18:01:04 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) 18:01:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfdef) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xb804000000000000, 0x0, 0x3000137) 18:01:04 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) (async) 18:01:04 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) 18:01:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8080000000000000, 0x0, 0x3000137) 18:01:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffff000) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:05 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) 18:01:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffffdef) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:05 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x7f}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) setsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000280)="b6fe627c88c961a043ebb5e2066652880f194058d882c8dc9f605205eeb7ca8c7f106bc6f1937b7ee18e216cbf2323a6b26673e4b37b69d0d5807d43ca1fa465c9a36a0439ab85cd61d32f53a343db9641b7fe61845762f44c49ac43fd4a531d284cb36e82e99e606e32211e65a6f5a1db28ca67b63075250c5ef48050857b788430bd6ade160f07dfcc9d48207b031036cf884becc69f83ae59df3f2add2ccbe1e8ff1b0f0c460b3933d0145d45f5483fb74a5d1407f2e37b4a10e5991a8391e9a8ad7864036cb80cfd85512a8df8e7aed76e913108417798cf5588f71c83716189ec9044", 0xe5) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:05 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:05 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffffffffffff000) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0xffffffff00000000, 0x0, 0x3000137) 18:01:06 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x7f}], 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) setsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000280)="b6fe627c88c961a043ebb5e2066652880f194058d882c8dc9f605205eeb7ca8c7f106bc6f1937b7ee18e216cbf2323a6b26673e4b37b69d0d5807d43ca1fa465c9a36a0439ab85cd61d32f53a343db9641b7fe61845762f44c49ac43fd4a531d284cb36e82e99e606e32211e65a6f5a1db28ca67b63075250c5ef48050857b788430bd6ade160f07dfcc9d48207b031036cf884becc69f83ae59df3f2add2ccbe1e8ff1b0f0c460b3933d0145d45f5483fb74a5d1407f2e37b4a10e5991a8391e9a8ad7864036cb80cfd85512a8df8e7aed76e913108417798cf5588f71c83716189ec9044", 0xe5) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffffffffffffdef) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x8080000000000000, 0x0, 0x3000137) 18:01:06 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:06 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000002340)={0x0, 0x1, 0x1a67c0, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, r3, "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", "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"}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000002c0)='FROZEN\x00', 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_script(r7, &(0x7f0000002400)=ANY=[@ANYBLOB="2321202e2f66696c6530207d206d656d6f72792e6576656e7473002020252d5b5e02207461736b73000aa8be55042ce6751559f018a7866b9aa743471c8977d2f43f369f3057bd6309deb2153083b052c03eaf452db98dc68215205d62f8b0aed6cea6e6920f34c2a95dac62b236e39c3d3d30bcb354217bfc3f2c1fa3f2c039ee0059bb9f1a2e766c867506b33f2b95f0a8622e066e6b64d0dd347c2cb822508ecd67d72d98d1a9685f411942c829decbe9295ae14a315343dfcde3d596e8958b05e9c1664b79e7be624c94967dcfc39b41fc6bcb8c5a1b5cc7a253d86b4897ad26fdcc944c1ba1a89e291e0e040cb79dbe406ddeb3ac7cf60ab1bce82be45042156f67c5e7a90f910ed48f599d5adc9f58241339717d1ad961f3e6b93fa3cacd4c9a7c7f84e24867e408733bf04e0d2acd4b468c6f207f745255cfee12b0629d2fb1f5ea3f2952b29466943dacaca8cb2321b0efe06ecb42ce5756daa630c3b2af1e9f41bb4d9a1445541d41ba12f3bc0a9f7963cec33ae6daff0debf3d992526d42e4f12a71dbdf27969e28d46e645fd8c851f463d480c1564aa50903b499b04504e34b486aa2e0ae1041faa710f4392eb9688928d52a9ae8e2"], 0x2a) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000023c0)={r0}, 0x8) openat$cgroup_procs(r9, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r10 = gettid() ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000200)={r9, 0xffffffffffffffe1, 0x7fffffff, 0x5}) sendmsg$nl_route_sched(r11, &(0x7f00000027c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000002600)=@deltaction={0x148, 0x31, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff4d}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd6f9}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc48}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x800) write$cgroup_pid(r1, &(0x7f0000002300)=r10, 0x12) write$cgroup_freezer_state(r5, &(0x7f0000002380)='FROZEN\x00', 0x7) openat$cgroup_ro(r8, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='FROZEN\x00', 0x7) 18:01:06 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x7f}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) setsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000280)="b6fe627c88c961a043ebb5e2066652880f194058d882c8dc9f605205eeb7ca8c7f106bc6f1937b7ee18e216cbf2323a6b26673e4b37b69d0d5807d43ca1fa465c9a36a0439ab85cd61d32f53a343db9641b7fe61845762f44c49ac43fd4a531d284cb36e82e99e606e32211e65a6f5a1db28ca67b63075250c5ef48050857b788430bd6ade160f07dfcc9d48207b031036cf884becc69f83ae59df3f2add2ccbe1e8ff1b0f0c460b3933d0145d45f5483fb74a5d1407f2e37b4a10e5991a8391e9a8ad7864036cb80cfd85512a8df8e7aed76e913108417798cf5588f71c83716189ec9044", 0xe5) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x7f}], 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) (async) setsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000280)="b6fe627c88c961a043ebb5e2066652880f194058d882c8dc9f605205eeb7ca8c7f106bc6f1937b7ee18e216cbf2323a6b26673e4b37b69d0d5807d43ca1fa465c9a36a0439ab85cd61d32f53a343db9641b7fe61845762f44c49ac43fd4a531d284cb36e82e99e606e32211e65a6f5a1db28ca67b63075250c5ef48050857b788430bd6ade160f07dfcc9d48207b031036cf884becc69f83ae59df3f2add2ccbe1e8ff1b0f0c460b3933d0145d45f5483fb74a5d1407f2e37b4a10e5991a8391e9a8ad7864036cb80cfd85512a8df8e7aed76e913108417798cf5588f71c83716189ec9044", 0xe5) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) 18:01:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0xfffffffffffffdef) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:01:06 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:06 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/229, 0xe5, 0x1, &(0x7f0000000140)=""/122, 0x7a}, &(0x7f0000000240)=0x40) 18:01:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:07 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:07 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:01:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1620.467846][ T9740] hsr_slave_0: left promiscuous mode [ 1620.478691][ T9740] hsr_slave_1: left promiscuous mode [ 1620.496460][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.504634][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.515850][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.523774][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.533713][ T9740] bridge_slave_1: left allmulticast mode [ 1620.539448][ T9740] bridge_slave_1: left promiscuous mode [ 1620.547353][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.559087][ T9740] bridge_slave_0: left allmulticast mode [ 1620.566152][ T9740] bridge_slave_0: left promiscuous mode [ 1620.572065][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.608329][ T9740] veth1_macvtap: left promiscuous mode [ 1620.614314][ T9740] veth0_macvtap: left promiscuous mode [ 1620.620145][ T9740] veth1_vlan: left promiscuous mode [ 1620.626067][ T9740] veth0_vlan: left promiscuous mode [ 1621.220941][ T9740] team0 (unregistering): Port device team_slave_1 removed [ 1621.251435][ T9740] team0 (unregistering): Port device team_slave_0 removed [ 1621.278037][ T9740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.320117][ T9740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.555632][ T9740] bond0 (unregistering): Released all slaves [ 1626.233921][ T9740] hsr_slave_0: left promiscuous mode [ 1626.246991][ T9740] hsr_slave_1: left promiscuous mode [ 1626.257199][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.264770][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.275925][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.285617][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.296745][ T9740] bridge_slave_1: left allmulticast mode [ 1626.302447][ T9740] bridge_slave_1: left promiscuous mode [ 1626.309051][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.323779][ T9740] bridge_slave_0: left allmulticast mode [ 1626.329627][ T9740] bridge_slave_0: left promiscuous mode [ 1626.342027][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.364197][ T9740] hsr_slave_0: left promiscuous mode [ 1626.371031][ T9740] hsr_slave_1: left promiscuous mode [ 1626.378683][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.386704][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.402214][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.412384][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.426777][ T9740] bridge_slave_1: left allmulticast mode [ 1626.432521][ T9740] bridge_slave_1: left promiscuous mode [ 1626.439101][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.455123][ T9740] bridge_slave_0: left allmulticast mode [ 1626.460929][ T9740] bridge_slave_0: left promiscuous mode [ 1626.467518][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.490090][ T9740] hsr_slave_0: left promiscuous mode [ 1626.496930][ T9740] hsr_slave_1: left promiscuous mode [ 1626.506771][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.514443][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.529467][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.537088][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.548237][ T9740] bridge_slave_1: left allmulticast mode [ 1626.559596][ T9740] bridge_slave_1: left promiscuous mode [ 1626.566570][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.578003][ T9740] bridge_slave_0: left allmulticast mode [ 1626.583892][ T9740] bridge_slave_0: left promiscuous mode [ 1626.589788][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.611838][ T9740] hsr_slave_0: left promiscuous mode [ 1626.621110][ T9740] hsr_slave_1: left promiscuous mode [ 1626.635652][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.643198][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.655711][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.663222][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.674182][ T9740] bridge_slave_1: left allmulticast mode [ 1626.679901][ T9740] bridge_slave_1: left promiscuous mode [ 1626.685934][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.697446][ T9740] bridge_slave_0: left allmulticast mode [ 1626.703176][ T9740] bridge_slave_0: left promiscuous mode [ 1626.709299][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.745370][ T9740] hsr_slave_0: left promiscuous mode [ 1626.752321][ T9740] hsr_slave_1: left promiscuous mode [ 1626.760060][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.768381][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.780009][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.791447][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.802356][ T9740] bridge_slave_1: left allmulticast mode [ 1626.809836][ T9740] bridge_slave_1: left promiscuous mode [ 1626.816422][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.830582][ T9740] bridge_slave_0: left allmulticast mode [ 1626.842336][ T9740] bridge_slave_0: left promiscuous mode [ 1626.848725][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.892382][ T9740] veth1_macvtap: left promiscuous mode [ 1626.898469][ T9740] veth0_macvtap: left promiscuous mode [ 1626.904773][ T9740] veth1_vlan: left promiscuous mode [ 1626.910331][ T9740] veth0_vlan: left promiscuous mode [ 1626.922466][ T9740] veth1_macvtap: left promiscuous mode [ 1626.928551][ T9740] veth0_macvtap: left promiscuous mode [ 1626.941392][ T9740] veth1_vlan: left promiscuous mode [ 1626.947736][ T9740] veth0_vlan: left promiscuous mode [ 1626.957464][ T9740] veth1_macvtap: left promiscuous mode [ 1626.963110][ T9740] veth0_macvtap: left promiscuous mode [ 1626.969641][ T9740] veth1_vlan: left promiscuous mode [ 1626.975934][ T9740] veth0_vlan: left promiscuous mode [ 1626.985130][ T9740] veth1_macvtap: left promiscuous mode [ 1626.990808][ T9740] veth0_macvtap: left promiscuous mode [ 1626.997860][ T9740] veth1_vlan: left promiscuous mode [ 1627.004159][ T9740] veth0_vlan: left promiscuous mode [ 1627.014826][ T9740] veth1_macvtap: left promiscuous mode [ 1627.020465][ T9740] veth0_macvtap: left promiscuous mode [ 1627.026721][ T9740] veth1_vlan: left promiscuous mode [ 1627.032205][ T9740] veth0_vlan: left promiscuous mode [ 1628.874367][ T9740] team0 (unregistering): Port device team_slave_1 removed [ 1628.933879][ T9740] team0 (unregistering): Port device team_slave_0 removed [ 1628.997575][ T9740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.050937][ T9740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.527078][ T9740] bond0 (unregistering): Released all slaves [ 1629.883943][ T9740] team0 (unregistering): Port device team_slave_1 removed [ 1629.915588][ T9740] team0 (unregistering): Port device team_slave_0 removed [ 1629.941596][ T9740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.969462][ T9740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1630.230426][ T9740] bond0 (unregistering): Released all slaves [ 1630.593912][ T9740] team0 (unregistering): Port device team_slave_1 removed [ 1630.635816][ T9740] team0 (unregistering): Port device team_slave_0 removed [ 1630.678831][ T9740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.706684][ T9740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1630.921834][ T9740] bond0 (unregistering): Released all slaves [ 1631.310086][ T9740] team0 (unregistering): Port device team_slave_1 removed [ 1631.352368][ T9740] team0 (unregistering): Port device team_slave_0 removed [ 1631.378190][ T9740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.406403][ T9740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.617179][ T9740] bond0 (unregistering): Released all slaves [ 1632.020191][ T9740] team0 (unregistering): Port device team_slave_1 removed [ 1632.072818][ T9740] team0 (unregistering): Port device team_slave_0 removed [ 1632.099612][ T9740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1632.130359][ T9740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1632.351607][ T9740] bond0 (unregistering): Released all slaves 18:02:01 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:02:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/229, 0xe5, 0x1, &(0x7f0000000140)=""/122, 0x7a}, &(0x7f0000000240)=0x40) 18:02:01 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:02:01 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:02:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000002340)={0x0, 0x1, 0x1a67c0, 0x7}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, r3, "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", "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"}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000002c0)='FROZEN\x00', 0x7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_script(r7, &(0x7f0000002400)=ANY=[@ANYBLOB="2321202e2f66696c6530207d206d656d6f72792e6576656e7473002020252d5b5e02207461736b73000aa8be55042ce6751559f018a7866b9aa743471c8977d2f43f369f3057bd6309deb2153083b052c03eaf452db98dc68215205d62f8b0aed6cea6e6920f34c2a95dac62b236e39c3d3d30bcb354217bfc3f2c1fa3f2c039ee0059bb9f1a2e766c867506b33f2b95f0a8622e066e6b64d0dd347c2cb822508ecd67d72d98d1a9685f411942c829decbe9295ae14a315343dfcde3d596e8958b05e9c1664b79e7be624c94967dcfc39b41fc6bcb8c5a1b5cc7a253d86b4897ad26fdcc944c1ba1a89e291e0e040cb79dbe406ddeb3ac7cf60ab1bce82be45042156f67c5e7a90f910ed48f599d5adc9f58241339717d1ad961f3e6b93fa3cacd4c9a7c7f84e24867e408733bf04e0d2acd4b468c6f207f745255cfee12b0629d2fb1f5ea3f2952b29466943dacaca8cb2321b0efe06ecb42ce5756daa630c3b2af1e9f41bb4d9a1445541d41ba12f3bc0a9f7963cec33ae6daff0debf3d992526d42e4f12a71dbdf27969e28d46e645fd8c851f463d480c1564aa50903b499b04504e34b486aa2e0ae1041faa710f4392eb9688928d52a9ae8e2"], 0x2a) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000023c0)={r0}, 0x8) openat$cgroup_procs(r9, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) (async) r10 = gettid() ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000200)={r9, 0xffffffffffffffe1, 0x7fffffff, 0x5}) sendmsg$nl_route_sched(r11, &(0x7f00000027c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000002600)=@deltaction={0x148, 0x31, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff4d}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd6f9}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc48}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) write$cgroup_pid(r1, &(0x7f0000002300)=r10, 0x12) (async, rerun: 64) write$cgroup_freezer_state(r5, &(0x7f0000002380)='FROZEN\x00', 0x7) (async, rerun: 64) openat$cgroup_ro(r8, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r5, &(0x7f0000000080)='FROZEN\x00', 0x7) 18:02:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:02:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:02:01 executing program 2: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) 18:02:01 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:02:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) 18:02:02 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x3e000000, 0x800}, 0x20) 18:02:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/229, 0xe5, 0x1, &(0x7f0000000140)=""/122, 0x7a}, &(0x7f0000000240)=0x40) [ 1671.341106][T12488] team_slave_0: entered promiscuous mode [ 1671.347383][T12488] team_slave_1: entered promiscuous mode [ 1671.419564][T12490] team0: entered promiscuous mode [ 1671.463026][T12486] team0: left promiscuous mode 18:02:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @private=0xa010102}}) [ 1671.587186][T12486] team_slave_0: left promiscuous mode [ 1671.594264][T12486] team_slave_1: left promiscuous mode 18:02:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) 18:02:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:02:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto$inet6(r1, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r2, &(0x7f0000000180)="b3e5a7a27489f4b1e2bef13024ed84f903324c3fdcdb35b46b3d0f53a0c26af955dcabfba17755c350239613f7dd611bb936b01c33c08d340cebe3f02184e9a0c9a229cdf6aaae", 0x47, 0x8001, &(0x7f0000000280)={0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000580)="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", 0x1000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r1, r3, &(0x7f0000000140)=0x1000, 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0xee4f, 0xffff, 0x781}, &(0x7f0000000300)=0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) [ 1671.875512][T12500] team_slave_0: entered promiscuous mode [ 1671.881332][T12500] team_slave_1: entered promiscuous mode [ 1671.910724][T12500] team0: entered promiscuous mode [ 1671.929974][T12498] team0: left promiscuous mode [ 1671.942512][T12498] team_slave_0: left promiscuous mode [ 1671.948134][T12498] team_slave_1: left promiscuous mode [ 1673.074528][T11310] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1673.085392][T11310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1673.094260][T11310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1673.102966][T11310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1673.112048][T11310] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1673.125783][T11310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1673.313989][T12147] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1673.329088][ T5118] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1673.337754][ T5118] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1673.347673][ T5118] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1673.375687][ T5118] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1673.389783][ T5118] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1673.678879][T12506] chnl_net:caif_netlink_parms(): no params data found [ 1673.950887][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.958689][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.966618][T12506] bridge_slave_0: entered allmulticast mode [ 1673.977387][T12506] bridge_slave_0: entered promiscuous mode [ 1674.079057][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.086785][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.101377][T12506] bridge_slave_1: entered allmulticast mode [ 1674.110490][T12506] bridge_slave_1: entered promiscuous mode [ 1674.231999][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.243499][T12509] chnl_net:caif_netlink_parms(): no params data found [ 1674.270045][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.447746][T12506] team0: Port device team_slave_0 added [ 1674.510990][T12506] team0: Port device team_slave_1 added [ 1674.549078][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.565320][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.572760][T12509] bridge_slave_0: entered allmulticast mode [ 1674.582378][T12509] bridge_slave_0: entered promiscuous mode [ 1674.618182][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.625701][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.633061][T12509] bridge_slave_1: entered allmulticast mode [ 1674.641788][T12509] bridge_slave_1: entered promiscuous mode [ 1674.691813][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.700932][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.728014][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.809931][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.814927][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.818421][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.823240][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.855747][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.890959][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.916897][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.074956][T12509] team0: Port device team_slave_0 added [ 1675.090990][T12506] hsr_slave_0: entered promiscuous mode [ 1675.100511][T12506] hsr_slave_1: entered promiscuous mode [ 1675.107657][T12506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1675.117500][T12506] Cannot create hsr debugfs directory [ 1675.129309][T12509] team0: Port device team_slave_1 added [ 1675.204438][T11310] Bluetooth: hci3: command 0x0409 tx timeout [ 1675.242732][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.252251][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.286337][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.301678][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.309169][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.335509][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.444702][T11310] Bluetooth: hci9: command 0x0409 tx timeout [ 1675.587223][T12509] hsr_slave_0: entered promiscuous mode [ 1675.595479][T12509] hsr_slave_1: entered promiscuous mode [ 1675.602443][T12509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1675.611147][T12509] Cannot create hsr debugfs directory [ 1675.770468][T12506] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.976002][T12506] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.198212][T12506] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.354989][T12506] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.647549][T12506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1676.662051][T12506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1676.726425][T12509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.816184][T12506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1676.861190][T12506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1676.935242][T12509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.098571][T12509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.270244][T12509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.293402][T11310] Bluetooth: hci3: command 0x041b tx timeout [ 1677.525245][T11310] Bluetooth: hci9: command 0x041b tx timeout [ 1677.549668][T12506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.641651][T12506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.775972][T10806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.783351][T10806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.803608][T12509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1677.847869][T10806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.855230][T10806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.869390][T12509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1677.890398][T12509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1677.924729][T12509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1678.305060][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1678.369051][T12509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1678.393303][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.400593][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1678.430258][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.437578][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1678.568438][T12506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.036021][T12509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.218677][T12506] veth0_vlan: entered promiscuous mode [ 1679.257790][T12509] veth0_vlan: entered promiscuous mode [ 1679.286592][T12506] veth1_vlan: entered promiscuous mode [ 1679.312298][T12509] veth1_vlan: entered promiscuous mode [ 1679.374405][T11310] Bluetooth: hci3: command 0x040f tx timeout [ 1679.431708][T12506] veth0_macvtap: entered promiscuous mode [ 1679.479108][T12509] veth0_macvtap: entered promiscuous mode [ 1679.489343][T12506] veth1_macvtap: entered promiscuous mode [ 1679.513313][T12509] veth1_macvtap: entered promiscuous mode [ 1679.580815][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.592755][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.603722][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.615101][T11310] Bluetooth: hci9: command 0x040f tx timeout [ 1679.621704][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.633629][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.644773][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.654671][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.667097][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.682110][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.693537][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.703671][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.714754][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.724722][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.735553][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.749011][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.759596][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.770120][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.785505][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.797355][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.807908][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.817904][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.828433][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.838341][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.850364][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.867761][T12506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.880763][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.892620][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.904469][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.916944][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.932627][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.943627][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.953849][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.966399][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1679.976329][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1679.991522][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.001539][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.012348][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.024387][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.036862][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.046775][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.057285][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.067514][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.080363][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.097708][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.108633][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.119105][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.130007][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.142180][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.155178][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.177830][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.195650][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.209251][T12509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.252013][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.269296][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.280815][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.296226][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.306531][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.317257][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.328228][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.340615][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.350943][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.363757][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.373712][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.384220][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.403057][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.414433][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.424647][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.435328][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.445290][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.456343][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.466295][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.480524][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.498600][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.509828][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.520048][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.531659][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.545982][T12509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.561656][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.573699][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.583760][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.597535][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.608160][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.620684][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.630889][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.641694][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.652643][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.663675][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.674403][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.685167][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.705576][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.717084][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.727845][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.739312][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.749669][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.760464][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.770842][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.781808][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.792341][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.843359][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.856973][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.867857][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.878216][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1680.889915][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.910217][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.926452][T12509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.937427][T12509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.946592][T12509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.955659][T12509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.998116][T12506] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.018413][T12506] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.028842][T12506] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.037955][T12506] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.385145][T12099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.393101][T12099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.455391][T11310] Bluetooth: hci3: command 0x0419 tx timeout [ 1681.509637][ T9742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.544069][ T9742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.566463][ T9742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.606851][ T9742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.687008][T11310] Bluetooth: hci9: command 0x0419 tx timeout 18:02:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000002340)={0x0, 0x1, 0x1a67c0, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "b2e97a91f6177fa2e3d55d431b2f107b8f295ae90e8ccd9a61bcfbc68c80604539a58d2001c26377cd33e95c82d24f1ae1f5a610d65a9ae02a1e324c4024f0d82735192b96a6a6ed9ad18b45aed1b0af66b0cd444bbc13832236d66c72b9bf2ac711fb261a0a22dc753e5c37d3b4a9120bf22c4981414c6cc89e06a3b66e66b747ac30c15dd0159b1134dc394aeee2b6561e171df22449228698cc339dd7a9e35b8a4d37dbd4aade517ca2841c6af4b383310c8ab9d24c7999878d12b38f91fb0893a980bd8e0c16141c7a4b229edf5cc5c8784685eb87203716203b1e13b437208b99437245bb09ad8d6e9fd5255bb18778814e72dcb0ade6d782f0a0a04724", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, r3, "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", "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"}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000002c0)='FROZEN\x00', 0x7) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) write$binfmt_script(r7, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x2a) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000023c0)={r0}, 0x8) openat$cgroup_procs(r9, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r10 = gettid() (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000200)={r9, 0xffffffffffffffe1, 0x7fffffff, 0x5}) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f00000027c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000002600)=@deltaction={0x148, 0x31, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff4d}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd6f9}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc48}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x800) write$cgroup_pid(r1, &(0x7f0000002300)=r10, 0x12) write$cgroup_freezer_state(r5, &(0x7f0000002380)='FROZEN\x00', 0x7) openat$cgroup_ro(r8, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r5, &(0x7f0000000080)='FROZEN\x00', 0x7) [ 1681.764703][T10806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.783155][T10806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1728.083684][T11310] Bluetooth: hci17: command 0x0406 tx timeout [ 1736.250848][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.257475][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 18:03:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "aaeac980c70abb3d"}, 0x5}}]}, 0x2c}}, 0x0) 18:03:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)='^', 0x1}], 0x1}, 0x0) 18:03:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:03:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r1 = socket(0x10, 0x803, 0x0) sendto$inet6(r1, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r2, &(0x7f0000000180)="b3e5a7a27489f4b1e2bef13024ed84f903324c3fdcdb35b46b3d0f53a0c26af955dcabfba17755c350239613f7dd611bb936b01c33c08d340cebe3f02184e9a0c9a229cdf6aaae", 0x47, 0x8001, &(0x7f0000000280)={0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000580)="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", 0x1000) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r1, r3, &(0x7f0000000140)=0x1000, 0x9) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0xee4f, 0xffff, 0x781}, &(0x7f0000000300)=0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 18:03:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 18:03:07 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18:03:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) 18:03:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8}, {}]}]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) 18:03:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 18:03:08 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto$inet6(r1, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r2, &(0x7f0000000180)="b3e5a7a27489f4b1e2bef13024ed84f903324c3fdcdb35b46b3d0f53a0c26af955dcabfba17755c350239613f7dd611bb936b01c33c08d340cebe3f02184e9a0c9a229cdf6aaae", 0x47, 0x8001, &(0x7f0000000280)={0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000580)="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", 0x1000) (async) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000580)="1b6b53a42fa4a1b98aedf7b1b1e298d08f312194d191758ae819ab7e0f44d535064cb7d4bf593100b918b8c05539d9d8359802a5124a44532ee7962fd4c3430c7c0d702d79f8c911a71d95c2258b150c8e4d40f6119a7a6cb6ef110921a2760230c2b5bdcf51ffff4c56783cd46be19fe7334cdf46fe606bf923553c57e042cbe30516e8f9158f910d869fabfa60e8deddb4d231c0126a529a8aa225d964146aba63bae9c26269e7c635e62615984845f23736765227ce608fde2fa86bb3c20db82b42d3d0aa48b7f5df524833a2ac98a964a37591b8d6577b9bde0a10454258effa7fab0c8c0d71ed5f92b7ba97f52872ea69395daf2cda1a7397db0e99a273d1f29c7026ae099ea4e03446f1ff73e322ec7b53ad2f3b5efe9ff76795cae4a238ecea98427278cc9daf25d4e4f014ba4debc328b3e457fc86e0d9787e2f5eff7a7f0978bf9d5597dd702a5404ac3eba6c146e230bd3efab010b5452bb26ab0580d9fc6d5a02208b63b92f80d9b87cdf8a3b026bc6c10ad0e3300ac2360673f8c62c1c1c06688654e8907632edaa201398c2292f9f2b1f2064344e5aa96b39d01c6ceb8a9fc168d01b4cf925659fcadbad1eba64fc7775dc08510025b87248c2829b9134f3164d13f32b73338e37219d75c65d46f58b13b1e5e2aa24d1e95ae7cf48a1bdd0113268ff20eb1b92fbee24fe1278a3179aca7a71b47fcd1afb20cdcb2badc98fa315753fce595954c2488cd999f6f5117164c46c240f38fc4a760ec87150b0cd6daa48a1f1e3e1889169566d1fd47452fbbf70167e10aedfbf38ae9698f272c473a5020079799a07b7732b2f457ef51cd8a2e671007210954b165a26c0b99ec7ac8c7998f9bd063453f73a36a26dcefecf8d09a40f383fc5aeed832c410fc1c5f7c2c4e99cf05ffc10dfa990c9d12f664abbb43c7ec04bf530b79c2008f0a328693dc63dfaf674e5be77c81e5c63fc241a2e1fbf2d561ac7dba1fa9d62db89b6fb77c132808ed5909a122ff5ce7ad833538247374968cb13d00304a38bae575c841d2137848da585bac7389ca17a62d03a63ccf2a146c580a665a888b8fb3b06808291af58da94666240130501a100f15d04a4546e76c40c17d001b71b6cc69f592859a4be6d42daa8e31f736ce6e269a3c426e380fbf426cae95850edcae0005f6daccfa835cb46d5e8ab9900d14f22f04ebf7698548833a92a441dccb5a4a4257747c6a647630f082e3846a11366cd030a8b198f6053d019f63027213ab041779c2ab8cae41c2fd9683a6ef069c3a61cf448a4c2146f8f5b105a289a4291ccbbe1982567d3c4f734eb24b18f2cfb7718143ed1924cb29a91c4f7a11bc9bdff45a592d9efae2fd244bb2b36a0cea24bc0cc5af13c43c4dc0393d85b12eb8040b9a86ad8ad7b557634e39cc6cdbb4d827ba4815586de3710be8ae3a5872b1a24390b7e19ecc6ab644a8212c7431df7b37b5c8ae2af7e9307ae25c3ae973695173f71f8d0c8a204fc2eb445c715616151b30a0d3c4fe33e2b3490b2681529b6f39c0cc347ce9c8eef14efe86ac991e27bcbd9de604e7650c667a2b3d647ca60f337668d8ecff1a94a7b3603de13c1c61508eae36cd6de44ae8517f7a99751e1d4784bab7cfd70e9e5396f644ffb958cac00e8b3a9c978c3db6788ffd260622e364b1ff4c11e5d1c2602873f9fa68f5e6a6fa25399987769100d8e11e46a2ef4a70392ac388f98800592cbfa990fe9c88d8c4e4aa2112e73ddc0c7e76c456294990e84b6f6e29c40d5bbac24a22d4151cafc6ee5e998f871862dd004a4b670e4b6c041e27b4cfac4f58886a940088450345258cbac70068e8606452075a3cdd3f32a3d8f0b70850e2d19de1b91286f69e99986a8413893b6d5ff3257d1756cbee66ed54291c9f468f9f36c2d54e278f9f15769fe658d931c3455bd78a165049762fe5c88373be3dcb2077aa8b57848bbbef7dcbbfc0493fdc11a7ced1f4bda61203e628ea2d918b8ed92a58b63907abb85999e2e2c77f197b4cf92c0511adb96eb19adb75bde94bf99c3132200a4af841f850b968c16a690c55047a40c554b3384e1b668f9e1fc87723e46d5b2f7d1fbf7b18eab3c99e26999fcc2f21cd3bf2a4029b70614862d5d4d46fb35d8d60808b08d5628790b512b9ce515d5bee4bf0e0dac95944dbd5df0a671528294d1b2e7fccaff1375c7fe9555ba8028c40ac58495d9e431bb5a9fd9d242317bc044451894bf842fcb4f356112c1f2392e7da8b02392045f56bd8e09eab99bf9248dc3ef398bef2bc87001052784d711b580fd9c32fdd682ea2c38f867b76884bbbe5db713bf883f38b5ceeb8bd7ca283feb0e5ffa2ff0ac839f098f2c7560440281ac2b152b4c9edd861844ed7d440ea18c476e57915de5fdc805e1aca4b7fc8ae3fc5762c4f80d06d22f5b263c77ea69ca04a3bc861399657dc0f10cfb5425b8ce1c613c6ec5223ed825aa0d8a35f06c04d9a674435d0ba8ad82c7a3096011eeb25f6b2b28dc60d08d4a09c5d646ce953a053f54d0821847d627772d2325b47c4d43297daf002e2cc5266dfe348336ecc2c559eb8e7737a20d47042721b51a37add25311e3238742e9ce7d9a9a2a9ec122d8de2618767b11678f0b1cbfe595676fce73ac9178eef84f2f1437bbbd40b095717aaf7a6d6b77c234f68eae2d171a39d031ef8bc982f3f1babffeadd7dd27889250e2504e93b0bdc4fc0569f35c50af55f8f881d832e51656de8f5fcd31b96e3f939aea6dde68d2ef11375aab99f1198639c5c08fc27390e43a36691d58628f7b5f55be4d2f49eaafe163a0e42c63b186c29a9841109ef97b810b89e97470922f3c9f9efd68fc5790123db3159881e7bf5e3f127189839a44379635cab22cc9484b84d8e0383f654ce3cdd9f9467245bf25c45f660f2fed67edc875c83109c781c70b3318f90f284c98ac4509362ebebebd0b7a3ab3d08477e100e914d1eef6d8137cc8ea380d6f471cc395cf0275c92b896c7d41ef8662932cf03295a379267ddc204125c5ab563fd586893d5211627d6e44ae8de232765789b00ed6f221dfbe660bd4bc84dc92cb8d01302897216da1261066801ae3e51ed7bdf7a321d9f95f788afde12eef732040972a58f2be7c5e781e8a15364e69d816960e6c6019eeb5b9369b437aefab894cf19eeed817bf468e1fdefd85e517d53bb92ec82418711080f28b44c4afa789a8f76ccdebf51dbe4568ec3ddaef149b7e9081c1b625c85516ef9cf86e51897bf1dc4d3255952821aa107ce6e70b6ec0721f44c3621177e87cabd8f9cc8df0de74e91d9b80ff2529bd36d15657d235d35a22e135763a076432006886e360534c1aeb61fb02834e62033b5929bbc557780df20a63653d7b097f59ef9688c6aedac15015e611f1bd4ffa8c2070528ad1c33d0909bf2a14d7bc69fcbce62ff07a7a7fab66290e9ff433cf4a2f5bff6eaa0f65272cceeabafa4cc83f86e2918273f03b97a38c0a91a86d0c0a03ebd97e1e8857fb556b098830f60df38cf58df9836067c5c4268699ea20a444ff1d366baa6b87f9c97c1661aa0f29df6e71ad42aa14dba4ac8a19d46d6a0902cabd29db05861807c49e875a34b15930d6caa5adde26d2d83b1bb3d0ac011ad67f5f6bff36c4b25bf9a694e4108876695dac2fd1ba50231304702614973a8314ede897c50872eafed2910b132f62c85b333952ae6247100d387ab75df966a44572f2097da58be250b61327cccc99e7dc1c926920113b45e6ec51d6aafda0cddebffec6762d9ba2361846f0d972845b2ea51a807bd76970821340eee8d395c7e33770b7b4685b7b68bf3717057807af983467686eb5c6d3faf72e44b3e583b846807569f4159fe16d2c4606300f858d4e30c8962fbdf40ee039a77d6c059e3bbc806f2703500d11769cb6476657502b780183fac836386db722619e8303d0208f5f8955936182d2d248ce641333e6f406e3f9ad9dfc461e4360b75d04b9adcfe3460c190f86f5bce1449b34a1856538b61af94f178982b65149d2be532b9fa75567e29247a7f50a52dc29899824182c0e59b2983f4fb06956cbbe8629d174cab4980d296649e0d892cfee9f7fb31055413de14492f9976730820ba950ed77a964c2039dd8e1845a8aaa4e624e92794ca5d78c8bb655a284bfd1994616022fba2c84fcecb54e318b51b88a7af54d05962f6a1ad00b008247dc63c1ba65677c4309c2f02dc0e7c3b9dd5e5c6cc0bc64dda8dc093b17ced7eff6543e37c3800a11aebf825367f3fbfe18a063bc54286e9bf8a3b05fa17ecfb8779faa563c99279a5bd400f1a5d89b5f99860c1b98cfcc10a672f10bc8849c19755f525f0d8040f1f7f2bc78cc25534273ae693f8dfac7a05cd9d3059c6fedba8107ca351fc12aaa37d45065fa82107c7fcd5f346863547f16c715253d5b829ab7dcf6fdf7022e1bf7cc838e9ec568b82ef55319bbda2aa4a17f3ebb078c1cb914ad82be4b81cde7d5a1a9e17a56acf260d716efbad864e00611f2d5582905985ffbd162fa88168d398e6f5294283fa05750ddac7578cb8aed66d6ab4ffd5f3fc3cb6fe8745bf14b082273977696e2d3fdf08b8e87fe4f58609c2b103ffb2da9a62e350669608a439da6a27f69b2700d073d4418a948db38b6c83ffe2bd1637e12588e4c8feaef52d3685a65c7fdf93877aeb6afce4449bfcfc33c6fa76cab9656c7cbc0011c8812901cdbe52167660a46bb66836e920e8f21c088ec36c033347b1b2bd5452c368321cb01d756a9806357374f318d6feda3abbbce199c32efc89ee06be3373983e4de9f1ca986bf2e55e285410931ddf735fef179208ae4e3ab18e55257d268aa0eeaad984d41fc49fdfdafe22344b1b98401cef0c06afd0cfd3b33956a1b5a80b948e9a3397d4e3357748884698713b525e6eb26aea14592966c16d7067eea438023fb8f3df430d6f20eb26bef9b84b13389ea6606910dfd1355089adb7bfea8b31b633904f1c456b754f4918399e2ad301b293259d50c3730dfa0835b1bd80308bdb3b5f54c5c5db4379cd3849a95801fbced3965654a44d69c39691b174b885281bff0fc566b2689f5b3338b7d66f930ef9a58f2b3f8575c5e84f32a0378a4bc4ea413f0df31be4cd5dfd780feb4c82e26d22ba3552661f802018d8bcab40a4977abad73f13892894eabfb04b303492a56cfabe42e23d9a3b535e44e8971ceef27bb694646de26575a8125e051990906e7beb334bc2fb7ca05c8e501e56f5cf1585134ea427a7a8cca9b67fecd6fd996805d0ee19500e9ea336a857b6cb52eadf16a79c47409fdc08bbf2f92e1a98fe4ff61b797ca11e9eaa09171b671696b86d432cbe05c3d005eea6bf854b4e0deaec50d39922df65cb5b225578c0cb070e6be8b7bc78114ac8f81bc4df9d3e663f16e945e04f2ac9c2180a68547e08ce089413085affb481d41c627c7f11a66a4e8eeadd02ff88415ccb82ab99deb08aa96d7911ac2a524065e9aa39c9c72dfb15b858ea23ec142b0d1a5642c676bed069b968137f3a04f5ed9a7b9b05cd01374d90cb41b55e09dcee851196bfd213b16da4632b5cc4b942d1f5f1bb853e09800f0afafa79f077a12a27286576b0c881d2bd2e8950ade3d920e0154f97271d31207ad276bd01d3242196c367f9e385153b8369c0794a0c355cb6f7474b65963ea2d9e6b8a04a858b515a6de1602fb8bb77a9298aef994130fe69a82b4b6682bed6d55c5f235de693a3b9180d613ae359a27976947b6e1604dd13d378fde", 0x1000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r1, r3, &(0x7f0000000140)=0x1000, 0x9) (async) sendfile(r1, r3, &(0x7f0000000140)=0x1000, 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0xee4f, 0xffff, 0x781}, &(0x7f0000000300)=0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 18:03:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:03:08 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 18:03:08 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @struct]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 18:03:08 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003180)) 18:03:08 executing program 2: socketpair(0x1d, 0x0, 0x0, &(0x7f0000001480)) 18:03:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) (async) openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) 18:03:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) [ 1738.061222][T12594] can: request_module (can-proto-0) failed. [ 1739.207435][T11310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1739.223969][T11310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1739.234562][T11310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1739.243072][T11310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1739.251205][T11310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1739.260423][T11310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1739.855672][T12606] chnl_net:caif_netlink_parms(): no params data found [ 1739.979447][ T11] hsr_slave_0: left promiscuous mode [ 1739.994318][ T11] hsr_slave_1: left promiscuous mode [ 1740.001087][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1740.008800][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.019565][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.027282][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1740.041331][ T11] bridge_slave_1: left allmulticast mode [ 1740.047140][ T11] bridge_slave_1: left promiscuous mode [ 1740.052941][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.062856][ T11] bridge_slave_0: left allmulticast mode [ 1740.073272][ T11] bridge_slave_0: left promiscuous mode [ 1740.079198][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.107933][ T11] veth1_macvtap: left promiscuous mode [ 1740.115584][ T11] veth0_macvtap: left promiscuous mode [ 1740.121505][ T11] veth1_vlan: left promiscuous mode [ 1740.127818][ T11] veth0_vlan: left promiscuous mode [ 1740.684513][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1740.719439][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1740.748415][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.780429][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1741.017536][ T11] bond0 (unregistering): Released all slaves [ 1741.204040][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.211543][T12606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.226802][T12606] bridge_slave_0: entered allmulticast mode [ 1741.235748][T12606] bridge_slave_0: entered promiscuous mode [ 1741.250366][T12606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.257904][T12606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.265406][T12606] bridge_slave_1: entered allmulticast mode [ 1741.274175][T12606] bridge_slave_1: entered promiscuous mode [ 1741.347061][T12606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1741.369082][ T5118] Bluetooth: hci2: command 0x0409 tx timeout [ 1741.377940][T12606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1741.477742][T12606] team0: Port device team_slave_0 added [ 1741.496606][T12606] team0: Port device team_slave_1 added [ 1741.560254][T12606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.571295][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.599086][T12606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.627008][T12606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.634083][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.668093][T12606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.771800][T12606] hsr_slave_0: entered promiscuous mode [ 1741.779964][T12606] hsr_slave_1: entered promiscuous mode [ 1742.216473][T12606] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.496155][T12606] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.715527][T12606] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.929985][T12606] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.342121][T12606] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1743.382686][T12606] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1743.411191][T12606] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1743.439119][T12606] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1743.446526][ T5118] Bluetooth: hci2: command 0x041b tx timeout [ 1743.732147][T12606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.800222][T12606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.823202][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.831029][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.862719][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.870143][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.308554][T12606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1744.724985][T12606] veth0_vlan: entered promiscuous mode [ 1744.758714][T12606] veth1_vlan: entered promiscuous mode [ 1744.832500][T12606] veth0_macvtap: entered promiscuous mode [ 1744.850262][T12606] veth1_macvtap: entered promiscuous mode [ 1744.887141][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.904414][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.915200][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.926074][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.936403][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.947304][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.957697][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.971799][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.982217][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.994906][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.008414][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.021239][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.032101][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.043016][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.054172][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.065100][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.075499][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.086419][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.096811][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.112553][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.127139][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.138076][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.150432][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.161340][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.171560][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.184219][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.197908][T12606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1745.247852][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.258920][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.272221][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.283536][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.294169][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.305035][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.318327][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.331010][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.341294][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.354242][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.365180][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.376159][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.386527][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.397364][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.407761][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.424091][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.436218][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.448515][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.458887][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.471778][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.482086][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.493020][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.503476][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.517780][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.527879][ T5118] Bluetooth: hci2: command 0x040f tx timeout [ 1745.535095][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.547973][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.561373][T12606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1745.606614][T12606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.619959][T12606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.631860][T12606] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.641130][T12606] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.829942][T12099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.849390][T12099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.905605][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.915421][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.604468][ T5118] Bluetooth: hci2: command 0x0419 tx timeout [ 1797.694040][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.713133][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1799.771101][T12062] Bluetooth: hci9: command 0x0406 tx timeout [ 1799.781488][ T5118] Bluetooth: hci3: command 0x0406 tx timeout 18:04:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1f585}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:04:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="54c0ad2549aea8b1222ac5a4610e379d41994ba6f85a3ed8f7f4edcc46b39e6294be1f8bfd0f676fb37d", 0x2a, 0x4044000, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 18:04:11 executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) r3 = getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}]}, 0x28}], 0x1}, 0x0) 18:04:11 executing program 4: mmap(&(0x7f000009f000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x19e97000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) accept4$inet6(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x80800) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) 18:04:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 18:04:11 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 1801.103692][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1801.138596][T12641] general protection fault, probably for non-canonical address 0xdffffc0000002009: 0000 [#1] PREEMPT SMP KASAN [ 1801.150398][T12641] KASAN: probably user-memory-access in range [0x0000000000010048-0x000000000001004f] [ 1801.159987][T12641] CPU: 1 PID: 12641 Comm: syz-executor.2 Not tainted 6.7.0-rc8-syzkaller-01922-ge63c1822ac32 #0 [ 1801.170463][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1801.180740][T12641] RIP: 0010:hfsc_tcf_block+0x3f/0x70 [ 1801.186164][T12641] Code: de e8 35 09 f0 f8 48 85 db 74 2c e8 9b 0d f0 f8 e8 96 0d f0 f8 48 8d 7b 58 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 15 48 8b 43 58 5b 5d c3 e8 6f 0d f0 f8 48 8d 9d d0 [ 1801.205822][T12641] RSP: 0018:ffffc9000329f308 EFLAGS: 00010206 [ 1801.211913][T12641] RAX: dffffc0000000000 RBX: 000000000000fff2 RCX: ffffc90003bc1000 [ 1801.219911][T12641] RDX: 0000000000002009 RSI: ffffffff8897745a RDI: 000000000001004a [ 1801.227913][T12641] RBP: ffff88804e983000 R08: 0000000000000007 R09: 0000000000000000 [ 1801.235911][T12641] R10: 000000000000fff2 R11: 0000000000000001 R12: ffff8880362f0000 [ 1801.243907][T12641] R13: ffffffff8bed58c0 R14: 0000000000000002 R15: ffffffff8f19c9a0 [ 1801.251896][T12641] FS: 00007f79647456c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1801.260850][T12641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1801.267461][T12641] CR2: 000000002005b000 CR3: 00000000512dd000 CR4: 00000000003506f0 [ 1801.275455][T12641] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1801.283449][T12641] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1801.291794][T12641] Call Trace: [ 1801.295085][T12641] [ 1801.298035][T12641] ? show_regs+0x8f/0xa0 [ 1801.302316][T12641] ? die_addr+0x4f/0xd0 [ 1801.306506][T12641] ? exc_general_protection+0x155/0x230 [ 1801.312090][T12641] ? asm_exc_general_protection+0x26/0x30 [ 1801.317850][T12641] ? hfsc_tcf_block+0x2a/0x70 [ 1801.322556][T12641] ? hfsc_tcf_block+0x3f/0x70 [ 1801.327269][T12641] ? hfsc_tcf_block+0x2a/0x70 [ 1801.332058][T12641] qdisc_create+0x6b6/0x1430 [ 1801.336762][T12641] ? tc_get_qdisc+0xdf0/0xdf0 [ 1801.341505][T12641] tc_modify_qdisc+0x4d5/0x1c30 [ 1801.346396][T12641] ? qdisc_create+0x1430/0x1430 [ 1801.351286][T12641] ? bpf_lsm_capable+0x9/0x10 [ 1801.356040][T12641] ? qdisc_create+0x1430/0x1430 [ 1801.360937][T12641] rtnetlink_rcv_msg+0x3c7/0xe00 [ 1801.366080][T12641] ? rtnl_fill_vf+0x490/0x490 [ 1801.370822][T12641] netlink_rcv_skb+0x16b/0x440 [ 1801.375701][T12641] ? rtnl_fill_vf+0x490/0x490 [ 1801.380421][T12641] ? netlink_ack+0x1380/0x1380 [ 1801.385235][T12641] ? netlink_deliver_tap+0x1a0/0xd00 [ 1801.390551][T12641] netlink_unicast+0x53b/0x810 [ 1801.395344][T12641] ? netlink_attachskb+0x880/0x880 [ 1801.400476][T12641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1801.406405][T12641] ? __phys_addr_symbol+0x30/0x70 [ 1801.411467][T12641] ? __check_object_size+0x323/0x730 [ 1801.416792][T12641] netlink_sendmsg+0x8b7/0xd70 [ 1801.421583][T12641] ? netlink_unicast+0x810/0x810 [ 1801.426569][T12641] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1801.431934][T12641] ? netlink_unicast+0x810/0x810 [ 1801.436902][T12641] __sock_sendmsg+0xd5/0x180 [ 1801.441531][T12641] ____sys_sendmsg+0x2ac/0x940 [ 1801.446333][T12641] ? copy_msghdr_from_user+0x10b/0x160 [ 1801.451833][T12641] ? kernel_sendmsg+0x50/0x50 [ 1801.456548][T12641] ? hlock_class+0x4e/0x130 [ 1801.461083][T12641] ? __lock_acquire+0x14f0/0x3b20 [ 1801.466149][T12641] ___sys_sendmsg+0x135/0x1d0 [ 1801.470874][T12641] ? do_recvmmsg+0x740/0x740 [ 1801.475501][T12641] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 1801.481523][T12641] ? find_held_lock+0x2d/0x110 [ 1801.486338][T12641] ? preempt_count_sub+0x160/0x160 [ 1801.491494][T12641] ? __might_fault+0xe6/0x1a0 [ 1801.496326][T12641] __sys_sendmmsg+0x1a1/0x450 [ 1801.501065][T12641] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1801.506152][T12641] ? rcu_is_watching+0x12/0xb0 [ 1801.511005][T12641] ? folio_memcg_unlock+0x240/0x240 [ 1801.516254][T12641] __x64_sys_sendmmsg+0x9c/0x100 [ 1801.521260][T12641] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1801.527295][T12641] do_syscall_64+0x40/0x110 [ 1801.531838][T12641] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1801.537776][T12641] RIP: 0033:0x7f7963a7cce9 [ 1801.542209][T12641] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1801.561838][T12641] RSP: 002b:00007f79647450c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1801.570301][T12641] RAX: ffffffffffffffda RBX: 00007f7963b9bf80 RCX: 00007f7963a7cce9 [ 1801.578292][T12641] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000005 [ 1801.586303][T12641] RBP: 00007f7963ac947a R08: 0000000000000000 R09: 0000000000000000 [ 1801.594303][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.602293][T12641] R13: 000000000000000b R14: 00007f7963b9bf80 R15: 00007ffe776e1d18 [ 1801.610298][T12641] [ 1801.613334][T12641] Modules linked in: 18:04:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) (async) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="54c0ad2549aea8b1222ac5a4610e379d41994ba6f85a3ed8f7f4edcc46b39e6294be1f8bfd0f676fb37d", 0x2a, 0x4044000, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) [ 1801.819464][T12641] ---[ end trace 0000000000000000 ]--- [ 1801.827609][T12641] RIP: 0010:hfsc_tcf_block+0x3f/0x70 [ 1801.833490][T12641] Code: de e8 35 09 f0 f8 48 85 db 74 2c e8 9b 0d f0 f8 e8 96 0d f0 f8 48 8d 7b 58 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 15 48 8b 43 58 5b 5d c3 e8 6f 0d f0 f8 48 8d 9d d0 18:04:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 18:04:12 executing program 4: mmap(&(0x7f000009f000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x19e97000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 64) accept4$inet6(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x80800) (async) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "3773559b6a069a52", "14bc674d0508cb114c902812f84d3a8dbd50a8dbd78c17d126035316511839c8", "e51c9e6a", "22dc9c3ebcdb7df7"}, 0x38) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) (rerun: 32) [ 1801.954977][T12641] RSP: 0018:ffffc9000329f308 EFLAGS: 00010206 [ 1801.969002][T12641] RAX: dffffc0000000000 RBX: 000000000000fff2 RCX: ffffc90003bc1000 [ 1801.991870][T12641] RDX: 0000000000002009 RSI: ffffffff8897745a RDI: 000000000001004a 18:04:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) (async) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="54c0ad2549aea8b1222ac5a4610e379d41994ba6f85a3ed8f7f4edcc46b39e6294be1f8bfd0f676fb37d", 0x2a, 0x4044000, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) [ 1802.000330][T12641] RBP: ffff88804e983000 R08: 0000000000000007 R09: 0000000000000000 [ 1802.015843][T12641] R10: 000000000000fff2 R11: 0000000000000001 R12: ffff8880362f0000 18:04:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) [ 1802.049535][T12641] R13: ffffffff8bed58c0 R14: 0000000000000002 R15: ffffffff8f19c9a0 [ 1802.059966][T12641] FS: 00007f79647456c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1802.074925][T12641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1802.113311][T12641] CR2: 00007f3c7254ad58 CR3: 00000000512dd000 CR4: 00000000003506f0 [ 1802.133740][T12641] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1802.196155][T12641] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1802.220866][T12641] Kernel panic - not syncing: Fatal exception [ 1802.227346][T12641] Kernel Offset: disabled [ 1802.231771][T12641] Rebooting in 86400 seconds..