Extracting prog: 1h29m17.626045662s Minimizing prog: 38m46.288616334s Simplifying prog options: 0s Extracting C: 1m10.843268517s Simplifying C: 12m10.314546559s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket-syz_genetlink_get_family_id$nl80211-socket$nl_generic-syz_init_net_socket$ax25-ioctl$SIOCAX25CTLCON-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-getsockopt$EBT_SO_GET_INFO-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_FRAME-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bpf$PROG_LOAD-sendmsg$nl_route_sched-socket$caif_seqpacket-read-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 27, 30, 10, 10, 20, 20, 8, 7, 15, 15, 10, 9, 30, 5, 24, 6, 19, 13, 15, 7, 5, 14, 2, 3, 21, 17, 3, 5, 15] detailed listing: executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@bridge_newvlan={0x44, 0x70, 0x10, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7c}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffbbbbbb3bbbbb86dd6000000000100000fe8000000000000000000000000000aafe8000000000000000000000000000aa7301060000009d115c503977801ec47eb89f233810d80b6dc64dbcf13062cbbe8a29595e1edf4284393ed7aca34c92c5c96a7e8805e915e5b04c989b2608f37910250000000000000000000000a408f03dc4206f080f96e6ce45d7d7a3b351842427f51418895c7fd2f336"], 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000100a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e6572000000500002800800024000000084080003401d000007080004400005000f8de400000000000033000580040001007061796c97d7d1de1c92a36be7a0dfe70695f9af00e22b00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900530073797a32e593922df4c4aff88a0387fcb6e91d09c486c9646a8b2094f998f338d294cf094c4461431cdadf3f7ea228dfdf7f2a9658dcc1a03e89ec45bee27403b2d44cf5b38cd5f165497a"], 0xb8}}, 0x4008100) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000140009052abd7000fddbdf25022081cb", @ANYRES32=r10, @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.numa_stat\x00', 0x275a, 0x0) sendmsg$inet(r12, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='|', 0x1}], 0x1}, 0x10000080) setsockopt$sock_attach_bpf(r11, 0x1, 0x2a, &(0x7f0000000080)=r13, 0x4) (async) recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x6, 0x3) executing program 3: socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0xb, {{0x2, 0x4e23, @loopback}}, 0x0, 0x2, [{{0x2, 0x4e21, @local}}, {{0x2, 0x4e24, @multicast1}}]}, 0x190) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dd00f0ef58f609cd6e85a2f6090c9b70042ac26e85d7b749eaed21b1c49bc67f79b0ded2896a00baa951bcdd2e00bd6683db0ba91221426afc119c63a96c1c30753ee923150a9c41b3b831b6170a0436c49218467f1ea4ff17be1d5c4ca5965c4db11ab3c05bb4904b4f36df9ba2807398304701760ef041792d45dfaaa7c47815c4cb5bd23b8e56aa", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000050fd0b004e44000006001600020000000500120001000000060011000700000008000b00ff7f0000"], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) syz_emit_ethernet(0x165, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa33aaaaaaaaaabb88a825008100120086dd630d551501272f00fc010000000000000000000000000001fe8000000000000000000000000000aa2b02000000000000c910fc01000000000000000000000000000000000000000000060403f730fffffc01000000000000000000000000000100000000000000000000000000000000fc0200000000000000000000000000017302040100100600fe8000000000000000000000000000bb0420880b0000000001000800090086dd080088be000000011d07550401000000fffffffe080022eb0000000321084a5a02000000000000070002170a08006558000000041e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bfb0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d17e"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0xff, 0x3, 0xfffff034}, {0x80000006}]}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r9, r10, 0x2, 0x2}, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000340)={0x4, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x88) executing program 3: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000540000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4a, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4], 0x4c}}, 0x800) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r7 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000140)=0x8000, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x0, 0x44000102, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450800b00067000000119078000000000000000000004e20009c90780100000000000000799f08000000080c26a04883ad5c8c82b8af0000000000000000000000000000584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669ca012f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) socket$unix(0x1, 0x5, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000600)=""/47, &(0x7f0000000640)=0x2f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='ext4_es_lookup_extent_enter\x00', r9, 0x0, 0x3a}, 0x18) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x400, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x2844, 0x4) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x400, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x2844, 0x4) executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000cc0)={0x8, 0x2}) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) (async) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r2], 0xa) write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) (async) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xa, 0x148, 0x130, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0x0, 'bridge0\x00', 'virt_wifi0\x00', {0xff}}, 0x0, 0xf0, 0x130, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7, 0x80}}}, @common=@inet=@length={{0x28}, {0x96, 0xfffc, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xdb, 0x18, "efb1900f38c7d545d3f805850556de84092dcbf0c17eef0c556137a57607"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x2e}, 0x0, 0x1f0, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x0, 0x30, 0x0, 0x0, 0xbc5, 0x1ff, 0x0, 0x18, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x438) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000440)={0x1, 0x5}, 0x8) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000), 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r6, r4}, 0xc) r7 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001440)=""/205, 0xcd}, {&(0x7f0000000080)=""/104, 0x68}], 0x2}, 0x12020) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r7) sendmsg$alg(r7, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x1a4, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x190, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0xa8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe9}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xd4c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0xd24, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x34, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf2a43bed35520cfa}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0xbe8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xbd8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_BITWISE_XOR={0xbcc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc5, 0x1, "42cbe4393bffb0497e49ceb57760f6593779d3d30ef9e76ace84470080ac80f62f321d7ea75f9749b5d3dcf251bf909b529b09aab68ee19db6c86777e327d6f28f302359334abd49b81ddbbcdb4921f3a5982950f52d55d4a616be76e377f12b9fa8696591d0cc70b08691236e710261847c70438197d71ce65b65c7e28b2e8cb48706ed83cdbc115ca8a6d11b1b1fa8dab87146ba8a624db526585fefaee4c0653b98b39b2cf23ae44c0e2e2efc26b7cfac423acd75a5eeb45be83c48286456aa7b42cd2114f995b319721d7b657eccfb72caeec5340b1dac3a94b38a1a33ce607ada85a0794eee392cc1253503cda00045c24fba587fb1db69263286cdff837df5769f66bb4fcd1b890e3b78af88f7cb46864aaae14bb14507ee1d6dc25425264173c61bcdbb9852d6497bea1eec1b63a1dc32f99e753073e12d7d1bce9996f409a88c8a4bde8f82c302401c63d964e5253a3cda83859dc50440af686b812f1bd8d1d8e1f6580576ec033c55e3311b5c397b5b6c0cd9dc96df396a45969d5701d69ad97f71dac24d5d59462805d126db975bf69d27994ed05d84d8c620be1d536b544222cc9fdee165ad017e5ab960ac126c7c7dab32da2b875f61171bc067cdd6b44156d257785bff98c3c26150dc5a19f4e50b59d89ec74797b2c89e2ba844df62680ee431d26da665dbe5da019be00ac5607130195214afa5167d0289266355117cb8dc940a8ec60d9672377bf677a8f7c6378d725d40994afcbd1fa08c563408d8397551266b4f95cde61aef100a2887bd646b0c2fb27bce0d7074d104fc27b977a2189a50912ab82773c645303ee7861ee8307e14b4fe79c3386fcc1c30ca5e753c8bcc03e793b9b80f5ec5b9a8eeace0d2c860278abdec83e9d5d9614d7ab722bb04558eaf73d18a29d531eff30a805168600e918ab4d53d6efff86057fef08e415b70516bab195f21e71363b67dbb497077a045f59fdb90786f8558081578fe4c491be260bcabcdd3197c44e43d1935d82eef3dd3c1c67a4ff1ee0563610778b2c76a35466e19b2cde7470661b6251cf37032e6f8c606548aca9a67d778bd618c636bfe9f22ddd413a4ba58d2a58fdff15eca4966770356bfd68d2671b97618db31232576b3b6c5623bec9cff2023ce0d4593fd60ff021fe819e84f8ae5ae2836b359455c74a003103d14d149bf7774cf21ca76bab75c3ef4734ac225b486ecda38fe9a9ec33af173c1669862b7150956883c110bd5b1277a6483ebfa1bb5c7ae8d60b2fdd439d7a2d6f13d0229acb1c13035c970ddf0ec59c26b26f99b970b9c46f091548df4f2a04763dd85913bcb12c7f83556ac5a82cba3172f3b88559d3fc87c1631f8dc3174aa8ae2928371e50b2626b1c29a26f06470717e1b7f1798a6b3f13c9b2d08ef7f2117ca9dbf58a59f4b163a92ca46dfd28c059b71b5f947e9934f134ba6c784af432a477a44f43a0cbf3e9685fe84f4efd30b872e87e7e6b149d62648fe3bc6b70fb2e840669f8172b4cfea6d0e657f648de4317b628931b23e1700a4c5dbe8f9e9b5c95950451f5850056ef4028b1e06996477275a3b3050642c583dc74ecf75706ac26a1d7bbd7a4c953e33e8bff711134ebdcd6b8f4e7ea8afa761a0a3974169748e1382d91a32babd132dcce1aa4b74daee65bca14eca5b80c6f3280464b39ff2aa0d7fba803c1b5aa490cd512d616c6394a7e4077856dfcadfc910646ae1905cbf1ee7692765a0f007d41e7cc6074d0bd85d4aa62cea61b4d625932450c5956064889cd07ff8b5447cf0716a76ee78816ec88d4e9a000f9d82e6ac2a67c7e6f0bb182dff69bf89d945b3273640f4359c325df242418428a19f5330cc570e6c18f0c547bdbf14a087aae70f798ab7a515164948de5248dde9155886c13366ac9445e7a17f7da2e42510c6aa1a66b294518c4116b2d283c44ea590d2d69ec2c0f1371db6392d8e1aad93cf411e0da50396db7be03656ee9d710cf1eaad2232fdaf4ddef03a9d9412a60fa764bf8bb12ab9ff73c1aa0fcd8cff1987cecff1e85f4523addd30717094d23a7e5067f9d8fd61185e936c94b83ab5f967cabfc4eec805c64bbced5d0093f0d5b47a37dfce657b56dbd3af17b5c652eedb0ef51f9cf88b0e0109fb675c1f2a24b315807e1331bb59001fa86cc5e9479909e5630abe5255070004596061f845f32e402ff50adf152c446eca3e323ba00b3e8f58aaea7e182eb5ced74d67aada64397a2130c880ea336fdce0647305dd22d7f0fef9accf70b2d6a1ed7d9e5f187ce09e6694bf6b4705fbe0e86810f1f871b68e2fc9a9dcdbcbd03651bf91c25bd3a315c7c671ce4820be049deb776540f6920a07d61d58ebd7421b62a80abe88df1a576912b0162f2baf6822eddcac124ad5824cb97567f31350b8e1035fd3faf41c12ecd68b4cd76c7ee90d80d59dec1002cc1fdd6a42bfcc35da51e6e14d79e9e127c1d0d73c86d332db0b6c06af3b52765712784943f38fd9b4ede1d172da80babcb8419376e7f0caa258c5c3dde61e4db87a331d06dbc9d8bba0e487208dd7675b12c57722e6fdec077cb03f2cd80e0393ab1186669e3314ad9530df22437429bb565ff8f65675785bfbc1ae1c80fff85ecae7c528e573d03f5bd919b881ce944166ec712d3e3840243bee8d3be1fe290b062e7aaf275f33fb4aa7f1e937ab98edce23ff460f38be1378d5e73361ae046f6cd53389be0d687cc4b28cfe0f28050b95bf7b326e351f206daa85f4d3e165db8acfbe445c17cc2fe5c4d201bcd9f5efe8ff4dc6f4352a028b65c7ae788bc6f2b1af967d84f423b8169b9b8330bc5120dac5e0011e3bad6c31408453596bd38f4af4ce878a64c36c799f7eacbfe2b735e3c4a20343665083c4bb6dd18c614e89aea0a1d89a94cefb14c8599518646eb4b153317f1e3a5d4450581e3d19f5a1261f018d7de832bada657d4430018c893b72797601bd7a07c3c44bf631101e831fdaf2588404587e73c358e1d941341578dcdd188181e59378ac21c261518bb3f74c253ec7353e3d99859de6d22f0f3e5901100d90db6bcdfd3a7ce391f4753bf198b8a21774c4079660df7fc1979a28269f34561dbd2de949e037b76a21e6180305418eece444d60d9e0c099d71b47fcc6f4a3b064958f7b597f6b6ca72736724b992dc2992c46c7bc11c2722811ba08db8227ede9d42f9c0a48d00db7ac2c758f6f71dccd860560f143cfe0c3274c23ca1fa0afdb33acce55a554b91f7946503ef582b9516931f3286248e68c5a8743b5f39ed7845187ddb7be96646a51b318e911c95f04b5415ae2b31a59826fb1d63f7f73d13501b0dc6476b2d7f8378e49cb3bbbd6a90962ef4a496bdd0b1cadb3b606d693f75cffbd7388635c7f78eec90acfae3f44a5aa1335c34414f38b8e7c5bcc44725c52145ba49c4c9bfe132a2ea6a8776acc3ef19632d199e26061e30915191aff98cec2002570ffb00c18ff8f20d655d3b918d6d4522f9ef3938b5287fef766fcd25246912fb2b47ea9b9bbf85faeafa63657d53425d89dfed750b613548b8d8eb6250d8e450a94f88d1868b0c63ebac3ceb06bfbd72308c0f037fce5d1872298c01f881c4ba9a31d2ed984f4d0c603e67148069b2aa2c56086aec844e033d1e1fcb4196aa974dd207f38b9a25ebf6b6716c69d19477176d9602f63c0c53721db42cf8c046efaf84ff03fa8a6757c67fc87814888665c517ed623aaec76056be00d1e119f3b01268493200548adb014604d443ca0f9f921c4e2c66439de3dd79022fa79ff18b7b715b45dadf06c64a4130577ffcaa378df5cb4b6a6d1564e0883426cbb3deae244aaf45893d0b83aa15b4510b60e35a38e83d34d608d4d026e6de2124061966e45b41c5ebad75a42e3ea50b62beeeafe2fd76fadaf4c096087ad6ce337a8dbe411ad463b1fdf9eeeacf4db069e738c3d06be622f9ad2a41b9096a6ad54f9ff52a9aadf61c82d39fa75f0ed1d8051fd0c338a2866d64bf97486688bf0c3501a860f6c97cd1113ee0df66b1e437bc58c7be7054239319534869d554b4652a752278f2e759c94f3303703ef5158208d582edbcb773c6362c6162c4320344f9e2dcb1570f81c83e9d208becd594f113a0183f7a2ef2a73cb4c3c87a8b1d521e46f906d8c1695ef4d5b978cec5564456ca2231139857623dd7fe045e914b65454316650d7943300621d1214b19cb55c057756cf5fc7921c59e78ede98a834de2"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfe0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0x2}, 0x8) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="30c99a8da8a847f081001f19c5c0942edee6ce5cc725", 0x16}, {&(0x7f0000000340)="4c66dc8b9e3a4e6682751fa50b829f74afc32aed9d548aa38971aa6671c4f53163c0f66fac756ec460fe56163e36295676b1e382038658068ec4c57e0d8e4e3f6da117a49fa2e73f9a2f92cc4245a4b6ef19a646c334110eb06a08e3433d829cfed5176cfe1263a9f601139d4d85217f3f75395a630967d2c5779d2c39d5d700a5dad8e103008050429cd0ff23f910bde8a50ced7210a51f9fb8be2dee377251d8dac031e7425afbe25e", 0xaa}], 0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0500190032162160dc3715ad83110aff3aac2026d4237e88ac6ebfa1dd"], 0x21) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r2, 0xff, 0x10, 0x9c4a, 0x4}, &(0x7f0000000100)=0x18) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x5, 0x3, r2}, @val={0xc, 0x99, {0x7ffffffb, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r3 = socket(0x10, 0x2, 0x0) getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) write(r3, &(0x7f00000002c0)="fc0000001a000708ab09250009a3330081ab0700a90100001d6051930800018000000000090000000000ffff00039815fa2c1ec28656aaa79bb94b46fe000000bc000300050000006c884000d09165d52495115ef5a46bd1ad140000270400117c22ebc205214000000000008935d0730206001720d7d5bbc91a3e3280775e9ddefd5a32e280fc83ab820d9473decc9204d287f605f702e2f4aa656d0448c22b7c59159ddef2fe082038f4f8b29d3ef3d92c83170c5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd1a6b567b4d5715587e658a1ad0a4f05731d05b0310b0041f2", 0xfc) executing program 2: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r4 = socket(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, 0x0, 0x5c) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003340)=[{0xfffffffffffffffd}, {0x0}], 0x2}, 0x1}], 0x2, 0x2, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x10, 0x368, 0x2a8, 0x2a8, 0x368, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0x8}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x80) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0xb25, 0x4, 0x8, 0x0, 0xea, 0x400114, r4}) (async) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$kcm(0x29, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x400, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x2844, 0x4) executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}}], 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) shutdown(r2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000002340)="4789d3aefc1a4d03345a07337bdb", 0xe}], 0x2, 0x0, 0x0, 0x20000011}], 0x1, 0x4000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x9, 0x3}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={r10, 0x7ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0x3}, {0xe, 0xfff2}, {0xfff2, 0xb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010100000000000059080000185600000d00000000000000000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000a589ffff0000000095000000000000006d4a4000f0ffffffaf69f8fffcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018330000010000000000000000000000950000000000000b"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x3c, &(0x7f00000001c0)=""/60, 0x21980, 0x4a, '\x00', r9, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x5}], 0x10, 0x3ff}, 0x94) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x35c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071114300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x1, r1, 0x1, 0x3}, 0x14) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018006000600800a0000080002"], 0x2c}}, 0x0) (async, rerun: 32) r1 = gettid() (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000004c0)=0x10) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x3, &(0x7f0000000240), 0x4) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x13c8, 0xffffffff, 0x1220, 0x1130, 0x0, 0xfeffffff, 0xffffffff, 0x1328, 0x1328, 0x1328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz1\x00'}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1428) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x34, 0x6c, &(0x7f0000000100)="1f11004ddbb9d0589ed1692629c170cad7cfa4fa687a9c998135937e678d880661bfa023aba69279f5820223274f39384ad91292", &(0x7f0000000200)=""/108, 0x5, 0x0, 0xe7, 0x75, &(0x7f00000002c0)="547c2c296bc5e64cf8d5f6be483cc05b5ba76b6ad03c1658a31e0ec0fdf688a4c8fd4f53d147ff92ec96bc8c2abbd76a5c2d12905f026889f22ccefedf0947db644c163570e2c5b14d7a48344342776945db0ae3cb077ba62ce87fa7a2bfefd055939d582bd8f45b704f6f4e72cca0577d7937d389b8646ae8cfcb2c3d779a2c0ac96aa5ea125c643c12f7ef1a4bcf88533c75db967772ed2c62f2623910efceb118a5634144194dd69781e0f81661682e58bb23aceba6bc50364139c3fb6b41ef16732678ac06820b624d405c1202f1d5576df328b3dafc26adefc7d6d6ec2610d956db9c5ea1", &(0x7f00000003c0)="3b54521ac1805d8ba23cfd07389e5c27d2eff78d996c7a78eaee58daf9504316def32d879c90f9b7b8d588ab6fe8626328dcb6014314e5d60f30dff01e1bd2dd2204db027c38ca0361d14a61b2ef4bd0e26042ff6d912a88c5ab7e710289f83ccbaf3e4d58318f81ec0aba4ad4a61494431788a81f", 0x3, 0x0, 0x3ac1}, 0x50) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000001c0)=0xfff, 0x4) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x20, 0x70bd27, 0x7ffe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4048890) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000300)}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r1) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(fcrypt-generic)\x00'}, 0x58) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x35, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x8}, @ldst={0x2, 0x2, 0x0, 0x5, 0x9, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff86a5, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0xffffffff, 0xf7, &(0x7f0000000640)=""/247, 0x41100, 0x2, '\x00', r7, @lirc_mode2, r8, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x7, 0x6, 0x8}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000000)=0x8, 0x12) close(r10) splice(r9, 0x0, r10, 0x0, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6e73, 0x38}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x81eb, 0x8}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x913}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, r6, 0x1, 0x4, 0x100, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) write$cgroup_subtree(r3, 0x0, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8008880}, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x99, 0x80, 0xfe}}, @val={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x6, 0x9, 0x0, 0x3e3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x0, 0x9}}, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x80}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e}, 0x48) close(r3) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000040)) executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000020701010000000007800600014000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) executing program 4: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x300, 0x108, 0x0, 0x210, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108, 0xf4030000}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@multicast1, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x5, 0xffff8001, 0x7, 0x1, 0x10800}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r0, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001580)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) executing program 1: socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000a00040000000900000000ddc384", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1411, 0x223}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x7, 0x7}, 0x2, [0x9, 0x4]}}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x7fc, @mcast1, 0xffffffff}, 0x6) executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000040)={'wlan1\x00'}) executing program 1: r0 = socket$inet6(0xa, 0x805, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001080)=[{{0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x10) executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xfff3}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) sendmmsg$unix(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x81}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) program crashed: general protection fault in qdisc_tree_reduce_backlog bisect: bisecting 30 programs bisect: split chunks (needed=false): <29> bisect: split chunk #0 of len 29 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 10, 9, 30, 5, 24, 6, 19, 13, 15, 7, 5, 14, 2, 3, 21, 17, 3, 5, 15] detailed listing: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0x8}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x80) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0xb25, 0x4, 0x8, 0x0, 0xea, 0x400114, r4}) (async) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$kcm(0x29, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x400, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x2844, 0x4) executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}}], 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) shutdown(r2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000002340)="4789d3aefc1a4d03345a07337bdb", 0xe}], 0x2, 0x0, 0x0, 0x20000011}], 0x1, 0x4000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x9, 0x3}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={r10, 0x7ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0x3}, {0xe, 0xfff2}, {0xfff2, 0xb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010100000000000059080000185600000d00000000000000000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000a589ffff0000000095000000000000006d4a4000f0ffffffaf69f8fffcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018330000010000000000000000000000950000000000000b"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x3c, &(0x7f00000001c0)=""/60, 0x21980, 0x4a, '\x00', r9, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x5}], 0x10, 0x3ff}, 0x94) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x35c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071114300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x1, r1, 0x1, 0x3}, 0x14) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018006000600800a0000080002"], 0x2c}}, 0x0) (async, rerun: 32) r1 = gettid() (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000004c0)=0x10) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x3, &(0x7f0000000240), 0x4) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x13c8, 0xffffffff, 0x1220, 0x1130, 0x0, 0xfeffffff, 0xffffffff, 0x1328, 0x1328, 0x1328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz1\x00'}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1428) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x34, 0x6c, &(0x7f0000000100)="1f11004ddbb9d0589ed1692629c170cad7cfa4fa687a9c998135937e678d880661bfa023aba69279f5820223274f39384ad91292", &(0x7f0000000200)=""/108, 0x5, 0x0, 0xe7, 0x75, &(0x7f00000002c0)="547c2c296bc5e64cf8d5f6be483cc05b5ba76b6ad03c1658a31e0ec0fdf688a4c8fd4f53d147ff92ec96bc8c2abbd76a5c2d12905f026889f22ccefedf0947db644c163570e2c5b14d7a48344342776945db0ae3cb077ba62ce87fa7a2bfefd055939d582bd8f45b704f6f4e72cca0577d7937d389b8646ae8cfcb2c3d779a2c0ac96aa5ea125c643c12f7ef1a4bcf88533c75db967772ed2c62f2623910efceb118a5634144194dd69781e0f81661682e58bb23aceba6bc50364139c3fb6b41ef16732678ac06820b624d405c1202f1d5576df328b3dafc26adefc7d6d6ec2610d956db9c5ea1", &(0x7f00000003c0)="3b54521ac1805d8ba23cfd07389e5c27d2eff78d996c7a78eaee58daf9504316def32d879c90f9b7b8d588ab6fe8626328dcb6014314e5d60f30dff01e1bd2dd2204db027c38ca0361d14a61b2ef4bd0e26042ff6d912a88c5ab7e710289f83ccbaf3e4d58318f81ec0aba4ad4a61494431788a81f", 0x3, 0x0, 0x3ac1}, 0x50) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000001c0)=0xfff, 0x4) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x20, 0x70bd27, 0x7ffe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4048890) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000300)}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r1) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(fcrypt-generic)\x00'}, 0x58) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x35, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x8}, @ldst={0x2, 0x2, 0x0, 0x5, 0x9, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff86a5, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0xffffffff, 0xf7, &(0x7f0000000640)=""/247, 0x41100, 0x2, '\x00', r7, @lirc_mode2, r8, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x7, 0x6, 0x8}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000000)=0x8, 0x12) close(r10) splice(r9, 0x0, r10, 0x0, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6e73, 0x38}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x81eb, 0x8}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x913}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, r6, 0x1, 0x4, 0x100, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) write$cgroup_subtree(r3, 0x0, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8008880}, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x99, 0x80, 0xfe}}, @val={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x6, 0x9, 0x0, 0x3e3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x0, 0x9}}, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x80}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000010000006600000000000000730135000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0759083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e27401aa306a7ab7069790da79b7ab45184caffff00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181d2f18d772fb5c58a936620ba1f5fbb48703ab220f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8efe7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c33edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a40948498faa261213bc20845526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef9691863c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2ebe448cbe850efd24bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed5de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d03652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b9c6c36a33eb3adc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a71dc202c851d99851bc7a62ea705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f9a42e34eea51692c90320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28743f77b8724487a9b37ca66d20aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe2bae2bd4c498a10d4e17dddb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a4307f0e4360651dc7f8924ee7a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c8b781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b978e0a5f69671f52401892dba8a63c8f7eb280880dbdcee5d8e8aae9de9d28cbe0de2f4642c4fe69db3b7432b2eb7ca282fbfe030ad6c33a73feef1cd517cedc2c0059e5636ae0fb3969ce7f64c6f4cffcc40ac1331f6b50d4f95c490edd75e8cdba278a602c8a200000000000000000000000091b39eb79b22cc68dde3760f3bd7377b35f4d41a46959070cddc4a9c340455f97ff0ea8c6adbff47a39269b2e90dffa1ec22d41f9da01ec44847a88334e106ff455f9ca2a0b2900591ceac1f0e823eaa7ed5b359eed1a39a6f75e7556ab52ac0c2c46b28f3791edf8f25cc2e6cab30841d3fac1e16443be84d4e9a903df3901f89e13cee8589df43652fbe05a789881dcae97ffdc52363bc61c334480afac09e04f9e5ce0bcd12c997545053b64bb2ba920a1071d2ca692c72965bdc0022f7f147943001a55ed8c7b3181fbfabd2069ac7bd4f9b459463edb8a05d1fde9a0000000000f4304ef01fb54b38377b030f2a0fb38bf286249b0cd112d9d8a3b3d97834e3a1a43008cb3abe4ecf4edb6b46ae11ce456dd5af00b5bfa294de78bd1b52856d6831286f32af84a659e67ae7cf2f4a669770944f50ae3d7a5718adb492cef3221fbd8af33c0d5dd034a5f066c15cf9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e}, 0x48) close(r3) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000040)) executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000020701010000000007800600014000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) executing program 4: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x300, 0x108, 0x0, 0x210, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108, 0xf4030000}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@multicast1, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x5, 0xffff8001, 0x7, 0x1, 0x10800}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r0, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001580)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) executing program 1: socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000a00040000000900000000ddc384", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1411, 0x223}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x7, 0x7}, 0x2, [0x9, 0x4]}}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x7fc, @mcast1, 0xffffffff}, 0x6) executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000040)={'wlan1\x00'}) executing program 1: r0 = socket$inet6(0xa, 0x805, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001080)=[{{0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x10) executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xfff3}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) sendmmsg$unix(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x81}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) program crashed: general protection fault in qdisc_tree_reduce_backlog bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 5, 14, 2, 3, 21, 17, 3, 5, 15] detailed listing: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x99, 0x80, 0xfe}}, @val={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x6, 0x9, 0x0, 0x3e3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x0, 0x9}}, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x80}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e}, 0x48) close(r3) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000040)) executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000020701010000000007800600014000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) executing program 4: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x300, 0x108, 0x0, 0x210, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108, 0xf4030000}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@multicast1, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x5, 0xffff8001, 0x7, 0x1, 0x10800}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r0, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001580)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) executing program 1: socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000a00040000000900000000ddc384", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1411, 0x223}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x7, 0x7}, 0x2, [0x9, 0x4]}}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x7fc, @mcast1, 0xffffffff}, 0x6) executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000040)={'wlan1\x00'}) executing program 1: r0 = socket$inet6(0xa, 0x805, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001080)=[{{0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x10) executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xfff3}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) sendmmsg$unix(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x81}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 10, 9, 30, 5, 24, 6, 19, 13, 15, 21] detailed listing: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0x8}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x80) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0xb25, 0x4, 0x8, 0x0, 0xea, 0x400114, r4}) (async) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$kcm(0x29, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x400, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x2844, 0x4) executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}}], 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) shutdown(r2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000002340)="4789d3aefc1a4d03345a07337bdb", 0xe}], 0x2, 0x0, 0x0, 0x20000011}], 0x1, 0x4000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x9, 0x3}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={r10, 0x7ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0x3}, {0xe, 0xfff2}, {0xfff2, 0xb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010100000000000059080000185600000d00000000000000000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000a589ffff0000000095000000000000006d4a4000f0ffffffaf69f8fffcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018330000010000000000000000000000950000000000000b"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x3c, &(0x7f00000001c0)=""/60, 0x21980, 0x4a, '\x00', r9, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x5}], 0x10, 0x3ff}, 0x94) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x35c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071114300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x1, r1, 0x1, 0x3}, 0x14) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018006000600800a0000080002"], 0x2c}}, 0x0) (async, rerun: 32) r1 = gettid() (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000004c0)=0x10) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x3, &(0x7f0000000240), 0x4) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x13c8, 0xffffffff, 0x1220, 0x1130, 0x0, 0xfeffffff, 0xffffffff, 0x1328, 0x1328, 0x1328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz1\x00'}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1428) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x34, 0x6c, &(0x7f0000000100)="1f11004ddbb9d0589ed1692629c170cad7cfa4fa687a9c998135937e678d880661bfa023aba69279f5820223274f39384ad91292", &(0x7f0000000200)=""/108, 0x5, 0x0, 0xe7, 0x75, &(0x7f00000002c0)="547c2c296bc5e64cf8d5f6be483cc05b5ba76b6ad03c1658a31e0ec0fdf688a4c8fd4f53d147ff92ec96bc8c2abbd76a5c2d12905f026889f22ccefedf0947db644c163570e2c5b14d7a48344342776945db0ae3cb077ba62ce87fa7a2bfefd055939d582bd8f45b704f6f4e72cca0577d7937d389b8646ae8cfcb2c3d779a2c0ac96aa5ea125c643c12f7ef1a4bcf88533c75db967772ed2c62f2623910efceb118a5634144194dd69781e0f81661682e58bb23aceba6bc50364139c3fb6b41ef16732678ac06820b624d405c1202f1d5576df328b3dafc26adefc7d6d6ec2610d956db9c5ea1", &(0x7f00000003c0)="3b54521ac1805d8ba23cfd07389e5c27d2eff78d996c7a78eaee58daf9504316def32d879c90f9b7b8d588ab6fe8626328dcb6014314e5d60f30dff01e1bd2dd2204db027c38ca0361d14a61b2ef4bd0e26042ff6d912a88c5ab7e710289f83ccbaf3e4d58318f81ec0aba4ad4a61494431788a81f", 0x3, 0x0, 0x3ac1}, 0x50) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000001c0)=0xfff, 0x4) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x20, 0x70bd27, 0x7ffe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4048890) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000300)}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r1) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(fcrypt-generic)\x00'}, 0x58) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x35, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x8}, @ldst={0x2, 0x2, 0x0, 0x5, 0x9, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff86a5, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0xffffffff, 0xf7, &(0x7f0000000640)=""/247, 0x41100, 0x2, '\x00', r7, @lirc_mode2, r8, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x7, 0x6, 0x8}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000000)=0x8, 0x12) close(r10) splice(r9, 0x0, r10, 0x0, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6e73, 0x38}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x81eb, 0x8}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x913}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, r6, 0x1, 0x4, 0x100, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) write$cgroup_subtree(r3, 0x0, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8008880}, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog bisect: the chunk can be dropped bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 6, 19, 13, 15, 21] detailed listing: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018006000600800a0000080002"], 0x2c}}, 0x0) (async, rerun: 32) r1 = gettid() (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000004c0)=0x10) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x3, &(0x7f0000000240), 0x4) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x13c8, 0xffffffff, 0x1220, 0x1130, 0x0, 0xfeffffff, 0xffffffff, 0x1328, 0x1328, 0x1328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz1\x00'}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1428) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x34, 0x6c, &(0x7f0000000100)="1f11004ddbb9d0589ed1692629c170cad7cfa4fa687a9c998135937e678d880661bfa023aba69279f5820223274f39384ad91292", &(0x7f0000000200)=""/108, 0x5, 0x0, 0xe7, 0x75, &(0x7f00000002c0)="547c2c296bc5e64cf8d5f6be483cc05b5ba76b6ad03c1658a31e0ec0fdf688a4c8fd4f53d147ff92ec96bc8c2abbd76a5c2d12905f026889f22ccefedf0947db644c163570e2c5b14d7a48344342776945db0ae3cb077ba62ce87fa7a2bfefd055939d582bd8f45b704f6f4e72cca0577d7937d389b8646ae8cfcb2c3d779a2c0ac96aa5ea125c643c12f7ef1a4bcf88533c75db967772ed2c62f2623910efceb118a5634144194dd69781e0f81661682e58bb23aceba6bc50364139c3fb6b41ef16732678ac06820b624d405c1202f1d5576df328b3dafc26adefc7d6d6ec2610d956db9c5ea1", &(0x7f00000003c0)="3b54521ac1805d8ba23cfd07389e5c27d2eff78d996c7a78eaee58daf9504316def32d879c90f9b7b8d588ab6fe8626328dcb6014314e5d60f30dff01e1bd2dd2204db027c38ca0361d14a61b2ef4bd0e26042ff6d912a88c5ab7e710289f83ccbaf3e4d58318f81ec0aba4ad4a61494431788a81f", 0x3, 0x0, 0x3ac1}, 0x50) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000001c0)=0xfff, 0x4) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x20, 0x70bd27, 0x7ffe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4048890) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000300)}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r1) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(fcrypt-generic)\x00'}, 0x58) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x35, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x8}, @ldst={0x2, 0x2, 0x0, 0x5, 0x9, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff86a5, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0xffffffff, 0xf7, &(0x7f0000000640)=""/247, 0x41100, 0x2, '\x00', r7, @lirc_mode2, r8, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x7, 0x6, 0x8}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000000)=0x8, 0x12) close(r10) splice(r9, 0x0, r10, 0x0, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6e73, 0x38}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x81eb, 0x8}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x913}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, r6, 0x1, 0x4, 0x100, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) write$cgroup_subtree(r3, 0x0, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8008880}, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 10, 9, 30, 5, 21] detailed listing: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0x8}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x80) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0xb25, 0x4, 0x8, 0x0, 0xea, 0x400114, r4}) (async) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$kcm(0x29, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x400, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x2844, 0x4) executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}}], 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) shutdown(r2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000002340)="4789d3aefc1a4d03345a07337bdb", 0xe}], 0x2, 0x0, 0x0, 0x20000011}], 0x1, 0x4000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x9, 0x3}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={r10, 0x7ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0x3}, {0xe, 0xfff2}, {0xfff2, 0xb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010100000000000059080000185600000d00000000000000000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000a589ffff0000000095000000000000006d4a4000f0ffffffaf69f8fffcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018330000010000000000000000000000950000000000000b"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x3c, &(0x7f00000001c0)=""/60, 0x21980, 0x4a, '\x00', r9, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x5}], 0x10, 0x3ff}, 0x94) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x35c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071114300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x1, r1, 0x1, 0x3}, 0x14) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 21] detailed listing: executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}}], 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) shutdown(r2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000002340)="4789d3aefc1a4d03345a07337bdb", 0xe}], 0x2, 0x0, 0x0, 0x20000011}], 0x1, 0x4000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x9, 0x3}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={r10, 0x7ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0x3}, {0xe, 0xfff2}, {0xfff2, 0xb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010100000000000059080000185600000d00000000000000000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000a589ffff0000000095000000000000006d4a4000f0ffffffaf69f8fffcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018330000010000000000000000000000950000000000000b"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x3c, &(0x7f00000001c0)=""/60, 0x21980, 0x4a, '\x00', r9, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x5}], 0x10, 0x3ff}, 0x94) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x35c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071114300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x1, r1, 0x1, 0x3}, 0x14) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 10, 9, 21] detailed listing: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0x8}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x80) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0xb25, 0x4, 0x8, 0x0, 0xea, 0x400114, r4}) (async) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$kcm(0x29, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x400, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x2844, 0x4) executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 21] detailed listing: executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 21] detailed listing: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 21] detailed listing: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 21] detailed listing: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 21] detailed listing: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 21] detailed listing: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 21] detailed listing: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21] detailed listing: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 21] detailed listing: executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 21] detailed listing: executing program 0: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog minimized 9 calls -> 0 calls minimizing program #1 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 20] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r11, &(0x7f0000000300)=""/93, 0x5d) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 20] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 19] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7ffc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x73e0, 0x2, 0x0, 0x3, 0x8, 0x7, 0x3, 0x7}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 18] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 17] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 16] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 16] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 16] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 15] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [0xff, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffff801]}, &(0x7f00000000c0)=0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 14] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x6) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 12] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 11] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 10] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9] detailed listing: executing program 2: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9] detailed listing: executing program 2: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8] detailed listing: executing program 2: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog minimized 21 calls -> 8 calls testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog bisect: concatenation succeeded found reproducer with 8 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX detailed listing: executing program 0: socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x800) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x800) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched program crashed: general protection fault in qdisc_tree_reduce_backlog simplifying C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched program crashed: general protection fault in qdisc_tree_reduce_backlog testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched program crashed: general protection fault in qdisc_tree_reduce_backlog testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched program crashed: general protection fault in qdisc_tree_reduce_backlog testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched program crashed: general protection fault in qdisc_tree_reduce_backlog testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched program crashed: general protection fault in qdisc_tree_reduce_backlog testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched program crashed: general protection fault in qdisc_tree_reduce_backlog testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched program crashed: general protection fault in qdisc_tree_reduce_backlog testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x800) program crashed: general protection fault in qdisc_tree_reduce_backlog validation run: crashed=true reproducing took 2h27m18.295967258s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] CPU: 0 UID: 0 PID: 6014 Comm: syz.0.16 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 net/sched/sch_api.c:806 Code: 89 ef e8 40 80 b3 f8 4d 89 ef 85 db 74 0d e8 74 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 09 80 b3 f8 48 8b RSP: 0018:ffffc9000415f0a8 EFLAGS: 00010202 RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000000 RDX: ffff888031751e00 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff888031751e00 R09: 0000000000000002 R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000afff2 R13: ffff88807990a800 R14: dffffc0000000000 R15: ffff88807990a800 FS: 0000555563886500(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f752dd83432 CR3: 0000000075418000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: fq_codel_change+0xa96/0xef0 net/sched/sch_fq_codel.c:450 fq_codel_init+0x355/0x960 net/sched/sch_fq_codel.c:487 qdisc_create+0x7ac/0xea0 net/sched/sch_api.c:1324 __tc_modify_qdisc net/sched/sch_api.c:1749 [inline] tc_modify_qdisc+0x1426/0x2010 net/sched/sch_api.c:1813 rtnetlink_rcv_msg+0x779/0xb70 net/core/rtnetlink.c:6953 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2534 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x75b/0x8d0 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x21c/0x270 net/socket.c:727 ____sys_sendmsg+0x505/0x830 net/socket.c:2566 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2620 __sys_sendmsg net/socket.c:2652 [inline] __do_sys_sendmsg net/socket.c:2657 [inline] __se_sys_sendmsg net/socket.c:2655 [inline] __x64_sys_sendmsg+0x19b/0x260 net/socket.c:2655 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f987ab8e929 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffff125d9c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f987adb5fa0 RCX: 00007f987ab8e929 RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f987ac10b39 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f987adb5fa0 R14: 00007f987adb5fa0 R15: 0000000000000003 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 net/sched/sch_api.c:806 Code: 89 ef e8 40 80 b3 f8 4d 89 ef 85 db 74 0d e8 74 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 09 80 b3 f8 48 8b RSP: 0018:ffffc9000415f0a8 EFLAGS: 00010202 RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000000 RDX: ffff888031751e00 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff888031751e00 R09: 0000000000000002 R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000afff2 R13: ffff88807990a800 R14: dffffc0000000000 R15: ffff88807990a800 FS: 0000555563886500(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f752dd83432 CR3: 0000000075418000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 89 ef mov %ebp,%edi 2: e8 40 80 b3 f8 call 0xf8b38047 7: 4d 89 ef mov %r13,%r15 a: 85 db test %ebx,%ebx c: 74 0d je 0x1b e: e8 74 fc 4f f8 call 0xf84ffc87 13: 4c 89 f5 mov %r14,%rbp 16: e9 88 00 00 00 jmp 0xa3 1b: 48 8b 6d 00 mov 0x0(%rbp),%rbp 1f: 48 8d 45 20 lea 0x20(%rbp),%rax 23: 48 89 c3 mov %rax,%rbx 26: 48 c1 eb 03 shr $0x3,%rbx * 2a: 42 80 3c 33 00 cmpb $0x0,(%rbx,%r14,1) <-- trapping instruction 2f: 48 89 04 24 mov %rax,(%rsp) 33: 74 0d je 0x42 35: 48 8b 3c 24 mov (%rsp),%rdi 39: e8 09 80 b3 f8 call 0xf8b38047 3e: 48 rex.W 3f: 8b .byte 0x8b final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] CPU: 0 UID: 0 PID: 6014 Comm: syz.0.16 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 net/sched/sch_api.c:806 Code: 89 ef e8 40 80 b3 f8 4d 89 ef 85 db 74 0d e8 74 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 09 80 b3 f8 48 8b RSP: 0018:ffffc9000415f0a8 EFLAGS: 00010202 RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000000 RDX: ffff888031751e00 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff888031751e00 R09: 0000000000000002 R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000afff2 R13: ffff88807990a800 R14: dffffc0000000000 R15: ffff88807990a800 FS: 0000555563886500(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f752dd83432 CR3: 0000000075418000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: fq_codel_change+0xa96/0xef0 net/sched/sch_fq_codel.c:450 fq_codel_init+0x355/0x960 net/sched/sch_fq_codel.c:487 qdisc_create+0x7ac/0xea0 net/sched/sch_api.c:1324 __tc_modify_qdisc net/sched/sch_api.c:1749 [inline] tc_modify_qdisc+0x1426/0x2010 net/sched/sch_api.c:1813 rtnetlink_rcv_msg+0x779/0xb70 net/core/rtnetlink.c:6953 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2534 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x75b/0x8d0 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x21c/0x270 net/socket.c:727 ____sys_sendmsg+0x505/0x830 net/socket.c:2566 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2620 __sys_sendmsg net/socket.c:2652 [inline] __do_sys_sendmsg net/socket.c:2657 [inline] __se_sys_sendmsg net/socket.c:2655 [inline] __x64_sys_sendmsg+0x19b/0x260 net/socket.c:2655 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f987ab8e929 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffff125d9c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f987adb5fa0 RCX: 00007f987ab8e929 RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f987ac10b39 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f987adb5fa0 R14: 00007f987adb5fa0 R15: 0000000000000003 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 net/sched/sch_api.c:806 Code: 89 ef e8 40 80 b3 f8 4d 89 ef 85 db 74 0d e8 74 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 09 80 b3 f8 48 8b RSP: 0018:ffffc9000415f0a8 EFLAGS: 00010202 RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000000 RDX: ffff888031751e00 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff888031751e00 R09: 0000000000000002 R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000afff2 R13: ffff88807990a800 R14: dffffc0000000000 R15: ffff88807990a800 FS: 0000555563886500(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f752dd83432 CR3: 0000000075418000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 89 ef mov %ebp,%edi 2: e8 40 80 b3 f8 call 0xf8b38047 7: 4d 89 ef mov %r13,%r15 a: 85 db test %ebx,%ebx c: 74 0d je 0x1b e: e8 74 fc 4f f8 call 0xf84ffc87 13: 4c 89 f5 mov %r14,%rbp 16: e9 88 00 00 00 jmp 0xa3 1b: 48 8b 6d 00 mov 0x0(%rbp),%rbp 1f: 48 8d 45 20 lea 0x20(%rbp),%rax 23: 48 89 c3 mov %rax,%rbx 26: 48 c1 eb 03 shr $0x3,%rbx * 2a: 42 80 3c 33 00 cmpb $0x0,(%rbx,%r14,1) <-- trapping instruction 2f: 48 89 04 24 mov %rax,(%rsp) 33: 74 0d je 0x42 35: 48 8b 3c 24 mov (%rsp),%rdi 39: e8 09 80 b3 f8 call 0xf8b38047 3e: 48 rex.W 3f: 8b .byte 0x8b