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", 0x1000}, {&(0x7f000000fc80)="a88a75f5e3df75e2392820bcc44c7437fe153bf4bb8ea0c194060cf6dee025407e3854ce4e739852e1cbd94b26cc183327cfa3c1520c9d22a4cb98ff5ed5d69158c79bc79995477a87d88d7a4fc39a7ec98374aafa71c69be7328a1936e8d271da6ca6c4dba1a33178a5e50bc960b0aabfc8b9287e44c556c1e0289aea2bcd668539ebeeecc68b654f2e6cdd8b9d3d878c0f4cb55cf65ad6754c1eac80e7afcc34186249550df8fb15ff991fa2975c053008915a150a490396e0509be137b13a32c8d5c8fd737fe1918de1", 0xcb}, {&(0x7f000000fd80)="af21aff7277870dd12fb35a5e3c471da43fa7d210bdcf465478ef844c8b164a1bb648e88207bd6b1a963d82dce2e077c31771c44f8314eb8cf47a5e249007e06d3280b70af19f355df550c5b7951396eed236b1493ba7309ec50edf0e2cb4f363a8534532e21da4cdbd83bd727ac1b27d8372fec397e25496574", 0x7a}], 0x7, &(0x7f000000fe80)=[{0xc8, 0x116, 0x7f, "8ca4ba5d28d95366c176e198ad972da7470061df81d66161a0b1db251c372799fba21e4ef333034102cc25b715cc98a2121b0d6fdb3c1a433f4182332a4bd4f609cec472fffcbf3db4278911d51b62b8d27b70ebe9f7490e4a87f638554ebcc36e09db10c415f743816c7ea8af48b92de5cd889f1094bccaf02f5f8fa605da7dece94ad0cb212ac851feaa669d61dfd1af38b6e3efc6fff315a0419b84461d50d6552825083d3bf8efa3ce94a498c9fd39b41c398edf392b"}], 0xc8}}], 0x3, 0x40080) 14:45:35 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000050000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x300}}}, 0xb8}}, 0x0) 14:45:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x400300}}}, 0xb8}}, 0x0) 14:45:35 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x30, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0x0, 0xffff}, {0x0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x29, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44080) [ 3202.803646][T17929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3202.912034][T17939] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:45:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x13}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:36 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000060000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e80)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='freezer.parent_freezing\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000000c0)="d32369", 0x3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xe8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x20}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8a}, {0x6, 0x11, 0x4}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0xffffffff) 14:45:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x46b}}}, 0xb8}}, 0x0) 14:45:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 14:45:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xd1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x30}}, 0x0) 14:45:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000005) 14:45:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x700}}}, 0xb8}}, 0x0) 14:45:36 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000070000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1000000}}}, 0xb8}}, 0x0) 14:45:36 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x4) splice(r0, &(0x7f00000000c0)=0x101, r1, &(0x7f0000000100)=0x80, 0x3ff, 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x1b, 0x2, [{}, {}]}}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003440)={&(0x7f00000034c0)={0x33b0, 0x14, 0x1, 0x70bd25, 0x25dfdbfc, {0x22}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "ab547eadcd478baed8c746c81a7e8bc09383603934fdc821660207586334b7f2abef7ce168d0fccc8875ab2d32f7a0cf0a95361f5d04f31fdbbacbfae7c3232c5b5233bdd4943620cca15026967f85318de9f351fda4548a543e90c4ae178f38560f0b3e1e80b22b0f5224a90d07930cacecc4052c08ef5afb31c5cbbe2a9d2e3629725ad2085c0b28f9a5ad5759107c642b80390d9535a40dbd30edb1"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "482812f3514d821d56abe0282f3412dd13377b19504fea83a604b4cf859fb8d59921c653155185c34dd75bee5b689ac873fc9852b2dfe0db42a0831a4dc38ea62d67f80a5f3b5afc83128b6dd4449e1089b4210da1bcc4597bc32edf035d710f99688b320a9c3759fe2db7e3af02c5d6c048d8fcbc8cef8f86fdd41829c7723a0ea0ce14ac27a0de532af9c9af86f8eb784cf3e02d4d6372515c4437b76418da1772903d7d8a60934856e3a95cb5cc628f473cb12b5d335fbb8519dccbcc7d4617e2bdbd7f481a96a29e56bd33425f83e6e8faa7970b8d2905bb2cacdcae2a30aa0b871df760dfdb6c42df090fe919cbcd126e8f4f345e8e63fae6ff"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "1fabcd46dc3536066dac194f09657874b3f5b320fad047a70b09500ccf9f672d7fdbdf0df74e3303bfbd1eb48806b6a066e2b1dbfc0ae111d00010c6af5d86d467ec94dfb6a4257efd66e658b7c962dee623d5e4b7cd3b57087d929219a749f1253b3d9d3b5bbd7238d94773372997625f35cf9d79a149805b8c732a81a286073597c1c0000eb68aca955ad89a3ffe45d74cc6de5a86b846fff55de237ed7618dae9c1f59789e6eb8c76a5a5937d91251313d49c21430577678154b1347a2fd6d2ea89f2a3fc793a10da704f2db67a15abdf23824f73fad756496922be41ebb6e4c72f0cb6ba5cfd5bfbb672e5498eaefea6f9b22cdac330660c64621cd79f61498f5bf1848424e380178ccbafef2a9164a9000bd7a1e44d95a502285b4884f827de040645a4dd4e3a17b53dd0d5cb701cd9d610d3c30d5ea1eef34826e3d8befd710baa80aa613a224c653c47e86b1c090cf9520fa3561a0f389c0055fff174d1377058020e781b8038b1a5702cdfc50a758a2820e25f7141bd790049d14b5db674875461c678a56fb7f50df2f59f1f59e777a29b43ae39a51759e97ec8a7f64f368821dbde9843b4d43afcf2c0a298267ba6854e134d15cb90d317b42de51c581db00bf52070bc5b16831a87f5c208d28f7679822af94d533aa1e28a3c56482a5706c360a39df3a005d0610e368dde961215937e0817a034135fcf4cfcbc1fec7c3159457430a7d9c2c131c4ab1edc1274ec8f5140093ebf4be40a12c7d2e74fe4f21aa279403b0bc8e862ab41317f9fbfe9922f4a5f09fa17c6df6d7be0528d143ab6ec4005ed67b1d70d13f3f5474e4ca56939e4a4473a0409036934f88ac8d752d68846a9c3c62888a666cd74a46a85576b2849b58424d1448044d8595ea0e983827754e61f2f5f710107ff71b1406750835e42d849a57f7da46b79c9070beec72d46c0c1aca08b7011b2e0a68e1a251b3fee1636a1c1466653a33cb1c7d36419e2e00b8586ee13040b404b8f445227bb29ac3ea0cc49cf4005bd0efcf79f944f778738b5c4e3ae123b2289812d94f136614919e99de9fee8074e854f68c85807ac1d65f4a416dab8f24cde22d033c018529c4bec97282e73f6abf482f1c79c67908bca7a1918309b11c08cdd7dc67267418e9c50968574eba6a397f81647cfcba04d8c47bb05b189ac29fc29def987c66690af706cf9cc13f4e4b3543ed6aa3e2aed5ec7245ec6cfb9f393c55d34c8e22a786c943f69c851e3efebc69c836f8b9d0f0598f09cda0e15551048763877fa574585b2880d22a798e4dfbd6e224b12d02ec07dfa950bbcc48dd695d3130540d6d09ddbd1e43c8cc511a45578c58a7e1e4d6732b6da72ecd6808301bc3d5e8d39c4407dc64368134ddc8ba845b9d97b1cf025e30f833fdd33fb5c2d56df1636ebbb36715adc3d979104ca80d1641c12113fe25d9d7223fadac7f01d75e36ede56c06b7abf35e9f26c1f32fa7aede3cc0d730c0847aeac48fbeb6dfc54803d15e9ba8518cd54ba13254d17d507d4cd36c7e42c90f19c55d5f9dd31768f285c624aa9652c7cce6580d6a8e61b165a2ae00cdbc1564a2ebbfdd8a0028f67b3c3398f6af79c877043d0e181c57b144226e385a3b8a79f07512bfd25206a665b6c02bbe76f0f920862b97b903563d68b722ee6974b721a39e530bb8bda270cbbc8b54bb5d308b7fe9f0e26f885615eaa66dbc81d7a60a1fa6ce3f3938549c0fd1df5a66703eb57871ef330aedae1a1a6c0e1048eaa5fac26b5691a4d4e3ce9ac0a5dda5fc96e898f00e348acc4633844a6447dac7de211e64c4e4a72aa589af7805c002775841ee4d8769d1679b8f1dafc50be6245f169d339f533b8af764da1a80d794c14d95116efb10609e8659ce9cfb59d216f49fc7b66f635aecf456af80b2e80e0cec97aef845c247f2c993ee7300980b09d0942568658cdb4cbb64ed7727d7d57c7597f79a2b1a9cc22f356031a53c55ae411b5b70b54916e5e424287a9687122f44f2c13f3f8ce941d37b135260d4f472f2a1543920fe378ba145c5d51d9bf9508b76be74dda146ee019feb6f9f2a2a97cf8677ece5802babee295268d905334b1b9c96a4c50d3de5a21cc2f88ba05ac00f4873195344840f7501a19a018278941336ccfce4d4efa0abc5f34bfdb8b9adcc404954cc4701f4298773e857d151a874ec64e731260efc8231d24759ea9675a2b5e90d0aff7201836f550673615fee00c35d1e787d2be60f430261dc5fe9e30235c90f322ac62373f44b31fbb70d493ca253913f8faff2ea1aa870b1c6d633d6c3b9de95f24159ca17dadc586c9eb2a5d3f2c49f378ffae46a432a480f18a600e072bc29e9c17c877749419040d4a72b2656fca31a2a94365170fbe704d9db3e6eb82e9ecd5000bac5f0e9871b6b573abf97ac468b8c993d06e873e5eb480ec53e627e4257a16fd48ccc1ef885c9a460368aa4fb0d9c736d324bb0a12340cdc50c11a954975f349c07d393144a275bc92fceaeb11c47ea3cddb8c4786b072fb5b6c520089d92922167728e90a905ea294c2a3a472bdf680a043dd1a4d9a8f7a2849333267a6e53888203b1a1c06ad52b1b27d83015ed102b9ddb6316bc4c05e8d33ea3b02d420fb4aa13a84f724c80db9b35c743ccf71c67084ebf79c67eeb6a4b172885e6ba558c9982ae30c44e3e75c51141487759ecd8e7b7afe84e80edc933078227cab2776fce84d401dcc0563b125f6ddc8a8857c6460434ab7257d946f2ecc6500e072eead5e223e3e511b672dd670de0e6b019a49948f17182154bfb6027fd3911c837fe1a8e104bbb67bd96bcc89d98ef29d0a544ce714b5e341abfbbb74ffe11f370a785acd237b35285b0964b41364de932afbf6a446818bd1a0d1d68ef9ce897f93002a2d65061cb92a6742ba2c14f8ba4220cd711a8cb40c560a1291fca62c7bd815c7d06d6d814b48449395830545000704b8a9f620c906a1dae348b1cc4255211dd37dce58f505f3ca5c01388afddfdc5b7e60150f91018c124fff21e55b120a3dae09680cb7ee3c7df32584e84d33c875ed0ec88d739e0f46ec22c40ba88ed4c2dfe3b01483c91b11651800f43b0c1ca62205123ebcfc28bf4219198a2bdfc4c11780ffba8bb848baa942c45f000e139834693faca18f88a3cac0cf022308a217f75916e0034cb1fee34b724b91cbc923134c61f645168ae0978e2876a5ba157ee865eb22ff55f3106b85a6a18a629d2288183e7119e80f478b4ea0e864e9408a098f15fd36ff7d994c9af7b1971c500187698b1a86090c118f27dfa62bf6020fe1bdfa7726fa10bfb46242d56e624efdd1d1e3a17a5e9c095f28dff8f98ec0843ee9ed999685999ec4ce59764be623fda91a047fcbf061601d5d8b12b31ff65483686ba56e34954fb5f372dfdbdcb24d1bc856039b311786b0258c2bce86bce9b1082acf3ac650c2c3702323dcab48b178104e75d4e1564efca01ad4143656bde0a6fc3606c9b6dc1cb655e9fcf14f48ac0f1d66a9415df92c32a0300458d7acc31875848f89ebd9b7df4745a0f1971e92f6ddffefe0e0e27605c71d7207c7b17053692efba8c8b0d77557d0fb221f76c2321c11a094c521dcd08686147910fc45c6578f8d8115e5b86a5c0ce9ff33d41a20a73751f5b580181f2c143517fef8e38c2442956075d89b68b6d144364a4ef7f672ddb9d2f6cc34b343610d78dba9caf54d18cad56801be728cbd8c2489b728846b796a36576f2dbd9de2f5dee64d2b0f212138f558a41a497184ccf640c3c59ef51fb2c53ea8e0b2999f5ab3f27a1e8836d84fe476aa1b332bd12bd68b7493a829f4d6dca0330a743d6678fec81b2f4769437ac7acb350352a17b3f092d41ef6b68e3793db06dc3e9bb1fb062ffd51151bd455e5bf511fb11aee64cdcec5bb8ca5e9229ecfd8fc7beaf0d375b47601420a60c80af145fa77f902298fadeab78292252b24680ac9f1ff82afbfe437f6c1eda8cae84e6e63a1308694281245658572f91f1524dfa5876c80158c172b2d3000ab8302f398cb8b6abde0ff3a114444826a5820410d67c3de5b8c59b433b3e3197233ace26151da55cec4ab9b63c209666700d91df34f5f5af1a7ccae93463e81a178e8cfa409246e34ff45e06eb7b629a82b4407e7ccfaf09c7ace052280bf161c1ac384f30a23870802a9b0c34b012ab037ebeed5d3fa2c2460ec5bc95e8141bf7a6f7a650264eb884c9cfc723634c63434dc28c910dc47dd37aa44163d899c24c3cde291f94e1d768dae544ac5a718b7066d6b6f77abdce97520b67fcee65bdfb073619248209ec79c1b262c8750b7de421e58eee5154b0d39804d8e91b4b999efe20084c11fdafc74fe079146132896e928e27ba004d134de6cd5d55ddb0902820aefdbbeedcd0d72acaaa9210b2ff08c64e56a9d93a9ddc4a8b1ab65ae737d1320d01982be93d97eaccf7766d0f4b906f8cebf32d7606947d5a7e02a1999f3e816bfd55dac6b43f1daa0c8b3ee76d2962e68e8c33538a44bfd3ec3fbdbf9bf08a01da25082cc34d2c51cfd18f29ccfee108fb9a64e849581dd537bb9991af4869fedac485fb8b848eaa3844ec9faacf5d1dea7229f46e06733ea27825756fe2a8d804213816013d4776d0ab533a94eea0275c34393ee782a7f2872d3fc80689c7c1787a2a27c08bf00954927f7da31bb51a76b07868617c664375674f09432a6eed1a8230f2cfffecc556b854743f12ccae8dcc25dd0d502a3fc58a662e87e7ca87a012cbbf33502ac32906202c52ca051e3eb57a9dda1822623acec2b6cf7fa7ea9e0e19796d36d7292682ef7d49ea17b2a9a0a8140439862e3c6395379bfa154663260625ef5915a1a0d659c12b8090cf6645dca2d81d00805cef9b49afad58ac734742ef319a3860f83087e4651e049ad85662ede598e87f8d0e03164d07cd172e193fb1c48401c4115851f001bcea3923d0ba2515f84f77deac2cf6b7394c576e8cc91d4462647a2a1deacff814332754c3d031edae2da99edcacb4fc3126ef580e6cb9bf022db437473fdacb7548b52eb82cfc7ddf41acaf4ca69b654a136b6a9cff20fd3b3c2d76d8a3b25c90eceb7e1846aed64a943e292f5216c06be0f5ce12be0d45e8356eec200bf19eeebe818f1ac09a46856b92b0176bee2769f01e42b0bf67179bca953aafda40aae16536c8ef52da4d053ba01241ce891c380a200ecb9e57db5419ff32ad962ea62e884cf073631973c62673078e96e9e95c3f8e8b5512ad89f2e7bb126da28a5265ebbf464c81d0cb7c1543274317bfc5a72b1623043f9075c055eff5ea1d4eb6ac84a90a4b9f365641de7fc6b2e1e13e8318e78f0e977e6423a25c031d939a202a1fdad3a1d05352044640b9d7dd76c072261d4c5cf0a38f19ffed7b2e0669b3ed4a1279bce6a611ccd7557fc0d8ef2325641379a4b3a8710c8989f18bec515ac267fddd94816d376069dea5ac4e13a4f568f11ca63e57ec1db174d97c59e70560934d29f751958fedeabc9c2be8027b56b0370bb9429126468ec0253f851ef9ec7466decb2920e37def300c79a91d6b19de7fc8f9e222da39ca825866c60d9bd8e687fc3498aba80583ef8998cc1e0670b6285fcc22a6799e895f7927bae9a3fe7a6e4405e2fcb5ac551279d5247209fa4079bd6fc5ef0792a54bc606c05199ed59d4b6db2843ca0bee82438b21a948dbf2f7df00617e9f7be38f5620841d61cf527f2d6bb17f9b64a3ff4b9e67333788c68312168111ed8a653e7131b"}, @INET_DIAG_REQ_BYTECODE={0x1e9, 0x1, "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"/485}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x33b0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 3203.494483][ T26] audit: type=1804 audit(1636037136.490:3805): pid=17962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir503578297/syzkaller.XEA4I7/3127/cgroup.controllers" dev="sda1" ino=14658 res=1 errno=0 14:45:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x900}}}, 0xb8}}, 0x0) 14:45:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x14}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2000000}}}, 0xb8}}, 0x0) 14:45:37 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000080000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) socketpair(0x8, 0x1, 0x7f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@flushpolicy={0x44, 0x1d, 0x10, 0x70bd27, 0x25dfdbff, "", [@mark={0xc, 0x15, {0x35075c}}, @address_filter={0x28, 0x1a, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0xa, 0xf5, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x841) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xfe80) 14:45:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf00}}}, 0xb8}}, 0x0) 14:45:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x900}}}, 0xb8}}, 0x0) 14:45:37 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000001f0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19000000000000000000170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000170003000000000008000b001600000000000500120000000000"], 0x54}}, 0x0) 14:45:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2f00}}}, 0xb8}}, 0x0) 14:45:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x3000000}}}, 0xb8}}, 0x0) 14:45:37 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000003f0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000000000000420850000002c0000009500000000000000667b026e129ee8a814b5c81e26dac77a99356de8e096c01ef49ab6989e93f128008a1af2aa3cba7a58af9bb5121d618cf85e81197664133c6533ada500b5a345cb3816d1a975a4a13d609475811afa07e6f7c90311bb54ac9600dfb125f4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffedb, 0x10, 0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0xa, 0x4, 0xd, 0xfffffffffffffff0, 0x10}, @jmp={0x5, 0x1, 0x1, 0x0, 0xb, 0x10, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x3b, &(0x7f0000000100)=""/59, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x5, 0x1000, 0x100}, 0x10}, 0x78) [ 3204.956740][T18003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3205.029628][T18004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 14:45:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x15}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x6b04}}}, 0xb8}}, 0x0) 14:45:38 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000007c0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4000000}}}, 0xb8}}, 0x0) 14:45:38 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468", @ANYRES16=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES16, @ANYBLOB="00000000ffffffff00800000090001006866736300000000080002"], 0x38}}, 0x20040891) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0xb4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xb4}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:45:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r3}]}}}]}, 0x38}}, 0x0) [ 3205.499128][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r3}]}}}]}, 0x38}}, 0x0) [ 3205.551654][T18020] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf000}}}, 0xb8}}, 0x0) 14:45:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x8000000}}}, 0xb8}}, 0x0) [ 3205.610536][T26477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3205.634437][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:38 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000ffffff8d0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3205.701894][T18032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:38 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x38, 0x0, &(0x7f0000000040)="7755d9880e050aa405dd1859d49843531c419a8512815cae98a250a760374a58d6c79f0d6424de0c3be9dc364ec5986f5b451e1deb3ec899"}, 0x48) 14:45:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r3}]}}}]}, 0x38}}, 0x0) 14:45:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x16}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:39 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000fffffff50000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x34000}}}, 0xb8}}, 0x0) 14:45:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x9000000}}}, 0xb8}}, 0x0) 14:45:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r3}]}}}]}, 0x38}}, 0x0) 14:45:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xe000000}}}, 0xb8}}, 0x0) 14:45:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 14:45:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x400300}}}, 0xb8}}, 0x0) 14:45:39 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000f0ffff0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002300)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x3af4701e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000021c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048280)={0x0, [{r3}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {0x0, r5}], 0x0, "3b36bfc453559a"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8004) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20040081) sendfile(r6, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r7, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) close(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14:45:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xf000000}}}, 0xb8}}, 0x0) 14:45:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) [ 3207.364303][ T26] audit: type=1804 audit(1636037140.360:3806): pid=18076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1840/cgroup.controllers" dev="sda1" ino=14225 res=1 errno=0 [ 3207.530888][ T26] audit: type=1804 audit(1636037140.530:3807): pid=18077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1840/memory.events" dev="sda1" ino=14039 res=1 errno=0 14:45:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x17}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:40 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000008dffffff0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf0ffff}}}, 0xb8}}, 0x0) 14:45:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 14:45:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x18100000}}}, 0xb8}}, 0x0) 14:45:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1000000}}}, 0xb8}}, 0x0) 14:45:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) [ 3207.988804][ T26] audit: type=1804 audit(1636037140.980:3808): pid=18078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1840/cgroup.controllers" dev="sda1" ino=14225 res=1 errno=0 14:45:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2f000000}}}, 0xb8}}, 0x0) 14:45:41 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000f5ffffff0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x60000000}}}, 0xb8}}, 0x0) 14:45:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2000000}}}, 0xb8}}, 0x0) 14:45:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf0ffff}}}, 0xb8}}, 0x0) 14:45:42 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000200000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x80ffffff}}}, 0xb8}}, 0x0) 14:45:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x3000000}}}, 0xb8}}, 0x0) 14:45:42 executing program 0: bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x9effffff}}}, 0xb8}}, 0x0) 14:45:42 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000300000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:42 executing program 0: bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800f3ffffff00000000000000", @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='fdb_delete\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="ef", 0x1}], 0x3, 0x8040000, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map={0x18, 0xb, 0x1, 0x0, r3}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000380)='GPL\x00', 0x6, 0x2, &(0x7f00000003c0)=""/2, 0x40f00, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xf, 0x15fa000, 0x80}, 0x10}, 0x78) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r7, r4, 0x0, 0x10000fd00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 14:45:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000}}}, 0xb8}}, 0x0) 14:45:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) [ 3209.495622][ T26] audit: type=1804 audit(1636037142.490:3809): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1842/memory.events" dev="sda1" ino=14665 res=1 errno=0 [ 3209.523094][ T26] audit: type=1800 audit(1636037142.490:3810): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14665 res=0 errno=0 [ 3209.803308][ T26] audit: type=1804 audit(1636037142.560:3811): pid=18138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1842/memory.events" dev="sda1" ino=14665 res=1 errno=0 [ 3209.829772][ T26] audit: type=1804 audit(1636037142.580:3812): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1842/memory.events" dev="sda1" ino=14665 res=1 errno=0 [ 3209.855860][ T26] audit: type=1804 audit(1636037142.620:3813): pid=18141 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1842/memory.events" dev="sda1" ino=14665 res=1 errno=0 [ 3209.882302][ T26] audit: type=1804 audit(1636037142.630:3814): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1842/memory.events" dev="sda1" ino=14665 res=1 errno=0 14:45:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x19}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:43 executing program 0: bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000400000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x7000000}}}, 0xb8}}, 0x0) 14:45:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x3c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r1, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x11, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r0, 0x4c3, 0x2, 0x101}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r1, &(0x7f0000000640)="21166b33a2edaa097ef5af26d9542a458ca228ab8f122e53b8effc4da076842b", &(0x7f00000006c0)=@udp=r2, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r4, 0xf, 0x0, 0x0, {0xf, 0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf000}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340)="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", 0x7fc3ad37) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) epoll_wait(r7, &(0x7f0000000100)=[{}], 0x500, 0x2e0) preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000300)=""/43, 0x2b}], 0x2, 0xfffffe01, 0x47) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000040)="0c1dfa50ab5a07d115f04d1f12e43701a69d76e258f7a8fd58634b038a722c42a8feb77676468d42c5cfb9364610d72006f550172499", &(0x7f0000000080)=""/18, &(0x7f00000000c0)="75280949e9308433198a38dcd61cfcfbf1b642f0a1d8ad68ebbf62cf2163521671301091d2bcbef3c221e5d03b4cbef0cc97559c537871966fc29dbab1ec9963602db599f2e94334a33c449dfc9ce279ffcabdbc5e294cd2a16f27e94126f949c584c5fc3cf436e639ae9101fa1e731ac97b485d64454d00c2efbbb480e3b96cedd48845e2afe507e59ee9c8af0a351c68c8aa18c8261c8bf6c5ebdb20e3e5989e6f58b88e59a403eea982d41e0b99bf257b40c263b8a6c3eb1ec1e89d2fe5e87dba8de26e7f3d4dd9f35f5e69c0272cf5873838baaa904827c7d9cab01a8280c33032b435085d0f10d6625c", &(0x7f00000001c0)="ad340d64ffbb5fba20eb7c6141cfe90d18bb67b9c5d71f9fbf5e464b1210242b078fdda0a7e48adab9e040ffebc79b5069607013f3e78a9155cc98c63af0189bab503066194715aeeb7f451e1514f503c6ca5d1f0eaac4e0cf56a1a5aea72b1396941020ed7429564ef532518625f5d84b3824f4acd86bbf853c30854f12e874998382f1926ea6fa32e37339185f65f4e6feebe73c3717a073fb1dca132d1418fbf7568d0faf2af7ac1365d738988ae1a7e2114b86510b52a018d87fc1a3c6629f7d9840b1254bae02d9a154cf0adfe33a8c4c739236f90a4a8ece4102a6e387", 0x8, r1, 0x4}, 0x38) 14:45:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfcffffff}}}, 0xb8}}, 0x0) 14:45:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9000000}}}, 0xb8}}, 0x0) 14:45:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffff000}}}, 0xb8}}, 0x0) 14:45:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000500000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:43 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffff7f}}}, 0xb8}}, 0x0) 14:45:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf000000}}}, 0xb8}}, 0x0) 14:45:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:44 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000600000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2f000000}}}, 0xb8}}, 0x0) 14:45:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffff80}}}, 0xb8}}, 0x0) 14:45:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9000000}}}, 0xb8}}, 0x0) [ 3211.371329][T10445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:45:44 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000700000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffff9e}}}, 0xb8}}, 0x0) 14:45:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x6b040000}}}, 0xb8}}, 0x0) 14:45:44 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x3b, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x4, 0xba0, 0x10000}, &(0x7f0000000380)=0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x200}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000100000000020006000000b94d19ee4e0a8377f400000000000000109f510a7c8d79094a7023a76f62988627f169bd040ed8c56048db68a7d796fc41572190ab49e21e66a0a9a1e31ebca5a9d2a7bc8de0e744d7465540a76adf91bf47e19e5d2cd78bc9d053e120976931d30f641dd435937263fbfb5898a64e65efd32b0b8b412413768b063f6ea388487f4a56c2967ba48a08b89c5b850136712a28a71ae6f18f54e1200a6729066bde43ecd8b6d0f226753ef41cba728bd39325e2f7216bd0019b640082a44484725258168ebde04f38"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x6a, &(0x7f00000000c0)=""/106, 0x41100, 0x13, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0xffffff80, 0x9}, 0x10, r1, r0}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001080)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000800)=0xe8) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf2501000000050004000100000008000800ac1e01010400050008000b00", @ANYRES32=r7, @ANYBLOB="08000800ac1414aa0500040001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008800}, 0x2002c088) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x3, 0x3}, 0x0, 0x0, &(0x7f0000000940)={0x2, 0x7, 0x6, 0x2}, &(0x7f0000000980)=0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=0x3}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6c54c30d912f1a86, 0xc, &(0x7f0000000b00)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80}, @ldst={0x0, 0x0, 0x2, 0x5, 0x6, 0x50, 0x1c}, @generic={0x8f, 0x7, 0x6, 0x5, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000b80)='syzkaller\x00', 0x1d7b, 0x6d, &(0x7f0000000bc0)=""/109, 0x41000, 0xc, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0x2, 0x8, 0x2}, 0x10, r1}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x15, 0xa, &(0x7f0000000580)=@raw=[@generic={0x2, 0x2, 0x1, 0x0, 0x80000000}, @map={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x20, 0x6, 0x7, 0x8, 0xffff}, @map={0x18, 0x2, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @map={0x18, 0xb}], &(0x7f0000000600)='syzkaller\x00', 0xffffffff, 0x93, &(0x7f0000000640)=""/147, 0x41100, 0x0, '\x00', r5, 0x13, r8, 0x8, &(0x7f0000000840)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xc, 0x1, 0x2}, 0x10, r9, r10}, 0x78) 14:45:44 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) 14:45:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1b}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:45 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000800000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x80ffffff}}}, 0xb8}}, 0x0) 14:45:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffff0}}}, 0xb8}}, 0x0) 14:45:45 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x9c0) 14:45:45 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) 14:45:45 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) 14:45:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffc}}}, 0xb8}}, 0x0) 14:45:45 executing program 3: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x120, 0x0, 0x200, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x44000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8ab0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3d}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0xdb, 0x17546c53, 0x2}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x40, 0x3, 0x21, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, 0x0, 0x7800, 0x8}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x110, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdf}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x44010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x168, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x144, 0x2a, [@ibss={0x6, 0x2, 0x5}, @erp={0x2a, 0x1}, @perr={0x84, 0x49, {0x8, 0x5, [@ext={{}, @device_b, 0x5eff2f19, @device_b, 0x2f}, @not_ext={{}, @broadcast, 0x120, "", 0x12}, @not_ext={{}, @device_b, 0x81, "", 0x1f}, @not_ext={{}, @broadcast, 0x1, "", 0xd}, @not_ext={{}, @broadcast, 0x5, "", 0x3f}]}}, @mic={0x8c, 0x10, {0x2bc, "c84b76c60909", @short="208013b2441d6c7b"}}, @preq={0x82, 0x72, @not_ext={{0x0, 0x0, 0x1}, 0x9, 0x58, 0x4, @device_b, 0x7fff, "", 0x6, 0x9, 0x8, [{{0x1}, @broadcast, 0x7f}, {{0x1, 0x0, 0x1}, @device_b, 0x7fffffff}, {{0x1}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x28}, {{0x1, 0x0, 0x1}, @device_b, 0x3ff}, {{0x1}, @device_a, 0x3}, {{0x1}, @device_b, 0x80000000}]}}, @tim={0x5, 0x66, {0x3f, 0xda, 0x7, "92099e9d57a2ae8ae934d6585c9b7d8abbe22d91fd58f9dcc592a3923b27689c98f35b11143d8afed461432c7ad735c3a68380f4277b11f577f75eb17cbecc0fc73d5ad5a6c601f857dfa50c616e2ef68c063cd19f0afc8d0f1252e7ec705542fdbf33"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x168}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801fdb59cce59ba2700100e90005"], 0x1}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000001) recvmmsg(r8, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000061, 0x0, 0x0) 14:45:45 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000900000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9effffff}}}, 0xb8}}, 0x0) 14:45:45 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080), 0x10) 14:45:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1c}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x40030000000000}}}, 0xb8}}, 0x0) 14:45:46 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000030b00000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf0ffffff}}}, 0xb8}}, 0x0) 14:45:46 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080), 0x10) 14:45:46 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x20) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1, 0x1, 0x3, 0x4}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xb1dd609d14f61c41}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="b8b4141832f6c4ff8dfafffbc31261f9fbe0d7fe21ea000000000000006a97773916c70200"/46, @ANYRES16=0x0, @ANYBLOB="00012bbd700200000025020000000c00040004000000000000000c0006000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40000) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d54615fe32c5ead100000000000000000000000020cf8f63798b80b5205d4691457beb9cae9a8b58ecddd3f4f3a7faccb5c18c844311704a1cbbb61ec8", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00000000280008801c00010000000000000000000000000000000000000000000200000006000200000000000a000100626669666f0000000800020000000000"], 0x60}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)=ANY=[@ANYBLOB="38030000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="f800028040000100240001006c625f686173684373746174730000000000000000548edfce873b0372000000050003000b0000000800040040000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff070000080006005187328445e77a69bd2b6c", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040007000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100008008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000545ffff08000100", @ANYRES32=r1, @ANYBLOB="6001028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004008600000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400c00f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040009001f09b95a0000"], 0x338}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 14:45:46 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080), 0x10) 14:45:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfcffffff}}}, 0xb8}}, 0x0) 14:45:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) 14:45:46 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000001f00000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="d3b1"], 0x5a0) sendmmsg$inet(r0, &(0x7f0000000240), 0x0, 0x40810) 14:45:46 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) (fail_nth: 1) [ 3214.082012][T18257] FAULT_INJECTION: forcing a failure. [ 3214.082012][T18257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3214.096131][T18257] CPU: 0 PID: 18257 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 3214.104602][T18257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3214.114676][T18257] Call Trace: [ 3214.117965][T18257] [ 3214.120907][T18257] dump_stack_lvl+0xcd/0x134 [ 3214.125536][T18257] should_fail.cold+0x5/0xa [ 3214.130069][T18257] _copy_from_user+0x2c/0x180 [ 3214.134777][T18257] move_addr_to_kernel.part.0+0x31/0x110 [ 3214.140441][T18257] __sys_bind+0xda/0x250 [ 3214.144710][T18257] ? __ia32_sys_socketpair+0xf0/0xf0 [ 3214.150027][T18257] ? lock_downgrade+0x6e0/0x6e0 [ 3214.154902][T18257] ? lock_downgrade+0x6e0/0x6e0 [ 3214.159795][T18257] __x64_sys_bind+0x6f/0xb0 [ 3214.164325][T18257] ? syscall_enter_from_user_mode+0x21/0x70 [ 3214.170246][T18257] do_syscall_64+0x35/0xb0 [ 3214.174689][T18257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3214.180610][T18257] RIP: 0033:0x7fe61bbeaae9 [ 3214.185042][T18257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3214.205363][T18257] RSP: 002b:00007fe619160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3214.213799][T18257] RAX: ffffffffffffffda RBX: 00007fe61bcfdf60 RCX: 00007fe61bbeaae9 [ 3214.221793][T18257] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 3214.229781][T18257] RBP: 00007fe6191601d0 R08: 0000000000000000 R09: 0000000000000000 [ 3214.237853][T18257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3214.245844][T18257] R13: 00007fff92f8020f R14: 00007fe619160300 R15: 0000000000022000 [ 3214.253847][T18257] 14:45:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1d}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x100000000000000}}}, 0xb8}}, 0x0) 14:45:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffff0000}}}, 0xb8}}, 0x0) 14:45:47 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000200000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000440)={0x0, 0x4, 0x1, [0x7c80, 0x3, 0x7, 0x440, 0x8], [0x3, 0x4, 0x200000000, 0x1f, 0xfffffffffffffffb, 0x7ff, 0x8, 0xbb, 0x1, 0x2, 0x4985, 0x20000000000, 0x100, 0x1, 0x4, 0x101, 0x217, 0xb, 0xaf47, 0x584, 0x1000, 0x200, 0x644a, 0x3, 0x8, 0x2, 0x1000, 0x0, 0x4, 0x3, 0x6, 0x0, 0x5, 0xd1ee, 0xffffffffffffffeb, 0x4, 0x100, 0xd8f, 0x7ff, 0x8, 0x9, 0x6, 0x200, 0x80000000, 0x8, 0x4, 0x4, 0x7fffffff, 0x7fffffff, 0x54, 0x8000, 0x0, 0x2, 0x5, 0xffffffffffffa0c9, 0x800, 0x3f, 0x9, 0xd22, 0x5ae, 0x6, 0xac, 0x40, 0x7fffffff, 0x1, 0xfff, 0x7fff, 0x8, 0x400, 0x8001, 0x4, 0x80, 0x8ee4, 0xff7, 0x0, 0x6, 0x3, 0x1000, 0xfffffffffffffffe, 0x5, 0x4, 0x74, 0x1, 0x200, 0x2, 0xda, 0x68a7c0bb, 0xfff, 0x80000000, 0x9, 0x0, 0x80000001, 0x1, 0x3, 0x9, 0xfffffffffffff800, 0x40, 0x1, 0x9, 0xfffffffffffffffd, 0x6, 0xbf9, 0x8, 0x1ff, 0x2, 0x4, 0x7, 0x7, 0x16c, 0x80000000, 0x9, 0x579, 0x8, 0x7, 0x800, 0x219, 0x7, 0x8, 0x59c7, 0x2, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000880)={{r1}, 0x0, 0x14, @unused=[0x9, 0x0, 0x1, 0x9ae], @devid=r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3a950700", @ANYRES16, @ANYBLOB="010090c9000000000000c3adac4c08000300", @ANYRES32=r8], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="07040000", @ANYRES16=r5, @ANYBLOB="43afe1e8000000000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000002) 14:45:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) (fail_nth: 2) [ 3214.673636][T18265] FAULT_INJECTION: forcing a failure. [ 3214.673636][T18265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3214.687711][T18265] CPU: 1 PID: 18265 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 3214.696154][T18265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3214.706229][T18265] Call Trace: [ 3214.709521][T18265] [ 3214.712485][T18265] dump_stack_lvl+0xcd/0x134 [ 3214.717107][T18265] should_fail.cold+0x5/0xa [ 3214.721639][T18265] _copy_to_user+0x2c/0x150 [ 3214.726169][T18265] simple_read_from_buffer+0xcc/0x160 [ 3214.731568][T18265] proc_fail_nth_read+0x187/0x220 [ 3214.736699][T18265] ? proc_sessionid_read+0x220/0x220 [ 3214.742011][T18265] ? security_file_permission+0xab/0xd0 [ 3214.747592][T18265] ? proc_sessionid_read+0x220/0x220 [ 3214.752912][T18265] vfs_read+0x1b5/0x600 [ 3214.757103][T18265] ksys_read+0x12d/0x250 [ 3214.761369][T18265] ? vfs_write+0xae0/0xae0 [ 3214.765817][T18265] ? syscall_enter_from_user_mode+0x21/0x70 14:45:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfffff000}}}, 0xb8}}, 0x0) 14:45:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) [ 3214.771749][T18265] do_syscall_64+0x35/0xb0 [ 3214.776192][T18265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3214.782111][T18265] RIP: 0033:0x7fe61bb9d69c [ 3214.786542][T18265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3214.806364][T18265] RSP: 002b:00007fe619160170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3214.814822][T18265] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fe61bb9d69c [ 3214.822812][T18265] RDX: 000000000000000f RSI: 00007fe6191601e0 RDI: 0000000000000004 [ 3214.830800][T18265] RBP: 00007fe6191601d0 R08: 0000000000000000 R09: 0000000000000000 [ 3214.838783][T18265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3214.846767][T18265] R13: 00007fff92f8020f R14: 00007fe619160300 R15: 0000000000022000 [ 3214.854776][T18265] 14:45:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:48 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000300000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 14:45:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffff7f}}}, 0xb8}}, 0x0) [ 3214.986890][ T26] audit: type=1804 audit(1636037147.980:3815): pid=18266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1850/cgroup.controllers" dev="sda1" ino=15598 res=1 errno=0 14:45:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1e}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:48 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x2, 0x0, 0xd8}, 0x10) 14:45:48 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000500000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffff80}}}, 0xb8}}, 0x0) 14:45:48 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) socket$inet6(0xa, 0x6, 0x5) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400120b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000) 14:45:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 14:45:48 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0xa, 0x0, 0xd8}, 0x10) 14:45:48 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000600000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffff9e}}}, 0xb8}}, 0x0) 14:45:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000000000000}}}, 0xb8}}, 0x0) 14:45:48 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0xf) [ 3215.776117][T18306] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:48 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000700000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3215.956434][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x21}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x900000000000000}}}, 0xb8}}, 0x0) 14:45:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfffffff0}}}, 0xb8}}, 0x0) 14:45:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000003140100000000000000000009000200737900000800410072786500140033006970365f767469300000000000000000880d42f43275a6e7af22ad5b3439715fd9a5e13b312256dbe98092d532c6a01cf07abbdf7f6f1402eb08179d3c86498e9b101b37a60630c2b9d7d36fb7610969b32360d09c60e8341c3e7ab7673c3d7170c87bcaa9e31e2db4730b1c35ffb529ac04efb64914d855bc4c192875cdb9754e506ebd45901356f0d4c0aba4d64d5e8b5f834293b8b981db1135951cd317ff5a8a3ba2afb5db28a4884798926b307117dcadc858a2a7adb6b3e64f00000000"], 0x38}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRESHEX=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100013070000000000000000fc02000000000010009d000000000000fe8000000000000000000000000000bb0000000000000000000000000000e600", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000005000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000800160001"], 0x140}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="dc66fcff04000000850000004c000000207bf0ff0c00000009690002890000001836000005000000000000000000000027390f9353856546e2263ae98586c5c557d46ee2d9c39a47580b9e43e3145d526cbf2269954b5963f1f4ee000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0xdb, &(0x7f0000000240)=""/219, 0x41100, 0x13, '\x00', 0x0, 0x5, r0, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x6, 0x20}, 0x10, 0x0, r0}, 0x78) accept4$ax25(r3, &(0x7f0000000480)={{0x3, @rose}, [@netrom, @null, @default, @bcast, @remote, @default, @remote, @null]}, &(0x7f0000000500)=0x48, 0x80000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000e80)={'erspan0\x00', &(0x7f0000000d80)={'gre0\x00', 0x0, 0x7800, 0x8, 0x80, 0x8, {{0x31, 0x4, 0x0, 0x5, 0xc4, 0x66, 0x0, 0x81, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0xab, [@dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x18}, @empty, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x31}, 0xf79}]}, @lsrr={0x83, 0x1f, 0x2b, [@loopback, @multicast2, @remote, @empty, @broadcast, @rand_addr=0x64010100, @remote]}, @timestamp_prespec={0x44, 0x24, 0xcc, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@local, 0xbe}, {@remote, 0x9}, {@multicast1, 0x5}]}, @lsrr={0x83, 0x7, 0xde, [@multicast1]}, @ra={0x94, 0x4}, @end, @generic={0x89, 0x3, "cd"}, @timestamp_prespec={0x44, 0x34, 0x2f, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x42}}, {@private=0xa010100, 0x6491}, {@multicast2, 0x3}, {@local, 0x4aa}, {@private=0xa010100, 0xf6e0}, {@multicast2, 0x400}]}, @rr={0x7, 0xb, 0xce, [@multicast2, @multicast2]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@local, @in=@multicast1, 0x4e24, 0x0, 0x4e22, 0x2, 0x2, 0x80, 0x1a0, 0x4d, r7, 0xffffffffffffffff}, {0x1, 0x7fff, 0x100000000, 0x6, 0xa12b, 0x200, 0xffffffffffffff01, 0x7}, {0x9, 0x7, 0x154, 0x9}, 0x75, 0x6e6bb7, 0x1, 0x1, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x6c}, 0xa, @in6=@empty, 0x3502, 0x3, 0x0, 0x3f, 0x0, 0x200, 0x6}}, 0xe8) 14:45:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x20000090) 14:45:49 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000800000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3216.434258][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:49 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000007c00000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x1, 0xbdb4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000100)=0xaa0f58259dd2547a, 0x4) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) openat$cgroup_ro(r3, &(0x7f0000000140)='memory.swap.events\x00', 0x0, 0x0) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) [ 3216.489433][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:45:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xe00000000000000}}}, 0xb8}}, 0x0) 14:45:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfffffffc}}}, 0xb8}}, 0x0) [ 3216.544608][ T26] audit: type=1804 audit(1636037149.540:3816): pid=18323 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir175935305/syzkaller.zDcqJ9/1852/cgroup.controllers" dev="sda1" ino=15620 res=1 errno=0 14:45:49 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000f000000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x0, 0xd8}, 0xfffffffffffffd5e) 14:45:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x22}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffff00000000}}}, 0xb8}}, 0x0) 14:45:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xf00000000000000}}}, 0xb8}}, 0x0) 14:45:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000001c0)={0x23, 0xfd, 0xd8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002010}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0x6, 0x3}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)={0x1, 0x20, 0x4, 0x9, 0x1, [{0x7ff, 0x6, 0x100000000, '\x00', 0x300}]}) write$cgroup_type(r1, &(0x7f0000000180), 0x9) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) bind$phonet(r3, &(0x7f0000000140)={0x23, 0x3, 0x4, 0x20}, 0x10) 14:45:50 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000003000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c80)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048800}, 0x4890) 14:45:50 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000005000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1810000000000000}}}, 0xb8}}, 0x0) 14:45:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x28) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x0) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x40030000000000}}}, 0xb8}}, 0x0) 14:45:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r0, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0x1ff, 0x8}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0xd3) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 14:45:50 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000006000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x23}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2f00000000000000}}}, 0xb8}}, 0x0) 14:45:51 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x7, 0x80, 0x8}, 0x10) 14:45:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf0ffffffffffff}}}, 0xb8}}, 0x0) 14:45:51 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000007000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001800378008000100677265e70b0002"], 0x40}}, 0x0) 14:45:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x100000000000000}}}, 0xb8}}, 0x0) 14:45:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x6000000000000000}}}, 0xb8}}, 0x0) 14:45:51 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0xc3, 0xd8}, 0x10) [ 3218.655794][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:51 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000001f000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3218.723421][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:51 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$bt_hidp(0x1f, 0x3, 0x6) socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) sendfile(r3, r3, 0x0, 0x99) socket(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x5dd, 0x40012062, 0x0) 14:45:51 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept(r0, 0x0, &(0x7f0000000180)) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8018000a8014000700fe880000000000000000000000ecae6604e30a3f8bf8131e66989a970b15d722d7d95effe1fcc6c112bbcbc5bf303defe3f3dd34b06503e2a279ba19e7622c960c27e58947696be2"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x4, 0x1, 0x8, 0x3, 0x19, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x40, 0x80000000, 0x1}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x9) r8 = accept$phonet_pipe(r6, &(0x7f00000000c0), &(0x7f0000000100)=0x10) bind$phonet(r8, &(0x7f0000000140)={0x23, 0xff, 0x5, 0x6}, 0x10) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x1, 0x4, 0x4}, 0x10) [ 3219.090884][T18411] lo speed is unknown, defaulting to 1000 [ 3219.160152][T18411] ip6_vti0 speed is unknown, defaulting to 1000 [ 3219.386642][T18411] lo speed is unknown, defaulting to 1000 [ 3219.445183][ T26] audit: type=1800 audit(1636037152.441:3817): pid=18412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=14609 res=0 errno=0 [ 3219.447484][T18411] ip6_vti0 speed is unknown, defaulting to 1000 14:45:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:45:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x200000000000000}}}, 0xb8}}, 0x0) 14:45:52 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000003f000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4a}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:52 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) getsockname(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) 14:45:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000c00)={'ip6_vti0\x00', {0x2, 0x0, @local}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/167, 0xa7}], 0x3}, 0x4000) write(r2, 0x0, 0x0) close(r2) 14:45:52 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) accept$phonet_pipe(r1, 0x0, &(0x7f0000000000)) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x300000000000000}}}, 0xb8}}, 0x0) 14:45:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x9effffff00000000}}}, 0xb8}}, 0x0) 14:45:52 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000007c000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:53 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) bind$phonet(r0, &(0x7f0000000080)={0x23, 0xb1, 0xd6}, 0x10) 14:45:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:45:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x400000000000000}}}, 0xb8}}, 0x0) 14:45:53 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000f0000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:45:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x700000000000000}}}, 0xb8}}, 0x0) 14:45:53 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000fffff00000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:45:53 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getqdisc={0x28, 0x26, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xb}, {0xe, 0x2}, {0x8, 0xa}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) 14:45:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:45:54 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000100000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x900000000000000}}}, 0xb8}}, 0x0) 14:45:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x1b, 0x1000, &(0x7f0000000040)="140ba2211e9de4c3ccd2f59adb0817d87e2a1fcd31388a97dd11e8", &(0x7f0000000700)=""/4096, 0x5, 0x0, 0xdd, 0x1000, &(0x7f0000001700)="4113e306c7416216e69fb195933595f6591f2a1be82eb035b732568436107706a71767ea8c823a1a097e20fe1dca36b710bf97e7bdbe027bc704f017352fc58a01696f794424abe70c9965b230782f2e03bcd1553288d08bb1ef5f19ad9eee00dcc4217e0d1d6e35404f189ad4b91910f2c741e2acbec9dc13c8273e12eb30f75e9762eaa652f2f82b15476700e70860ecea0391681e921bf39aa446af479b9119a454a3edea6d7032bce442e053d8982ae47c478784c047f614fad880e63cf05d2893de90167ea0a48025cb0b1da8327bacb1c6ef9103afefe893f210", &(0x7f0000001800)="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", 0x1, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe80, 0x2000000, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14:45:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:45:54 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000012, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) pipe(&(0x7f0000000000)) [ 3221.609713][T26477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:45:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x300}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:55 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000200000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf00000000000000}}}, 0xb8}}, 0x0) 14:45:55 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:45:55 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) sendto$inet6(r1, &(0x7f0000000000)="1cb1a95cc8588a7434d2082a91fbb99107ea08d93d8bce154471ce14ef31b272158b26177d9d3ca33fc752504c15654c27a6cf37b8c60688af04c199fec19a064d45", 0x42, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @local, 0xa408}, 0x1c) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x2, 0x3e}, 0x10) 14:45:55 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000300000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:55 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000008000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r1}, 0x10) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x12}, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000001c0)={{r2}, "3f9899659d57bbbbc7861a46cfefb27ccb53d6923d5fba9c0d136bd310d80fce23fd13bb2db8658d1837bdc46410a49d3dec7cc59c91e4077ef704019e601bbfccde78755d2e1ce09ac924d2a50abf39410e5298619425b2a9b950050c7b7f15226dafac1b00b2d0dcbe9ec29707e0b3857560680b3de49a113d2195be13e834261dd8c3055f3b6a17407b5ad41489fd2f19df2ef92a1a33cfd41a40ad2df571f173b42bd338c7c5a8a6be33e15ab90e3fe61b256069a319ac24e022bef1f5f1f7e9b1b1dcf3b73a5b404e72de9d97049fba5c687fca375f784dbfa08cf922328e5132911818a3a1115699f24b08bd37cea1e3bd06a22d82d48146641b7c640e25069fd519d55814e2922da2fd7c3b8ae6003568a7ac41c74f41e0f8e761858f5d1c2f1bc8e3e2d6c2a97c6979c4867cf9811f907e15557b60e4a3a76b27d2a8038b7fe22add8ad1a8773a5dafddd68ed1a267a4948e197382eb040ed64c40014bba259a5af27909d3a82143f0c7443f369e833f53980bca611822b0696d41ae08c77be32e02c00d47750a0d9aeadc23a109cf1b59c2acd9d6dcaadf38630f90280e779137d2a8b07556d0e53b15a3efb8f4431ef28d4ebbb736cf686c485f76a5160bab9b68b6a4c4389497782f8331ffd8c2abf48b2b769ff4d00b94c03eefe59c2e9c18db18c5af3f230bf4cda0e00bcc230a4f038bec68f021c280f2633c322bae06d390b15a18af0cd2b5776e43a7f9341f656c527eb447e780ed9e886c1486a44fbf2cb73da181e56b0fcf51ac8c0de86f6d766e25df7f29289d77ee0719263ce3f7db2488bf3862535d967adacfb91c42aeeac81ef081a8f96e5c9116266b0705fc4f4ae0fa9c31d4fd89c80c54214d63f9148e871c3f7c321c0096683d4a5ab1f8b82524011fdd87c10d0b7e9b858c187512093f054b77a96eb6aaa801197f2d4976a247a2faaf4feaf79d509f7aa6d9265d845169c65bdd61bb2bc65d68a05f1fa45e2a7a56f866704cfbe5eb057e17e97f03c7e1e5ce53ab6164aa4fd89cc70b30f642b61a4fa51f1dbe6e08c4cb27c7330fe79ac97fd138e93f9253bff7f74316c933932624031d3901a3224e500f7077a95e7ff8d2cac4aa68652c59aa10121da7adbf03bac61d84a3272670ee241af68c308a612271643102dffebe9e008710177f7b787175305bafbda9fde44285255df909059d7ecfc1a49fe16f8e351806ffabb01e24a575a9e677165bd4afb23d179922db94193583192629843c1547dceb513098a9f6f6a27d8fe95cdad8c74d338608a5c648ae93b50f091a67b7f500e4b2b63fa9278645447c4b69be13bc63ea2432a708859b2af9e80bc51501cb9f6658fa8b094ca4a5fb6264e1a7f3f72b6fbf429d0662d4b1fa04ac67e9ac19a98c4b3debf3683d878505b31ff3f589b709cc1f60fa87082eaee67c7f5602f96fe3843e6bafbbe7dcd9f78697deea8491d28069638f904b7cb0a6ba2efaeb77261b6e9614904bfa48dc683eee049e9c3e9346a28f0e4e865b7388c4540d06ff32bc3b6fae6d163f04120dab21c9ed0312fd7f709c3bf2679497e1e85704b7d3378076a815d852f53e044c99158ef4a26b84b3f3989e1144fd16fbfebbab93db697ab81a0746a4e98630a53311f3aa8cb501cbd15ac1466de5aa96b6253fd2b3ecd5f2be6af823de296e85c8265d15a2bd1ed5335e381783175b6be8526eba630643e4c0647b060e63374d0958280e155a26839777bd254d3a0e38acbf93a0ab1d4f71de2024c770df2f9589397f5fbe22e89196b494621ee830861f324c3d6c2bfeabc7ceafe47fa67f4d6123597c5f7dc14d4a9948107712a2376026f6fd8fe3bb4dd662c9ffdc47629bac3845e36b7aeefc5465673bac5ff22b40dab60fcf93804a61f1342d6c44ca7c4d907cd53a0e1a5605ef7fa6007e9765cca3180c04cc4691a694a0582b6838ba2f3967742f7d96ff6f7ae09dfd5ea331a54326a111491943b6ad5ebb96e7253c6becdfc5896899051a3d79aad6eb662e64d2127bbaa4357c4343cff2a21ca254949a68c5f711e5dff85ce8c8e583c94ff5575c761ca169cff35803adc1698f71c6bc0220f87a9f66c0557db089278a60d2466e70ea01ac571c406db4c8cacaf79486975aeddfa35716a568d35b26ee39b0f0f0755fa3d59ed040db1ba762647bf0dd4509a056503052cf544b0f788e8b137624241cc6d5bbd854e6ecb6727407180719ee29fea3feeaddc49db0d74b0e0395e55e8df8c52be848cda5c33165a54a34d040c7d860a0ab5b793d5c1b2b46fca39275451d9358c1b4ab6682da751dfdab8e9d9dd64db0f43624ebd5db0ff2e92925de9b4aeb2d1400c6dbe5dac6e120aae2c2dfa590bbd3c5fce4170a6fe99179f3def746a409b38754b8afe8f912502dc0158eb823a5197e3537873afe8bac98523bfd77888ef5d1aede06e9cf6264834bffe2a0555c67916a47abd8648d2d724fdd8a7333ba6e06f96637bacdbe72c6f0fa26eccc7db1dd87db997361801dd4584a46c3d262c20ec947fcc9abb7600e0692337e7809fd09585e3303cd4cce5e98a90fe43b1195cdd662af47c698e43c853a7f43496d3296793427c4aa20c6aba8c50b786f821e0ea5347de06dd44783f4a381768a5cdf7daaeb8df3b884d797723c6cc583276e5b40f8e4dc698d6a5520f2f3066bdef209c522792411d543f4a81d8159242312be3501333777bb2b2e0d9059894740927b3b723ad70606bcd7b9b1565ff0f1ac08f26929e187bd790d4f2ded129ca9f9322d5437464ec6b6693ac4e2d449ca3ab9d6609fbff42ec4130d81b89377f709d56eac3caa1b75a68a255d49fbe40c0ac64d012fd014d07a0c37d94624784ef7e7b1cf529de831908441ab9f5b6910c081d029f83cc7f51b859a505c2ca2cabeabd7aecac618a00fbc8522349c4d6b6100b71ac8c3759408d07f9023af4bfb66127e608a39a798df52ac703c2b9a66ada04b42fef1bc3fa75d0696a4afd0862786e1005a6c191ec538f8544656155b9cba99524ef26fa8611da01292bcf6d6f7c3a6507172677c038e7a3cb9c9c24432d8f67b95ed2b2add5ce2d21b24570e00d75ce6d97e457b51108d9a891eb42f885f21ffa4a07d513b8c17808ab6009b4d25464f84542883600c83944b816a5e5ea499af2fad644b714407d89b2f843e015fa5ac3cafb2dd58eaf1a8cba4c08bf7cfb15487028c3b1f894d0403d9b6b8d107ab650b9fbaa64a6eeb2f1fea2e2bd54ba061b84baf395f509acf64c301828ef5b85764f6c7738e6ec097c7e4ba989b6d89de989a297d245bbc67c389f9b5fccc4862f22d50a20758ae0a045769b9016079b51a57f7195fcf4dd25c08a94c43347be4b56072d91300a84c5976129295f1cddec906237a2dcccb2cd2bf5f1264f519cc561c3e3d07fac6b0f7cdcd8ba4ce255597370b4bb889c9f97f0336f4dbac0d1d3f3f0ef2d58622ee4a8ba6751ca60bd9c646538dfe46b40f10137b94ad334baff25d2454e9adc883460ede6ff68e1e2a2beee193d981ff769bb75f5c6823c712d44083a73f1a618831bf5397fd3661d8e3b36bdd0c657b4a3213e452073341ec2b8e094812d83ba464f3cb63c0c470d446935c34b4999bd941bc94275e03a0d7a8061166a399147da4ae8d3b3c6556581759258c869cef792b3fdcc36d0a1ac688b30fcf0849b80563a895037c4acd783307fecbae3f31f42e7da561a0b330cc530389879ea07bec2ec51869cd145e73207c558d5ead510478fc41d03e6ca098a4e2a73337b2eeffc8202ac1131c0fe28fccb1470d868bea5f42c8339e232eb08f3fd0ea9e64fa05251a69e49426ee0b0efb7fb64fdb1cc69e1b11cefcfea66645e06519c5f79afb65256e184f468699a16106867289c05a3f3de4d5329cdf8f9c936ae52253beb8405dfb92355e9e5d00006a610422ec7dad89cd546e591c3a57292ebdee9aff0469e6426db22832e68ca9df44d42959c55b648e18890614f5296f16bd41372ee75aac1af2ccf7b3d0840c5182aaaa72b0ac28ec8e9be1129207c9377d767845bb1eeccad3921f5ea1c914ee2e59564ebbde1960670a27afd917eead48399a6e51df5da97bad4115e817023ce8d83870dfaf2f48a75e856bc26ae8efe4fb1f4518e93394dc3ec74a3832cd5fcc8ef31ab289c1d6278d5b7f010fe06eb89fbc918f41c9fbca9418d8490786592fbaec37570ece66ad19100aa46b81d592b6f828753cb0aea7c0cadd706d695a92e591236dbac537d30d6813dcb6e09f0d803939b7280dc889a357f277c7a7df226feb4d3ebc7752d63f427bde9c0ef240e72611370954ffeafa7a32e381aab72d03a2a91018e57af0a1fdd72544b0fec8f29cad9fd339d384a7a7303fe30b02ef3f41aec99fba098216940a881007b4919c0b33a36f00bfe9c5fcbaf54673a743e2f2c277ce033fd107d40b8a30d35c000794fab2afa97d202b7bfcf66c742362e2d573b00d7385087e4e18bdee2969df82edb5148d3d6b850db5de821c8f757680eb997058c5f602e7588ed3eb419d681647f87d5a1fc552715bd4b2080eac1df7d1b1c00de72a9c7ec4e42b4c900ef7d035d9651d273834c177842b21c10f344007fca1727d81ec1360628252149d9145d390eb8de4874bef1c4ba3a86727ad940b2399faf04167add20781b697927d8769f17358255be6fd2d4e8ada1bc5421b03ecb0521a22fbe9a0e078c4e6c37d249e9d0e3687fdc937279779874a377052b2f7edddb80f05218637cdd34df12443fdf9ef279b4d3fe0b5f10a887b68b8b48989e02c3d542d42e236111f743096dde2f62c5e1170f1fa39bb97330f17312a605a55163dc206273f7025658331659a10bdcd5d27665100321e9dc93fac138af49d623d7acc06671f47e64c530deceec5a7b75c2298892146fa57e8da6ff6be6403d697ba86d0792034eba1b656e5b76622901db662d8dd93acfb2e8979e6304115899565cf97ba2d3aee1310a60a548520e6d4065abfb45e98954fb2e02b8460851aad630c15a66e1e5a84171fc669269b6562f6bbd57f861c0f0810c74c69bec1ff42bfd274f707d2ba0bafae7b3a4478296001c2e3c6c6104de21e79a90e470b58d46e5a0b324a044d592658b7aa8c6a1ffaa642b35d14fdfe75b2706010913bb56679718c825c938e197abc4fdfc5c092342b284ea775c6b8bcd6a2333886f30f11d80111efd25eff4831d80acdd8002e8feac269ad577f5431687270a649d95c8867aa7ce60aba2fa57ed1481fbd980d63fc64920221158d59f496f0deb13c76bb9cf49f5e2dd02a2a45db768bb916b28014dbb24b7617a15fc51838ba2a172f04a2bee027f6519a259769fcd3e655a3c601eadc4c98af567e888726f6edf678abcb094217433184d6ed1af6737ddde03973b57d707b212769303417981ae6a84c8d93399963b269a0160898824324de277af494eb7b33f37c1ae4ee8336e5eba7e1edd643294862627fb0be7d9f33983d5bb94a287deeacb580d3edc3ce2564103b0def866495b495072ff7ca010494dbc1606ebad1e76eaadebcd852cc7512ad572711ef88ee8a9f8053c6d1d69529960fa23839864be6497fa22abcc5c5dde69eefe4efe42452a2228db66ea03800f7d5a68a31d81542ab0e3685d2a89dc54ab72aa77439323402898a74d3d5dd9a882b8defd919c40439427605d7e50e2def421a02f2bc9c7c24912ab24978f875576af4be1245941bdad1abf4f17149931d930752"}) write$cgroup_type(r0, &(0x7f0000000180), 0x9) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8, 0x9}, 0x10) 14:45:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 14:45:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2f00000000000000}}}, 0xb8}}, 0x0) 14:45:55 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:55 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000340)=0x80, 0x1000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/95, 0x5f}], 0x1, &(0x7f00000001c0)=""/253, 0xfd}, 0x3}], 0x1, 0x20, &(0x7f0000000300)={0x0, 0x3938700}) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x9) accept(r5, &(0x7f00000006c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x80) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@getpolicy={0xe4, 0x15, 0x2, 0x70bd2c, 0x25dfdbfd, {{@in=@multicast2, @in6=@loopback, 0x4e24, 0xff, 0x4e20, 0xcb73, 0x2, 0x20, 0x80, 0x2b, 0x0, 0xee00}, 0x6e6bbe, 0x3}, [@encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x14}}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d3, 0xff}, 0x2, @in6=@local, 0x3503, 0x3, 0x3, 0x80, 0x22, 0x9, 0x2}]}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd2c, 0x70bd26, 0x70bd27, 0x1, [0xd9f5]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x20008811) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@bridge_getvlan={0x58, 0x72, 0x0, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 14:45:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x500}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 14:45:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x6b04000000000000}}}, 0xb8}}, 0x0) 14:45:56 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000500000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:56 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:56 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000600000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:45:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x8}}}, 0xb8}}, 0x0) 14:45:56 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) 14:45:56 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:45:56 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000700000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:45:57 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9effffff00000000}}}, 0xb8}}, 0x0) 14:45:57 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:45:57 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000800000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5fe}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xe}}}, 0xb8}}, 0x0) 14:45:57 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f00000001c0), 0x9) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$cgroup_type(r4, &(0x7f0000000040), 0x9) connect$phonet_pipe(r2, &(0x7f0000000000)={0x23, 0x4, 0x3f, 0x3b}, 0x10) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x0) 14:45:57 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000001f00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:45:57 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:45:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf}}}, 0xb8}}, 0x0) 14:45:57 executing program 0: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x80) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getlink={0x2c, 0x12, 0x10, 0xc0000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4040, 0x44308}, [@IFLA_BROADCAST={0xa, 0x2, @random="5dbdd6ecc8a4"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x2}, {0xfffffffffffffcda, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8040000640000022dbd7000a60c000000030000", @ANYRES32=r4, @ANYBLOB="f3ff0b000f000800080001000600050002f9000008000b000800000008000b000100010008000b0003000000060005001e3f000006000500011f00000c0001007463696e64657800400402001c0406000c0008000200000000000000080005000000000004040200050000001f00000001000000ec5400003d00000005000000a10e0000df90000003000000060000000500000055dc6f73c15d0000050000000000000080ffffff0000008005000000bc3697240800000081ffffff7f0000000300000003000000010400000700000008000000040000000700000007000000ff0300000300000001010000040000007f000000040000000180000002000000070000000800000000100000040000000300000040000000fbffffff0101000001000000030000000002000008000000000000803f0000008000000003000000080000000000000004000000030000000200000007000000f2000000000000000800000006000000050000000900000003000000050000000000000001000000000200000500000000feffff2d03000009000000e50000000500000004000000000100000600000000000000eb38000005000000306a5c4305000000080000000100000006000000030000000600000005000000af0300000200000009000000050000000100000009000000840900006797000000010000fa430000000000000800000004000000050000001f000000ffffff7f02000000040000001f0000000500000000010000757900000600000005000000ff0100000200000007000000713700000800000006000000060000000100000005000000d2000000090000000300000001000100ff030000fe080000000000000600000002000000b6570000060000000100000008000000b2000000070000007f000000200000009f41ffff2004000003000000040000000400000004000000b9a60000c7d30000020000000000000000100000ff0000000001000000000000000000000900000000010000090000000600000001800000018000000100000000000100040000000100008000000000ff070000ff07000007000000000001007f000000ffffffff000000006e000000080000000800000005000000080000000500000006000000ff7f000000000000c0ffffff050000000300000006000000000000000700000001000000010000000900000000000000b69492c903000000ffffffffa26b000001000000e500000000000100d50000000600000006000000000001005d0d0000ff0100000200000000000000ffffffff0000000007000000cc0a00000000000004000000df000000080000000200000000020000a9000000000000000900000007000000c0080000000800003f000000050000000200000005000000880e00000900000006000000e0db0000020000000200000003000000000000000900000005000000080000008000000002000000000800000080000001000000200000000200000005000000050000000400000000000000f3000000070000003f0000000080000001000000c4080000080004000100000008000300d80b000008000100e98c00000600020008000000060005000f200000"], 0x4a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000680)=@req={0x3, 0x69a, 0xfec7, 0xfffffffd}, 0x10) 14:45:57 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000003f00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x2f}}}, 0xb8}}, 0x0) 14:45:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:45:58 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000007c00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3225.161220][T18648] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3225.205850][T18653] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 14:45:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:45:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x60}}}, 0xb8}}, 0x0) 14:45:58 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:45:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0xf3, 0x4, 0x0, 0x2, 0x1, [0x80, 0xc0000000, 0x3, 0x3]}) 14:45:58 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000ffffff8d00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x600}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 14:45:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:45:58 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000fffffff500000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf0}}}, 0xb8}}, 0x0) 14:45:58 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:45:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f00000002c0)={0x23, 0x10, 0x3}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) 14:45:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:45:59 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000f0ffff00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x300}}}, 0xb8}}, 0x0) 14:45:59 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:45:59 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x3fffc0000000000, {0x4, 0x8000, 0x266a, 0x0, 0x26bf}}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:45:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x900}}}, 0xb8}}, 0x0) 14:45:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x2}}}, 0xb8}}, 0x0) 14:45:59 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000008dffffff00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:45:59 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:45:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x700}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:45:59 executing program 0: bind$phonet(0xffffffffffffffff, &(0x7f0000000140)={0x23, 0x66, 0x4a}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x100002, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x10000, @struct={0x0, 0xff}, 0x0, 0x1, 0x4dd60418, 0x1, 0x8, 0x1ff, 0x6, @struct={0x3, 0x3}, 0x4, 0x1, [0x0, 0x7378, 0xc745, 0x100, 0x8001, 0x2]}, {0x3, @struct={0x1, 0x2}, 0x0, 0xdbc, 0x6, 0x5, 0x81, 0xfffffffffffffffe, 0x60, @usage=0xffffffffffffffc1, 0x9, 0x2, [0x1, 0x7f, 0x8, 0x400, 0x4, 0x1]}, {0x361, @usage=0x3, 0x0, 0x1, 0x80, 0x8, 0x8, 0xfffffffffffffff8, 0x0, @struct={0x1, 0x1}, 0x3, 0x3, [0x5, 0x80000000, 0x9, 0x100000000, 0x401, 0x3f]}, {0x6, 0x34, 0xcf}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000005c0)={r1, 0x80000000, 0x1, [0x100, 0x5, 0x1f, 0x9, 0x100000], [0x26b, 0x6, 0x0, 0x80000000, 0x9, 0x5, 0x800, 0x8, 0xffff, 0x0, 0x8, 0x1, 0x8, 0x8, 0x4, 0x9, 0x3, 0x0, 0xab80000000000000, 0x5, 0x6, 0x100000001, 0x3f, 0x20, 0x2cb, 0xfffffffffffffff9, 0x5, 0x0, 0x200, 0x1, 0x9, 0x4, 0x5, 0xd4f, 0x5, 0x40, 0x2, 0x7, 0x100000000, 0x9, 0x10001, 0x2301, 0xfffffffffffff10e, 0x1, 0x101e, 0x0, 0x1, 0x9, 0x0, 0xff, 0x5, 0x401, 0xffffffffffffffff, 0x7f, 0x6, 0x4, 0x46, 0x1000, 0x8, 0x9, 0xa57, 0x3f, 0x7, 0x7ff, 0x58a, 0x1325, 0x7fff, 0x4, 0x7, 0x874, 0x5, 0x1, 0x3, 0x5, 0x1, 0x400, 0x800, 0x0, 0x0, 0x1, 0x2, 0x7, 0x0, 0x8001, 0x3, 0x2, 0x6, 0x7fff, 0x6, 0x1, 0x7, 0x7, 0xfffffffffffffff7, 0x1ff, 0x800, 0x2, 0x6e80000, 0x2, 0x3, 0x3, 0x4, 0xffff, 0x2, 0x8001, 0x84, 0x8, 0x10000, 0x6, 0x4, 0xe1, 0x7fff, 0xfffffffffffff949, 0xe0000000000000, 0x7, 0x200, 0x5e6, 0x559, 0xd0, 0x2, 0x2, 0x1]}) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x6, 0x81, 0x7f}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0xfd, 0x0, 0x7f}, 0x10) 14:45:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x3}}}, 0xb8}}, 0x0) 14:45:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xe00}}}, 0xb8}}, 0x0) 14:45:59 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000f5ffffff00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:00 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000280), 0x4) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x4}}}, 0xb8}}, 0x0) 14:46:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf00}}}, 0xb8}}, 0x0) 14:46:00 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000000ca000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x7}}}, 0xb8}}, 0x0) [ 3227.369954][T10477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1018}}}, 0xb8}}, 0x0) 14:46:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x900}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:00 executing program 0: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) bind$phonet(r0, &(0x7f0000000080)={0x23, 0xa4, 0xe, 0xd}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="1599365af72b55d312e88208ec1c6edd054e72f436649aa5caa7d6d2fa48e96fcc15cd2b678d6f181f1ffe382184474d138d6e81131e5c65267d6b74599274ab16c41693506b7844f068a32a443f1f502ea9f05198676393966ffb0f36f62ef62a9509e6741b4a6242e074c8932ddb", 0x6f, 0x10, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001d00)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000001e00)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001f00)={'tunl0\x00', &(0x7f0000001e40)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x3, 0x8c2, {{0x27, 0x4, 0x2, 0x34, 0x9c, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, {[@ra={0x94, 0x4}, @rr={0x7, 0x17, 0x25, [@broadcast, @broadcast, @local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x24, 0x25, 0x0, 0x0, [0x3, 0x80000001, 0x0, 0x10000, 0x5, 0x8, 0x0, 0x8]}, @generic={0x83, 0x4, "fc7a"}, @noop, @ssrr={0x89, 0x1b, 0x7b, [@broadcast, @multicast1, @loopback, @empty, @broadcast, @multicast2]}, @generic={0x88, 0xa, "3c3856612b53b612"}, @timestamp_addr={0x44, 0x1c, 0x39, 0x1, 0x2, [{@multicast1, 0x90ad}, {@loopback, 0xfff}, {@empty, 0xffffff22}]}]}}}}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="d0050000", @ANYBLOB="d20b81615559663e22f058642c77c357e039a4f9d9b992f5ae263b97781d22e10fe50d88b99bf2a605bdf6bdb03ac0c79f607d646c65c51bf2401b2521d7d0f71da6e1c31ad6fb3810d031ff830b7718cb90128ba008e67c", @ANYBLOB="00010808000100"/18, @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004004e04000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001f00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="00010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f9ca000008000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000838000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cb15288b08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000010000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRESDEC=r5, @ANYBLOB], 0x5d0}, 0x1, 0x0, 0x0, 0x24008810}, 0x4000000) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000000c0)) 14:46:00 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:00 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000000f0000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x9}}}, 0xb8}}, 0x0) 14:46:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1810}}}, 0xb8}}, 0x0) 14:46:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf}}}, 0xb8}}, 0x0) 14:46:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x2f00}}}, 0xb8}}, 0x0) 14:46:01 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000002000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:01 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) 14:46:01 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x2f}}}, 0xb8}}, 0x0) 14:46:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xa00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0xb8}}, 0x0) 14:46:01 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000003000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:01 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) clock_gettime(0x0, &(0x7f0000006f00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/239, 0xef}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/3, 0x3}, {&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000600)=""/117, 0x75}], 0x9}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000003840)=[{&(0x7f00000007c0)=""/31, 0x1f}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/10, 0xa}], 0x5}}, {{&(0x7f00000038c0), 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003940)=""/95, 0x5f}, {&(0x7f00000039c0)=""/175, 0xaf}, {&(0x7f0000003a80)=""/43, 0x2b}, {&(0x7f0000003ac0)=""/16, 0x10}, {&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/238, 0xee}, {&(0x7f0000003d00)=""/248, 0xf8}], 0x7, &(0x7f0000003e80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000003f80), 0x6e, &(0x7f0000005580)=[{&(0x7f0000004000)=""/244, 0xf4}, {&(0x7f0000004100)=""/145, 0x91}, {&(0x7f00000041c0)=""/19, 0x13}, {&(0x7f0000004200)=""/61, 0x3d}, {&(0x7f0000004240)}, {&(0x7f0000004280)=""/238, 0xee}, {&(0x7f0000004380)=""/5, 0x5}, {&(0x7f00000043c0)=""/175, 0xaf}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/195, 0xc3}], 0xa, &(0x7f0000005640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000005680)=@abs, 0x6e, &(0x7f00000057c0)=[{&(0x7f0000005700)=""/187, 0xbb}], 0x1}}, {{&(0x7f0000005800), 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000005880)=""/236, 0xec}, {&(0x7f0000005980)=""/204, 0xcc}, {&(0x7f0000005a80)=""/11, 0xb}, {&(0x7f0000005ac0)=""/204, 0xcc}], 0x4, &(0x7f0000005c00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005c40), 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000005cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000006d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x7, 0x2020, &(0x7f0000006f40)={r1, r2+60000000}) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000004240)={0x23, 0x0, 0x7f, 0x93}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000006fc0)={0x5, &(0x7f0000006f80)=[{0xe38, 0x20, 0xc1}, {0x8, 0x2, 0x81, 0x8001}, {0x1000, 0x20, 0x8, 0xfffffff9}, {0x3ff, 0x1, 0xf7, 0x6}, {0x8001, 0x6, 0x0, 0x5}]}, 0x10) 14:46:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf0}}}, 0xb8}}, 0x0) 14:46:01 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf000}}}, 0xb8}}, 0x0) 14:46:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x300}}}, 0xb8}}, 0x0) 14:46:02 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000c80)={0x23, 0x81, 0x80, 0x20}, 0x10) r2 = socket(0x1a, 0x2, 0x0) bind$phonet(r2, &(0x7f0000001600)={0x23, 0x8b, 0xf0, 0x81}, 0x10) 14:46:02 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000005000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x34000}}}, 0xb8}}, 0x0) 14:46:02 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:03 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x46b}}}, 0xb8}}, 0x0) 14:46:03 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000006000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x400300}}}, 0xb8}}, 0x0) 14:46:03 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x700}}}, 0xb8}}, 0x0) 14:46:03 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 14:46:03 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000007000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 14:46:03 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x900}}}, 0xb8}}, 0x0) 14:46:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:04 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000008000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0xb8}}, 0x0) 14:46:04 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x80, 0xd8}, 0x10) 14:46:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf00}}}, 0xb8}}, 0x0) 14:46:04 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x2f00}}}, 0xb8}}, 0x0) 14:46:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0xb8}}, 0x0) 14:46:04 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000007c000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:04 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x20, 0xd7, 0xf}, 0x7) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x1, 0x95, 0x20}, 0x10) 14:46:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x3000000}}}, 0xb8}}, 0x0) 14:46:04 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000f0000000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:05 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x6b04}}}, 0xb8}}, 0x0) 14:46:05 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002740), 0x0, 0x40014040, 0x0) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000002900), &(0x7f0000002940)=0x4) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 14:46:05 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000030000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xd00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4000000}}}, 0xb8}}, 0x0) 14:46:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x8000000}}}, 0xb8}}, 0x0) 14:46:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf000}}}, 0xb8}}, 0x0) 14:46:05 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x2}, 0x10) 14:46:05 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000050000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:05 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x34000}}}, 0xb8}}, 0x0) 14:46:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x9000000}}}, 0xb8}}, 0x0) 14:46:05 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x100002, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000100), 0x4) r2 = accept4(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x80, 0x0) bind$phonet(r2, &(0x7f0000000080)={0x23, 0xf9, 0x6}, 0x10) [ 3232.488309][T10472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:05 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000060000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x400300}}}, 0xb8}}, 0x0) 14:46:06 executing program 0: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/58, 0x3a}], 0x5}}, {{&(0x7f0000000540), 0x6e, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f00000006c0)=""/119, 0x77}, {&(0x7f0000000740)=""/34, 0x22}, {&(0x7f0000000780)=""/188, 0xbc}, {&(0x7f0000000840)=""/62, 0x3e}, {&(0x7f0000000880)=""/113, 0x71}, {&(0x7f0000000900)=""/5, 0x5}, {&(0x7f0000000940)=""/102, 0x66}], 0x8}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000b40)=""/180, 0xb4}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/213, 0xd5}, {&(0x7f0000001d00)=""/150, 0x96}], 0x5, &(0x7f0000001e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x3, 0x18cea73015d202f1, &(0x7f0000001f40)={0x0, 0x3938700}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048044}, 0x24004084) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xfffffe2a) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000080)={0x23, 0x3, 0xd8}, 0x10) 14:46:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xe000000}}}, 0xb8}}, 0x0) 14:46:06 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 14:46:06 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000070000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xe00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1000000}}}, 0xb8}}, 0x0) 14:46:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf000000}}}, 0xb8}}, 0x0) 14:46:06 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x5, 0x2, 0x1f}, 0x10) 14:46:06 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000001f0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:06 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:06 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8, 0xfe}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000040)=0x5, 0x4) write$cgroup_type(r2, &(0x7f0000000180), 0x9) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 14:46:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x2000000}}}, 0xb8}}, 0x0) 14:46:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x18100000}}}, 0xb8}}, 0x0) 14:46:06 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000003f0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3233.771297][T26477] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 14:46:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x3000000}}}, 0xb8}}, 0x0) 14:46:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x2f000000}}}, 0xb8}}, 0x0) 14:46:07 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:07 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x1, 0xd8, 0xff}, 0x10) 14:46:07 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000007c0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x4000000}}}, 0xb8}}, 0x0) 14:46:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xf00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x60000000}}}, 0xb8}}, 0x0) 14:46:07 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000f00000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:07 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3bb5, 0x5127, 0x23f}) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x80ffffff}}}, 0xb8}}, 0x0) 14:46:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x7000000}}}, 0xb8}}, 0x0) 14:46:07 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:07 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000fffff000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:07 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd1}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x2, 0x8, 0x81}, 0x10) 14:46:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x9effffff}}}, 0xb8}}, 0x0) 14:46:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x9000000}}}, 0xb8}}, 0x0) 14:46:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) 14:46:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1100}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:08 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000001000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:08 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x80, 0x18, 0x10}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000040)) 14:46:08 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf000000}}}, 0xb8}}, 0x0) 14:46:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfcffffff}}}, 0xb8}}, 0x0) 14:46:08 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000002000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:08 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) bind$phonet(r2, &(0x7f0000000080)={0x23, 0x0, 0xff, 0xff}, 0x6c) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x7f, 0x1}, 0x10) 14:46:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x2f000000}}}, 0xb8}}, 0x0) 14:46:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffff000}}}, 0xb8}}, 0x0) 14:46:08 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:08 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000003000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1200}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}, 0xb8}}, 0x0) 14:46:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x6b040000}}}, 0xb8}}, 0x0) 14:46:09 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000005000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:09 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) bind$phonet(r2, &(0x7f0000004480)={0x23, 0xb, 0x7, 0xba}, 0x10) sendmmsg(r1, &(0x7f0000004f40)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x401, @rand_addr=0x64010102}}, 0x80, &(0x7f0000005100)=[{&(0x7f00000000c0)="61c3406ded7ae57d7a69a46699b827a7cc61169fd546ce330db2d928f8058c1ad0b9c89a80658b48f01ed3cabfe4e6b3c9775a9c0a777be3c1881b43b9a37a1bc7bc729010e6c1ac6d679874bdb60ee510546ca8fae6e6a62c378e27f7fcbdca9311ee15", 0x64}, {&(0x7f0000000140)="9cf83e4ddc08138da1a3cfc3dfee1d09943301f3c378b4e146329d5f9af5bafe39a1c0389fc76476b5b7e6e540e2d3cbb967b7c0bdc6e355ac91ee6e73b09a33e79f32a5592d0c246974ee", 0x4b}, {&(0x7f00000001c0)="ab8489652db092a49256cb9b46edfa595b39245aa0bdd6bdfd82d74825cc3fd95103da84fac87fd0ebcaa39ff33367faecfa5edfae83cae24558901e9961bd3f5cccb0c364b7727ee0bc1e92a5f105fa5d83ad8d41d1ad8de7e40c767a6574721d3d65dfbd43aefeafddd9901a0918c01fe0c2a7baaeecde55e096199c4bb4f39ff44df91653ed6c3c760f6075c146591ac3f683286795ed1d01be56c8542b5b40e3261572f9f69a121b6140e77728f136d4ad4fa6ec54d64a45705406348f0d4e1f82fb550084820c09b74d9d", 0xcd}, {&(0x7f00000002c0)="3ebbcba4e81b1c46ccf463839c9152351cebde239909060cf8f84c6eab4fe3b8beba29a1507ec027e0429f1dc212b2b72b3eb83f604fb43159ab6972448eadf56543af2ea01a8b324f662f763808707ec6e403e914e4f01e6baeff91fa40", 0x5e}, {&(0x7f0000000340)="6de3b1272935dbe7ec1b6ca70bd30e66e7eab8d3e365cef9e3d2aeddf7fb6d191708951a1d51649b1161", 0x2a}, {&(0x7f0000000380)="503735036764069d01b66f3a3a4edf4db5bf007e1bae19d86d99cec77547541e8f171daee2c4e53e031e4d6cbc2a418a8f313fcc1aa63776b57783614d8a6f28c8848e9634dea9e26ce7de816281973641a641bd5d90bad992aec2bae7c357874c6ec06ae16028cfe45a636516291ca1b4f5989610a1cf1fc06969c0d32fa839d2d3da227c54bf2cd4bfc1e7bb1ff62ca238f6c95946bb0ec7bc1bdd08a0da5449ca9e65e76130", 0xa7}], 0x6, &(0x7f00000004c0)=[{0xd8, 0x10b, 0x3, "37f68d3c58c8bffb4f3835247ccbfffa76b121649240139599cdd6d2fe2a7d0086c322b4ac54942065e6763b23969ce4d59a72e4f01930947d09db1abc6e424d871d5e2c1072f36358c1da54c4a7f2a27d3645acc2e4ba67aca8544300ab715a5e0721dd5afe3846835f1b1f2707c2da03167799a859637167697abc197c117c8e9147b0214976dd8a568bffcaebfeef907e5daaf59534a1f3f37c742226073c2375af566f54cbeaf7dce60ba85fe3a69d1bd468d8418c9b4b01cc6f476b4f82119b0f14ad393a"}, {0x1010, 0x108, 0x9, "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"}, {0xc8, 0x1a, 0x4, "d04974934da4ef53039c4b0a9f9df5ddaf078d28ff0689952283ca58953f1f8b41c3d25703cab8d86ff1a707a029899c82223bad872e0abd134eb286c269c069677611c82189990a5ccb69ff0abce9c0c4ce40687c025cdfbebba97d9a5aa697cd144d558ee4aae89402a7283cd8b48a46fb3ec5205c0f976f80d2980c698ed7b7701f14bbbcfe46e3733c1f9c24d6edb97d951d8e8e9b44d06dad4a3e9c04626549b043845615cd9443cc02f75a6c706a"}, {0x10, 0x10b, 0x80000000}, {0x30, 0x84, 0x8, "3c1c673bd490c9ae42965dada44492e6c55edf006ca2d8b799"}], 0x11f0}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000016c0)="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", 0xfe}, {&(0x7f00000017c0)="2e3522defbeb862d5258534a5c96fe9b19ff431304f505acaf4d5a293c4ddea24e83c30ba077f24eac4d96505e0635c4a8c26643b200bf16ae4990043411aaf8e24236ecb3a40100e7a9016e3f3fd5f304", 0x51}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="e5215849d95e9d0c1c0faa0bbe8994bf53ae95e43977d97ffe4223446564c6a562c71b2bced312be5c77edd43cde96adcdf80cdf697be9886f884301ccf3fb5eda770636efec782e85e72f3098b782a49145222db60ba906b8d7e51ceb7e0407240510219023c7d288500e2ffbf2d282c91a9da94b6e1c3a6e97711c0430eb50", 0x80}, {&(0x7f00000028c0)="62d04ae973728ddec6410ff1169ef184d4317a917835c140b3649cbcf801cc65163746ee73b6d33b8af3cd1c139aec453964101a93194461b939f27a579530667a3235c71c174de560f1e0704ab79b684a207ae86155d3e68f34522b0db5dc9bf0aac44b4353081bbcd01af966909b188c3b9bf414f7", 0x76}], 0x5, &(0x7f00000029c0)=[{0x80, 0x113, 0x881, "8a6067affc8a9cb0e656809dfac4f4e971ce65014d1c89776f0086c4b6e9f94edcd3c0cb6d322d527078a3c3bf8cfa547b810df2702a9714cb0fe1372dce8286211451ac5fa37377c5f7425c961c38fcb748d538603bad628cff9e35548bdcce8c25303fdaaf6099f0b54f6718d5"}], 0x80}}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x1, 0x1, {0xa, 0x4e20, 0x4, @remote, 0x400}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002ac0)="19bd2a13e8ee8512d94e99168617f893ef15b1af2dd053bed9b168f92d0f995d3b521d24b5", 0x25}, {&(0x7f0000002b00)="33b275bf991ca47dde4d65122f05b50fe14b8b5196e36a521a7a349ce16f0c6cbe8d3e99cee84a6f119019982a1b954893a75ed1cd764af5f2e2f8480484ae17a4c0c358a4ee874c1ee8b902ff6256c3974b27cea93601c3ad83b9d9cf0c7430beb1ddc153cad0dc7cfec3fae4cc0d736ee374", 0x73}, {&(0x7f0000002b80)="09c35ccfdbde8418eb0023a9ae09e5b43c0826e08894cf0ed1a1faa23947a6c2075ecd1f8f5bf87139150ed4891ef1d08b94067f1228b41c832379d73163dbf4b1cb4b7fb8e79b03c83c1fa90f207e631b27ddae6555531ccddd89f40b10d8b14789dbaf453da93a86e42332122822e6be462a20e22f240a7ea9daabd7e925b6", 0x80}, {&(0x7f0000002c00)="72decc4cd61cc1da131f006b4a13c9488c68109b1836d55da624029e5f5db36ff5eb5696033630a15a814d924a48070f127b0001f8a7525b314311d459db188c242a06de6380a56227c0a23286b03d6f4a7829af7fb7e4dfc1d8103e05df68bc69a0546a4a82", 0x66}], 0x4, &(0x7f0000002cc0)=[{0xd0, 0x0, 0x9579, "b6397b0205e5dd109aebd5e28f5e137007a96883db734c4fe02453c2a8bdc4028bdaea811738694c643893c3916fea50abcc66ee8cab160cc4547b5697fe5b7f36effe072265f2b29bf8c733d283a058e043af742bade4e8e721f5e29483f77c3bf50ba1303035d0107bca51252a4d967963fac1f0c259aee9a8c58812d13d486fda6fff019e4e522598f68bbad2e57371977ec599f75f116be5d55501032a0d0c3e61724e824f9e2c635527d94eee8c29fb5b8650a5b170b86867677cf8256f"}], 0xd0}}, {{&(0x7f0000002dc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x80, &(0x7f0000004200)=[{&(0x7f0000002e40)="392664ef870a80a1f548ca28ccedcb2d3ed358d631215956cb20eeb1cce4ec8f8c6e2e8f3af2ea965481712ce283beb6217bcf591f59631c374a37de1f8c85ce23571a06812d75c6b99bd4cd277fab7bef7bba79a8b99a50c654a8ea9645d3064c0aad4173192f9baddabc27f19882214cc590d1401343178dbd35e218cf71d83530670bd0aff4a0dcc97630c38e18f78a2eb64fadcb4f26243ca72eeeac43f0d0c0199ce27d5f9fb9aa15e571d8365b53e5f5391f38730634089785610db7c754e40a43", 0xc4}, {&(0x7f0000002f40)="aef81ef36fd9e72b1809b36eef6897ea6eb02875eb10dcb6658e3d9d06f34a2be77093cce56bc50a11bb7d2d6bbb6ab2ef66972956f9fa9318aca52633ab53a1959c1aba31dea19a83a7694a6e6d31e42c79df6d813bb6533d0b0a202ff3f3fc6d76cc8b38c5952c78f89c0a46c5104f91bb561fd18a96f2b3a27812d390", 0x7e}, {&(0x7f0000002fc0)="9d85dd8127269b974a245912add488a609ca702da9400cd0a6f5591df94d1bc11168872f9bd3b41d7e75ba2cf957f8f173bd18c2065a55ebc1a02fda5311bf3cb888716f4d6cbe2c11cca527c2092bf7a6c1a786cbae64fb86e94127565633d2019788f70e120005998d851b27bd67e0b7f2136149aa6bf9ecc2d045e4eb9e6292e01fa349b5880e5f53408a79655c86d05e11a50ad1af5fea8c53c7cfab465f9a5e0d5ed231d299fa11341942e956cc18a1c99cf5e7905b37e6cac4e4", 0xbd}, {&(0x7f0000003080)="e029f1d740a1bf1c2a7ee26ea386c2a0963a680c577798253d794ebddf04afaac6703e7eec208ca83f0e352e3c31556fbbf81c2a6528ea5452468b9670c16cd6e161089089f3fe5a2f9b9d8151f3daec55e9a537f189ebd5bdae13e01d2e757eeed4f33c1a746d4aa4fecc8b3f53a4e7e2ff1a53", 0x74}, {&(0x7f0000003100)="418cad04f51ee3ee4d73e4eafb45c410776791fa4f33b72ef687ef6690fbd23be1842bd2275437d0e4937a8fcf06762a54764162e9e0f1a6f926aa821f3ce1184c1046cff835575814bb731905faccccb8be7d94115827032c1fc8c23773bb8ebe3ec6", 0x63}, {&(0x7f0000003180)="6e06384f478ed43423c83a8ea1dc01921ed26b9b418cfb0a1522a25a13ae1796a1880f772d863b752c42e4412c1feafc5726997c77ae52e4f8", 0x39}, {&(0x7f00000031c0)="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", 0x1000}, {&(0x7f00000041c0)="758df710e01d5aadaccbce2ff9d2ffb04d6c559ff9fd3675d12c263cddb0b6927ed0dc", 0x23}], 0x8, &(0x7f0000004280)=[{0x90, 0x0, 0x7f, "fd8b78a913e10505c3e880f8d021bd9fb3dd8f26aea366968f1d9aa205b370ecec2e0696711e759c919456de083929d20e604ecc3e9cb6f00e02307963d3aac4b621a4eb18bbce8ee0081fb3c287176cb3005aec319d2bc3d4d9cd568cfb93dd4cc788aa7a0887c211f9f8f53ad59a15c5c1748adb7f4ab37dd9cb8ecb80"}, {0x68, 0x1, 0x1, "3b13e383fc140be804acaaeca32bdc1d294104b3b77b4dff1013b1f5122966c020cabb342658d4b70290a210bc29516ae33f0fd75e1fb9c04a2dd624cf424a477c28ec5399b5586a472ebb38c6f22afaa3"}, {0xd0, 0x10c, 0x7, "420801b1ead1c690814c538f5af4152a7a2290096ee0a56cf65c184f6bf54014d6dfd025ff1893ed6232c6897c23ba157878cf58b1a4d530640af17abf7d8dafb44dde3751e6d18ee87a41f732377cf0817505bd258829e422f15c596497f299b4f33034af2882db8ea5f13661b3df38662836b364b7189f6afdbf10e7f624b9494926c8eb9bc1593601a91c0cc211bd87ebcc6df020b99b475cd1df71b4acb1f4cc0a4059171e664e26f719df738fa06a6b2273420b86bd12a985ecd124"}], 0x1c8}}, {{0x0, 0x0, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=[{0x40, 0x84, 0x80000001, "c7e590e8e4654a155ecb3442627c47c3d0178fdcbc32f78942e7a6afd3b819d0e09278bf7b2976cb1882a06b"}, {0xb8, 0x10e, 0x649b5df7, "054c92b3995fc18b826a31aad6a4232452f68806cca997c4ab52cf092da90c16a46e2a07302ecbfb28a5ac7baa70dc581db59d373c6fb2b2445198c57af91788807e72d05eaa0a62f9a90680e0a38e98c7ae4dd2307a26f64631e46265d99ab5702c36a11298806d2fcf896058d7bd6d996f33ec2b884b472e3b774d38116f8cba5ec3c4854b68ecafbd570835635fea7195093ac8a72fa56068ff847698a48185a3eed20279f0"}, {0xd0, 0x27d9a82a7662fb8, 0x47, "cf00177ab82639b0534a2a3a809ac1f19fd27e1e566e5ab567aad11d59c68b1113aef208a7d06c53f9dd5d3f4f3466490724f1d29f5062425995fe8655c3f534f91614c739c3aac9fa8e0cfac82d8d8970cd8ac357dc9fda810e5452e642f4055ca6648e71eaf1438afc650bcb7cf809f819a9dc65c11615360e1804072cd065b957dd55fe0e466f22d467fe0992b087fdcbf27436a5dc3ff51ec04513acbaf312848fa0b30b13e47bcd1162f0e22822a262fdaa9cb700b41289ce5b"}, {0x60, 0x102, 0x1, "922ee71c4eba0983f71593ee02a4011b9fe0e04c7d9d1c61077adb50733a98472400a429971ddea1e1a3cc862a491d346286f02868998a00daea3be06cb76d20c43223d136d63cbb58326faf397da3ef"}, {0x48, 0x102, 0xfffffff8, "45502804071e02e397d3246c79f4733d5c73b379a59c2113d7feb4d5e59eaa90bb5a77fc4dad4cdcd5a789b67e325c36edd4814c1fa34e"}, {0x88, 0x29, 0x4, "df48db1f4a1b09db6ebad22c7402d3d6a8d411c4d600be5b8640dd79f4f59dd2482d975bebaedca31ed228bee876cdc19998a08080aafed166d57fa337f3fdaa8e934e86ed19f84da6abe4512c3576458e5271348642d8b1296f0b946f470acfbe4032db72da212fe353a481e4a0f63faa"}], 0x2f8}}, {{&(0x7f00000047c0)=@phonet={0x23, 0x50, 0x3f, 0x81}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004840)="91f12a8185cd25b6a64f2e76fd005140636646e85601034efa2c108c4d78ec249def4e937ca8f444d62b8b1f9b3785c5d12b50eba07e5921f29e6e6d6e0ef3b4173a8f4d868c64f18f98ecd19bcc9b1e54dc3ce1ea4c1d2722c501aa002ec67521a5df17a20ec66f7e08acd5be036fa46c0c8a37ffbbccba653fb8312cc248c94dffd61bb06535e5d62c1d8960c379fce055cdb4051461f93c49c67f", 0x9c}, {&(0x7f0000004900)="c95638f66746b3ec1ee1e2d5b9329a62829240c850a59368ad0e336e9ef198d680d7ce7fb9e2e534c8e21e55f30b3a563c1d780041f45d3db17f4cd1cad24b7155855d40ded7453a074240db86c1a8a38f2b101813119097bdc2ae37603f43945a3384615666a15840e08ff2fedadaae89b0756cf792e7bd07dfc9f290", 0x7d}, {&(0x7f0000004980)="08411879cfb6b137b553d74f874236f13db7ccd76ae136b2783bebbe79223f39a064b10b9c683d9abb296d7abfe1a9a63ad818deb8e4a46a05d3336572fbe5eacf80dbcd644a84d61d010d00e116b79ce63a53c9b14e794b81c7b1785b0e3ca75e7e0a75f72194f30c640d287bbdf42ac5009250ff20b88438c86e0042f6dab7ec393dc9802dabb1820c14477b555db1275a12926e63946039fbb6895e", 0x9d}, {&(0x7f0000004a40)="beb97f15499cc536b6c66de111904c8b20ef48adc79501304fd2bd8d0fc637ae580ff420d553b9343d6fdad211a74c4067f357a56e763231e9e3e55eadaf80901a5deca9b1b4911142bc93150cdfe37b8758de13f4a4ec8e72392d369ee32b06e300f504be69c76e00e090f2619c0817e51311d7b902922411d782baa22bc31b9233f6766af80d48d9b2cf388ed7d7967f0c9c5767e1fd63369ba2b7b4ba5f45372b039963850a5b115401a962734c264e36c7c323664dd2d14a12994d5a03dc39d688e7455a43bd21ac53d113", 0xcd}, {&(0x7f0000004b40)='y', 0x1}], 0x5, &(0x7f0000004c00)=[{0xb8, 0x1, 0x80000001, "41ff8fe0d78b84aa13d0b53f9b0e91f80cc9761fb4cd4bd2d3480ebf48a91bd3d2cd3a29357c2903df42a78c4862e05539cb44b71405697f9cf67f9f0dd3d916d820c6645e2dcae7067cef47eed23f348faedca926eab4b2708736594a242416979feabfec21625112cbb99f91481102235b253d4f441c3e1f752a3206a5b6635256d797f6dad9b570908e2142d93967245c0137f81ca778ed4cb25bc5ad0e5e9d4254efaefe3d99"}], 0xb8}}, {{&(0x7f0000004cc0)=@isdn={0x22, 0x6e, 0x20, 0xd5, 0xf7}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d40)="8ea1918f69e9f6ad98fb2c4b43123bda46921d0a10556866af967ad59d0326a89999db834c409305aef3c97b0dbbf80c6bcdf353cd34662b956b5e531037df5326925c3f30eb8159dd48c57cf6897d4735283b81f96179e796db6a38a469d4e048f0d60046020d2696ec78aec7abca90bb039a850a3fd444403bd9a8f976e4a91ffb5c01fe9e166b71c68416b102b0747c313dc88a2c6dcd785dd7d29b37bf85ceb1aea7d54c70a932582380829c4cc95518104215cfbba2706fda147bd3058d573cc35331d6", 0xc6}], 0x1, &(0x7f0000004e80)=[{0x90, 0x10c, 0xfffffffc, "889276197dd68bb150e5e8c71fc40311ed7551f5e7c265e12f267d4cb060b8fbdbeab0324dfebe190cd2879f9df60f5a4cf48aa7176297aa96ac7771fd2d84bc954de9ecb15764f4b943f3cccda72f2622f569793e68990cf9afdba8633bc59f9ede748a7c18ecd6c4e76ec844f9a5cbe94c400282fc4c5bb6"}, {0x28, 0x113, 0x1, "84f341cecfd808de7ff1989b88a8479740abb941b70a75"}], 0xb8}}], 0x7, 0x4008000) 14:46:09 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:09 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000006000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x80ffffff}}}, 0xb8}}, 0x0) 14:46:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xffffff80}}}, 0xb8}}, 0x0) 14:46:09 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x47, 0xda}, 0x64767d92ea6a5bd2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x5, 0x1, 0x4b}, 0x10) 14:46:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}}}, 0xb8}}, 0x0) 14:46:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1300}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x9effffff}}}, 0xb8}}, 0x0) 14:46:10 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:10 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000007000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0)=0x7c19, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080), &(0x7f00000001c0)=0x8) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$phonet(r0, &(0x7f0000000140)={0x23, 0x68, 0xd8, 0x3f}, 0x10) 14:46:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}}}, 0xb8}}, 0x0) 14:46:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) 14:46:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000040)=0x7ff, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$nfc_llcp(r1, &(0x7f0000000200)={0x27, 0x0, 0x1, 0x2, 0x5, 0x9, "9f25ce655ad52f167d7ab3681b45239a024daaabd064205eafec7678ef04c4116a0b06020052bc952f9dd783e27ea51a113cdb5ab346023c9912efb6662acc", 0x8}, 0x60) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x4, 0xd8}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000280)=""/163, 0xa3) write$cgroup_type(r2, &(0x7f0000000180), 0x9) splice(r2, &(0x7f0000000100)=0xfffffffffffff024, r1, &(0x7f0000000140)=0x6, 0x1ff, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x1000, 0x4) 14:46:10 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000008000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0xb8}}, 0x0) 14:46:10 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:10 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000001f000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3238.249576][T26477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1400}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:11 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x139fe92103694b48}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x148, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffffe1, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS]}, @HEADER={0xc}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4009000) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, &(0x7f0000000080)={0x23, 0x3, 0xd8}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 14:46:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x40030000000000}}}, 0xb8}}, 0x0) 14:46:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfcffffff}}}, 0xb8}}, 0x0) 14:46:11 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:11 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000003f000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:11 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000007c000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xffff0000}}}, 0xb8}}, 0x0) 14:46:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) 14:46:11 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:11 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x3, 0xd8, 0x8}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa9a850f984ee603e, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00'}) 14:46:12 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000ffffff8d000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1500}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}, 0xb8}}, 0x0) 14:46:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffff000}}}, 0xb8}}, 0x0) 14:46:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x80, 0x1, 0xe7}, 0x10) getsockname$inet6(0xffffffffffffffff, &(0x7f0000011fc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000012000)=0x1c) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000180)={0xbeb, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x0, 0x81, 0x4}, 0x10) 14:46:12 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:12 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000fffffff5000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) 14:46:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xffffff7f}}}, 0xb8}}, 0x0) 14:46:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x2, 0xd, 0x85}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 14:46:12 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000f0ffff000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:12 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xffffff80}}}, 0xb8}}, 0x0) 14:46:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1600}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:13 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000008dffffff000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 14:46:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x4, {{0x2, 0x4e22, @remote}}, 0x1, 0xa, [{{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e22, @private=0xa010100}}]}, 0x590) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8, 0xff}, 0x10) 14:46:13 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xffffff9e}}}, 0xb8}}, 0x0) 14:46:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffff0}}}, 0xb8}}, 0x0) 14:46:13 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000f5ffffff000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 14:46:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x3, @private1, 0x9}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="bf9a9542d4ad35a1078a2e554efa92cab8780673d7c614c56a0af3f23be9abe07d94ed78ce12de54ff2f94751bbab707085b683574f5deda14eba2f0befa4dbe72bda0a8564fe921903c7611bc", 0x4d}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000600)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1f}}, @dontfrag={{0x14, 0x29, 0x3e, 0x101}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0xc, 0xc, '\x00', [@pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x2000, [0x85b, 0xfffffffffffffff9, 0x4, 0xee]}}, @generic={0x5, 0x34, "64fe5aa0c4edeee03bf2783ab63561823c861e6955ea5f7f7b65a3b1992f62739785ee2ebd0809d40521356a99f66168f3ba8182"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa20}}], 0xe0}}, {{&(0x7f0000000700)={0xa, 0x4e21, 0x1, @empty, 0x310e}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="824403b56721e80ce3477a15f60d871842c54c5f409b6f5f1e3336b4fbec43a11d8bdbc1aad752ceda6050e376de438fc00d655ff529993b25ce8ca2483eac9dc0cee5c55a8a3c69", 0x48}, {&(0x7f00000017c0)="2ba28c8f4368cbb18689a31aba4ef504693e454125d0ef08aadba3c77117dd1f2024150760617ef3007ec08be6bcbd43eb582e3c9fb81bc2e866a8fb4524821af80431e53ec023b41efb6e865788ada66a30d8879463cd0478afedc57c5bafa52f3990483b99127d36437969b4506ae109a813e05378d458645d91b9a0c76d25981e52211d239bbc46816c664be898d1d039df7cdd52ade2cddfbeb1a295cabefcd31099f0ebb8c94e6f450034051be9393cf913f3c8", 0xb6}, {&(0x7f0000001880)="ff265e3015bd3ec94ba0a1f65c5ea00cb4b76cf9503afaa0ed005aeb970a2d511158cff6c80e6e91ac3481da10a3b202a6520a83580e65b466dbf4b94385d94d4ab44b5f5c4bf7124b34bb476a95c17d9ea5f60dca9359e6b32aa68049ab2f0cf584c105c79d86fcc10c70a7f97db984ac85ba71f0bf7323ecc8bca55b0207459d98a85d672cec293efba31d9cc85b2d9ac9f53d33fb07d82e5491ba4c6542d8eae676cdb7f986bcea31a5d4ef9e8275e1b4dcac6d4297017290498eaf627c1abf0e3dc30c7c030ec77bad68d6592c52fb2b8b16b6", 0xd5}, {&(0x7f0000001980)="c6e80b018967af74f331e5fa6880c41ca920d5964b8b1874ac4f8c2a57e005bc60df6367fe84f072b7a5a61f15c1611dd8ac8e87bc47fb46892f28593d7037039bb03388a4e2c6a7a60e7f43a96030cbaabceeeff0f6c8061811f09f7f2e72a921b4cd9c7bf086b74ce10abd8c85b721f8ef5c6723f78c9d6a5d920b9099c3b9fe5d7c3d8c6e4a289f86b2da5545a950f33b42e946950a6fa864e4e038", 0x9d}, {&(0x7f0000001a40)="e904ad8e33d53f635bfe5495d240a2e90230587cb3c061fd6f37d4ce2cf4ce3467ea9963eb828db6b7d63208a2ea26a964be97f986fdeccc7c05a0c4c2bc62c5012c5776c4f8485d19a926f4898c62bc1679f0ab0da263fada4af4fa8050675c3d041a6584984193fbf671b098d08091ceab27cb243d86abe27a896da70febf5f431", 0x82}, {&(0x7f0000001b00)="4f04c86271cbe8dafc0f3e4da91bfd797cbb34eb2059f789f6cb0a31b8ff065b14ab59d842cfefc763085555bdce5723612947130d5968dc7a306aab279a419dd3c4a7c4c9b485693d2a45b9baa5b955453ff6fd4d1510d876bef31b0ce324c5e3cd8bc4", 0x64}], 0x7, &(0x7f0000001c00)=ANY=[@ANYBLOB="1400000000000000290000003e0000000700000000000000480000f8ffffffff28456ac9180000003306000500000000fc000000000000000000000000000001fe880000000000000000000000000101ff01000000000000000000000000000124000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r4, @ANYBLOB="00000000680000000000000029000000360000000009000000000000050200080740000000010e200100040000000000000008000000000000000300000000000000010100000000000008000000000000000400000000000000ffff00000000000001010000000000000000140000000000000029000000430000000200000000000000"], 0x108}}], 0x2, 0x80) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c, 0xc0800) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000300), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast1, 0x3}}, 0x8, 0x9d, 0x7, 0x0, 0x84, 0x2}, 0x9c) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendto(r5, &(0x7f0000000340)="f489c666d4759d4c96370727b1397a211c4d83c7a79447ea89e432a1d25dd4d289a6cf7445771ffac15d3a59b56d86b3639c630c795c6d060651d39545bac5da063c1bee83b6cadfe41595852be3d5f9d722a43e3ac0d22fcc2bc2991f6df9e42cbad46dc87c5893dfc5bf3a868dd41cc9993a54cf097361889f3f7272b40d42272836806cf4a1349a99b978696d35da70f7acf973edaf260e359ec2bc111c6068028a4f44e2573a5db9400833f9325d9f2fd50745dd88ba32229644d82e22ac22223293e619df6af5cb09b63607c4f416c6da18a18e99466373b4ee6aaed3e2", 0xe0, 0x10, &(0x7f00000001c0)=@x25, 0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e22, @remote}}, [0x76, 0x3, 0xff, 0xfffffffffffffffd, 0xfc0, 0x5, 0xb31, 0x3, 0x89, 0x9, 0xdc7b, 0x1000, 0x8, 0x8b, 0x5]}, &(0x7f0000000000)=0x100) bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:13 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffc}}}, 0xb8}}, 0x0) 14:46:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.stat\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c85d35b04cc664aa1e0f85ef01e976ca2790ffd3f172a2566230e95a64c8804d79f6bcedb1d2c6f4e01b909c173c52bb3caeb21dcc9a2158929f7df23d22bb0ec2f95d297933f2484645609e48c6484b61b2f3f1f368c7149db496d0bc7513036358034f25704eaec22b93f1968237b8a578e6cfd556ccdc2862cbde39be3675fca71ac2ffcf123cd44c805d6c5fea3192f746a05d2e77561bec7c07a28b0b0b8fcb214cde2fd6e3dc0b4520238dcf7720d3e079b608c2f54aa672a2bf33a6fcede8d7d195996702a4752756", 0xcc}, {&(0x7f0000000040)="b8f0e99c00ee9fcc40b6", 0xa}, {&(0x7f00000002c0)="36b586bb4417c6877bd324ddf34d9ea9484922f9ba8af8d77f7a92e4b017cdb7a815643fe90617c563c57ea7d06751762e8c2d7283fd6fa90eabc37c8a25adabc620b58688136f857435aa9f4b01a9c4d1ac69", 0x53}, {&(0x7f0000000340)="4255a2fcc1124450a192461c254a0b72f7362cab0746b68121f87d980395f6e98193d122b94fb92ed639bb5bbb0a0b0234a262f7a8d192ddbf039fc9bfa551bde9c16a23992cc45ab1079aa8ec56768edd7dae6f47b0c39c151fdc06e5a936c4232fe1acdc4e22d5ac21243d08f66a0f7fdd", 0x72}], 0x4, 0xa) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'gretap0\x00', {}, 0xff}) 14:46:14 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000020000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x800000000000000}}}, 0xb8}}, 0x0) 14:46:14 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1700}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xffff00000000}}}, 0xb8}}, 0x0) 14:46:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x40030000000000}}}, 0xb8}}, 0x0) 14:46:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x900000000000000}}}, 0xb8}}, 0x0) 14:46:14 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:14 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000030000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, &(0x7f0000000180)=""/242, 0xf2}, 0x3}, {{&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000340)=""/51, 0x33}], 0x2, &(0x7f00000003c0)=""/116, 0x74}, 0x2}, {{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000000600)=""/23, 0x17}], 0x3, &(0x7f0000000680)=""/103, 0x67}, 0x6ed}, {{&(0x7f0000000700)=@ax25={{0x3, @bcast}, [@netrom, @default, @default, @default, @bcast, @rose, @netrom, @netrom]}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/55, 0x37}], 0x1, &(0x7f0000000800)=""/149, 0x95}, 0x2}, {{&(0x7f00000008c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/106, 0x6a}, {&(0x7f00000009c0)=""/120, 0x78}, {&(0x7f0000000a40)=""/232, 0xe8}, {&(0x7f0000000b40)=""/133, 0x85}, {&(0x7f0000000c00)=""/133, 0x85}], 0x5, &(0x7f0000000d40)=""/65, 0x41}, 0x80000000}, {{&(0x7f0000000dc0)=@can, 0x80, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/130, 0x82}, {&(0x7f0000000f00)=""/22, 0x16}, {&(0x7f0000000f40)=""/225, 0xe1}, {&(0x7f0000001040)=""/195, 0xc3}, {&(0x7f0000001140)=""/28, 0x1c}, {&(0x7f0000001180)=""/5, 0x5}, {&(0x7f00000011c0)=""/42, 0x2a}, {&(0x7f0000001200)=""/253, 0xfd}], 0x8}, 0x1000}], 0x6, 0x40, &(0x7f0000001500)={0x77359400}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x0, 0x14, 0x49}, 0x10) 14:46:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) 14:46:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8, 0xfc}, 0x10) 14:46:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xe00000000000000}}}, 0xb8}}, 0x0) 14:46:15 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000050000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:15 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x100000000000000}}}, 0xb8}}, 0x0) 14:46:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x81, 0x1f, 0x8}, 0x10) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 14:46:15 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000060000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}}, 0xb8}}, 0x0) 14:46:15 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:15 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000070000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1810000000000000}}}, 0xb8}}, 0x0) 14:46:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x200000000000000}}}, 0xb8}}, 0x0) 14:46:16 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 14:46:16 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8, 0x10}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8000, 0x8, 0x6}) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000040)=0xbc3) openat$cgroup_ro(r1, &(0x7f00000005c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'ip_vti0\x00', {0x2, 0x0, @multicast1}}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) write$cgroup_type(r3, &(0x7f0000000180), 0x9) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000001c0)={0x0, 'nr0\x00', {0x2}, 0x3f}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000000c0)={@loopback, 0x5e}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x9) r6 = openat$cgroup(r5, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x0, 0x0) connect$phonet_pipe(r5, &(0x7f0000000300)={0x23, 0x9, 0x4, 0x81}, 0x10) 14:46:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1900}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:16 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000080000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x2f00000000000000}}}, 0xb8}}, 0x0) 14:46:16 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt(r1, 0x1, 0x1, &(0x7f00000003c0)="8c13717dfcd8f5c98a1574bd89d7e03c10978d6524b22c19e9e8fd6020d26d60fb4ab4d138342bcafac900498a1f34b370b173a8e5282a29734283bf6d5c6572ca704f263e7978ebaea06f87528b3e4418f80f4189339322c594358ced684600016c7d53574e5340407a6c748766c847c28a744dc710171087df906858ae8e7c147581febbebd25bdddd50d6b5f58bff1a8b12f98e1f4118846d20357fd924b28e697c2d9896ce343a5707b1692a52c15fe7663d4611aa27d6dff3c9c9a2b35b21b2130b12c8", 0xc6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="aa5d3f32686b634167c6daf0daa71e5f3667c78ec39b91137b6e97453021cb9b17b29d8855ab0779dec4d350dcc7f07fe275710ba97578fce63b2f282bd6d28abab58f5aa651bb2b59676e9c", 0x4c) 14:46:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 14:46:16 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:17 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) bind$phonet(r0, &(0x7f0000000180)={0x23, 0x3, 0xfd, 0x3}, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) bind$phonet(r0, &(0x7f0000000040)={0x23, 0xd6, 0x8, 0x20}, 0x10) bind$phonet(r0, &(0x7f0000000100)={0x23, 0xf4, 0x3f, 0x7f}, 0x10) bind$phonet(r0, &(0x7f0000000140)={0x23, 0x2, 0x3}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 14:46:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x700000000000000}}}, 0xb8}}, 0x0) 14:46:17 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000007c0000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3244.021537][T10472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}}, 0xb8}}, 0x0) 14:46:17 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:17 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000008000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000008000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r2}, 0x10) sendfile(r1, r2, &(0x7f0000000000)=0x72fe, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r2, 0xb2074000) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getaddr={0x18, 0x16, 0x20, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x31, 0xfe, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x141c8e571a5f01e}, 0x2004c0c0) 14:46:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:17 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000f00000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x900000000000000}}}, 0xb8}}, 0x0) 14:46:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:46:17 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x18802, 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:18 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000300000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf00000000000000}}}, 0xb8}}, 0x0) 14:46:18 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x9, 0xe, 0x9, 0x8, 0xfffffffe}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x58, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x13, r0, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x6, 0x800}, 0x10, 0xffffffffffffffff}, 0x78) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}}, 0xb8}}, 0x0) 14:46:18 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:18 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000500000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1b00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:46:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x2f00000000000000}}}, 0xb8}}, 0x0) 14:46:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) pipe(&(0x7f0000000000)) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8, 0x3}, 0x10) 14:46:18 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000600000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:18 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:19 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000700000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x6b04000000000000}}}, 0xb8}}, 0x0) 14:46:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:46:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x7fff) connect$inet6(r0, &(0x7f0000000940)={0xa, 0x4e22, 0x3, @mcast2, 0x1}, 0x1c) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000008000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000000)) 14:46:19 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:46:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1c00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:20 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000001f00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:46:20 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0xf, 0x98, 0x20}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 14:46:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:46:20 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:46:20 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xff, 0x2, 0x23}, 0x10) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x9effffff00000000}}}, 0xb8}}, 0x0) 14:46:20 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000003f00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:20 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:20 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1d00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:46:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:46:21 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000007c00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:21 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:21 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000f000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 14:46:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:46:21 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:21 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000fffff0000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:21 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 14:46:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1e00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:22 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x80, 0x5}, 0x10) 14:46:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:46:22 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:22 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000010100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0xb8}}, 0x0) 14:46:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:46:22 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x2, 0x55, &(0x7f0000000000)="06f553c5e2eede16eecf9e58ad0fedb041c1c38493f20a26ce5ba7741403e05cf88a1e17b808a43a0ac784b413114d2e497891cc7848cea0f0fc02d5b26e559401bf12e27bd88d0e0521569cd08b39cc7007076f07", 0x1}, {0x3, 0xa0, &(0x7f00000000c0)="695b7dc39d094e287fbe774b976e1d23d720725a9670c70ac769619cc3e8a753d7f3fe39c0ce39f32b5fe435d54f7ae18f0c136d060a6cd67547c26b1873d96e946ae3e1eedb6f3b1262b5d38cb3f740873c9377e3dfb03a86961c14697512622ecbebe526a21ea9789edaa22f1249925da0914106f733fa735404caf1caea3050c73dd4275ea476ff5365e8acfae8556a2f375ce74d387b04c174a9c1098dc7"}]}) 14:46:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:46:22 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000020100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:22 executing program 0: r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @null, @netrom, @rose, @bcast, @default, @default, @rose]}, &(0x7f00000000c0)=0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'bond0\x00', {0x1000}, 0x8}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:22 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) [ 3249.778446][T10472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1f00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}}, 0xb8}}, 0x0) 14:46:23 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000030100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:46:23 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 14:46:23 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d040104"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:23 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000477605a2e400dfaf1b6a3b12dd50a96f03fcc2004412881fe2a862802bb6f1745725f29b913cfd", @ANYRES16=r2, @ANYBLOB="00082abd7000fedbdf25650000000c00990006000000370000000800010004000000080002000000000008000200010000000800020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x6, 0x1e, 0xfb}, 0x10) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}}, 0xb8}}, 0x0) 14:46:23 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000050100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:46:23 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d040104"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}}, 0xb8}}, 0x0) 14:46:24 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x100000001, 0x2, 0x1}) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:24 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000060100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 14:46:24 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d040104"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0xb8}}, 0x0) 14:46:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 14:46:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x1c}}, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x80, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000001a00)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001840)={0x170, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x400c0}, 0x24008810) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r4 = accept4$phonet_pipe(r3, 0x0, &(0x7f0000003440), 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000003480), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="66acd269e9500e1665d2834475a71a7934e4df764698656e9371b4912bd779b6857edb004997eef2e282b83cd98389e2a6666bff8c83e6c6731d873d0ed1f0fd031244690a22bec49a3238df895eb22465920b1067a6d47e84c0624197cb614e42c3924d4ed252ea08832bbda5509885a8526b8b35cb3e1569cc6d70d49f84cc8b5484d0ee07a656589fd3d4", 0x8c}, {&(0x7f0000000180)="91c5a02796152eae25e7b5f093ad459c024a17bc71d73f16ed2cfccb69eca53121776cbf45", 0x25}, {&(0x7f00000001c0)="79d20885a15d01367c887eea301dfe1a410cf91102c0a1e4dc4b3bb15b19f8b70cb3b949807db685133a95390d3ff01a452dab8f4a793035df5a3e6e4af5ef618ddcaf1931fe49191e54370c281c27a5a4450569d3d227c0856564d24eed6479419c79082f1cd6aab621eb3c308cf7e79dd316a058a5a8898ff2bebe97f4cc5b0abdc97e57b5b8188111c613279821fd24c9c6427a770473583e175625f4b99588b4cbfb351b25467d899c9ecf1e93282ead6647843fc229e69c740f48fb00d15324db93cd5ff6a2240fda77b02c054cae8cc3bd3be6d4dcca85641ce5106bb128b372c48b9928e8b658", 0xea}, {&(0x7f00000002c0)="3a622a53adb5a4b7886214e47950baa01726f292cddc1835a5fe8382cbe770bc088845fd02f2eb2ee3de2dec6dfcd51022b98f563ebbcdd07782350c6e9447796eaf056332e98c9bbba347d941ab3b81085a1eaa9301d47ab67d8b02c798204ddff09b89b0", 0x65}], 0x4, &(0x7f0000000380)=[{0x1010, 0x103, 0x8c9, "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"}, {0x98, 0x108, 0x100, "81f4034b2eaa537d81f3939523cc034ac1c19519ecd3b31e4e44a3ffdd2c44c4601a277738bbe0321939cf038a5cd32211ebccac957658384ea4515b6992cdb5669ac4137f8ca09d78fa31cb8e600ca50192860ea73a88147dc31d1334a1283d1dcedfdd6c695d75814a297c02b910b0a39f09d5edb9406d91697b18c0c7f3ddf16f6321b0df"}, {0xd8, 0x111, 0x2, "76e8c9fd742aa42126d00d6e924a51e940b77740c106e575f47e0bc0d86032e3cb36510bc23cb6236588a67d590b03f1480f60556945ed5f3ebb2db3e946e621f22da5d06f3d310a18a3d3886137bddc4de44c35d44fdbcfd40767c070e131b97b424a8a83e8ff64fd514e65430dd3c1865ccfd2189de42fb73c8fbe9d75930501f4ec46e4f3cfceb0d38e9e58ea7aa3cb587702452ae4ca2c600e72e099a681fa442d02da0596f983b66fdbebab9fc37d887f8066a533b13daab2703253fa30709564"}, {0x110, 0x101, 0x80000000, "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"}], 0x1290}, 0x8000) 14:46:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}}, 0xb8}}, 0x0) 14:46:24 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000070100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:24 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x7}}}, 0xb8}}, 0x0) 14:46:24 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.oom.group\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) bind$phonet(r1, &(0x7f0000000000)={0x23, 0xc3, 0x1f, 0x8}, 0x10) 14:46:24 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000080100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}, 0xb8}}, 0x0) 14:46:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:46:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2100}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}}, 0xb8}}, 0x0) 14:46:25 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000001f0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:25 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf}}}, 0xb8}}, 0x0) 14:46:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2f}}}, 0xb8}}, 0x0) 14:46:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}}, 0xb8}}, 0x0) 14:46:25 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000003f0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:25 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x4, 0x0, 0x76}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="120000000400009e9f000000dd0c0000"]}) listen(r1, 0x1f) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x37fb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x1}, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x5, 0x24dbb30c, 0x101, 0xfff}) 14:46:25 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf0}}}, 0xb8}}, 0x0) 14:46:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2200}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:26 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000007c0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}}, 0xb8}}, 0x0) 14:46:26 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x300}}}, 0xb8}}, 0x0) 14:46:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1018}}}, 0xb8}}, 0x0) 14:46:26 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000ffffff8d0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x46b}}}, 0xb8}}, 0x0) 14:46:26 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:26 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x840000001, 0x3}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0xfffffffffffffffc, &(0x7f0000000000)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:27 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000fffffff50100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x700}}}, 0xb8}}, 0x0) 14:46:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2300}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:27 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000f0ffff0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1810}}}, 0xb8}}, 0x0) 14:46:27 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0xff, 0x0, 0x81}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 14:46:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x900}}}, 0xb8}}, 0x0) 14:46:27 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}}}, 0xb8}}, 0x0) 14:46:27 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000008dffffff0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf00}}}, 0xb8}}, 0x0) 14:46:27 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x3c, 0x0) bind$phonet(r2, &(0x7f0000000100)={0x23, 0x2, 0xda, 0xf9}, 0x10) [ 3254.808493][T26477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:27 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0xb8}}, 0x0) [ 3255.526530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2f00}}}, 0xb8}}, 0x0) 14:46:28 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000f5ffffff0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:28 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f0000000000)={0x23, 0xff, 0x0, 0x2}, 0x10) 14:46:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}}, 0xb8}}, 0x0) 14:46:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3f00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:28 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:28 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000200000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x6b04}}}, 0xb8}}, 0x0) 14:46:28 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 14:46:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}}, 0xb8}}, 0x0) 14:46:28 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:29 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000300000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:29 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 14:46:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf000}}}, 0xb8}}, 0x0) 14:46:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}}, 0xb8}}, 0x0) 14:46:29 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4a00}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x34000}}}, 0xb8}}, 0x0) 14:46:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 14:46:29 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000500000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 14:46:29 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:29 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x5, 0x7, 0x1f}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x52, 0x20, 0x5}, 0x10) 14:46:29 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000600000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x400300}}}, 0xb8}}, 0x0) 14:46:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0xb8}}, 0x0) 14:46:30 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:30 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x2, 0x5, 0x9}, 0x10) 14:46:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfe05}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 14:46:30 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000700000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0xb8}}, 0x0) 14:46:30 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:30 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0xf4c5}) 14:46:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x1000000}}}, 0xb8}}, 0x0) 14:46:31 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8, 0x20}, 0x10) 14:46:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}, 0xb8}}, 0x0) 14:46:31 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000800000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:31 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2000000}}}, 0xb8}}, 0x0) 14:46:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}}, 0xb8}}, 0x0) 14:46:31 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001180), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/202, 0xca}, {&(0x7f0000001300)=""/174, 0xae}, {&(0x7f00000001c0)=""/249, 0xec}], 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000d100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000003d132aa62147001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x5c}, 0x2000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x4, 0xd8}, 0x10) 14:46:31 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000007c00000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x3000000}}}, 0xb8}}, 0x0) 14:46:31 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}}, 0xb8}}, 0x0) 14:46:32 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000f000000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x4000000}}}, 0xb8}}, 0x0) 14:46:32 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r2 = accept$phonet_pipe(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) bind$phonet(r3, &(0x7f0000000040)={0x23, 0xeb, 0xff, 0x5}, 0x10) 14:46:32 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}}}, 0xb8}}, 0x0) 14:46:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:33 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:33 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000003000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x7000000}}}, 0xb8}}, 0x0) 14:46:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x7, 0x20, 0xea}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x40, 0x8, 0x3f}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 14:46:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}}, 0xb8}}, 0x0) 14:46:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x3, 0x1, [0x101]}, &(0x7f0000000100)=0xa) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x2f00000, 0x10000}) openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x800e, 0x8, 0x0, r3}, &(0x7f0000000180)=0x10) 14:46:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}}, 0xb8}}, 0x0) 14:46:33 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000005000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x9000000}}}, 0xb8}}, 0x0) 14:46:33 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18100000}}}, 0xb8}}, 0x0) [ 3260.649811][T10445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:34 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000006000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:34 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8, 0xbf}, 0x10) 14:46:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf000000}}}, 0xb8}}, 0x0) 14:46:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000}}}, 0xb8}}, 0x0) 14:46:34 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:34 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept(r0, 0x0, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x8f, 0xd8, 0x1}, 0x10) 14:46:34 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000007000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}}, 0xb8}}, 0x0) 14:46:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2f000000}}}, 0xb8}}, 0x0) 14:46:34 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:34 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) clock_gettime(0x0, &(0x7f0000006680)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000006280)=""/184, 0xb8}, {&(0x7f0000004600)=""/38, 0x26}, {&(0x7f0000006340)=""/57, 0x39}, {&(0x7f0000006380)=""/72, 0x48}, {&(0x7f0000006400)=""/208, 0xd0}], 0x5, &(0x7f0000006580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x1, 0x2000, &(0x7f00000066c0)={r2, r3+60000000}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}, {&(0x7f00000000c0)=""/175, 0xaf}], 0x2, &(0x7f00000001c0)=""/90, 0x5a}, 0x401}, {{&(0x7f0000000240)=@tipc=@name, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/232, 0xe8}], 0x3, &(0x7f0000000540)=""/41, 0x29}, 0x3}, {{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x5, &(0x7f00000019c0)=""/121, 0x79}, 0x8}, {{&(0x7f0000001a40)=@nfc_llcp, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001ac0)=""/79, 0x4f}, {&(0x7f0000001b40)=""/32, 0x20}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/163, 0xa3}, {&(0x7f0000003c40)=""/190, 0xbe}, {&(0x7f0000003d00)=""/113, 0x71}, {&(0x7f0000003d80)=""/219, 0xdb}], 0x8, &(0x7f0000003f00)=""/162, 0xa2}, 0x4}, {{&(0x7f0000003fc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004040)=""/163, 0xa3}, {&(0x7f0000004100)=""/189, 0xbd}, {&(0x7f00000041c0)=""/150, 0x96}, {&(0x7f0000004280)=""/88, 0x58}, {&(0x7f0000004300)=""/192, 0xc0}, {&(0x7f00000043c0)=""/177, 0xb1}, {&(0x7f0000004480)=""/202, 0xca}, {&(0x7f0000004580)=""/73, 0x49}, {&(0x7f0000004600)}, {&(0x7f0000004640)=""/179, 0xb3}], 0xa, &(0x7f00000047c0)=""/211, 0xd3}, 0x8}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f00000048c0)=""/163, 0xa3}, {&(0x7f0000004980)=""/98, 0x62}], 0x2}, 0xb1}, {{&(0x7f0000004a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/225, 0xe1}, {&(0x7f0000004bc0)=""/210, 0xd2}], 0x2, &(0x7f0000004d00)=""/245, 0xf5}, 0x49}, {{&(0x7f0000004e00)=@qipcrtr, 0x80, &(0x7f0000005000)=[{&(0x7f0000004e80)=""/115, 0x73}, {&(0x7f0000004f00)=""/97, 0x61}, {&(0x7f0000004f80)=""/87, 0x57}], 0x3, &(0x7f0000005040)=""/4096, 0x1000}, 0x3f}], 0x8, 0x2021, &(0x7f0000006240)={0x77359400}) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) 14:46:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}}}, 0xb8}}, 0x0) 14:46:35 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000001f000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x6b040000}}}, 0xb8}}, 0x0) 14:46:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) clock_gettime(0x0, &(0x7f0000000e80)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/99, 0x63}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRESHEX=r0, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c00000000000000010000aa81aa0642", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x110}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/212, 0xd4}, {&(0x7f00000008c0)=""/146, 0x92}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/197, 0xc5}, {&(0x7f0000000b80)=""/178, 0xb2}, {&(0x7f0000000c40)=""/193, 0xc1}], 0x9}}], 0x2, 0x0, &(0x7f0000000ec0)={r1, r2+60000000}) bind$phonet(r3, &(0x7f0000000f00)={0x23, 0x1f, 0x7, 0x7f}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f00000000c0), 0x5c) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x24, 0x0, 0x7e}, 0x10) 14:46:35 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}}, 0xb8}}, 0x0) 14:46:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x10, 0xd8}, 0x10) 14:46:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x80ffffff}}}, 0xb8}}, 0x0) 14:46:35 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000003f000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) 14:46:35 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0xb8}}, 0x0) 14:46:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x9effffff}}}, 0xb8}}, 0x0) 14:46:36 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000007c000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}}}, 0xb8}}, 0x0) 14:46:36 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf000}}}, 0xb8}}, 0x0) 14:46:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}}, 0xb8}}, 0x0) 14:46:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) 14:46:36 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000f0000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:36 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}}, 0xb8}}, 0x0) 14:46:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}, 0xb8}}, 0x0) 14:46:37 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000200000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfcffffff}}}, 0xb8}}, 0x0) 14:46:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:46:37 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:37 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000300000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffff0000}}}, 0xb8}}, 0x0) 14:46:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}}}, 0xb8}}, 0x0) 14:46:37 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000400000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:37 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}}, 0xb8}}, 0x0) 14:46:38 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000500000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfffff000}}}, 0xb8}}, 0x0) 14:46:38 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}}, 0xb8}}, 0x0) 14:46:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffffff7f}}}, 0xb8}}, 0x0) 14:46:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:38 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000600000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:38 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0xb8}}, 0x0) [ 3265.769835][T10472] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 14:46:38 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000700000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3266.406511][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:39 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000800000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffffff80}}}, 0xb8}}, 0x0) 14:46:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}}, 0xb8}}, 0x0) 14:46:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:39 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) 14:46:39 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000900000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffffff9e}}}, 0xb8}}, 0x0) 14:46:39 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}, 0xb8}}, 0x0) 14:46:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfffffff0}}}, 0xb8}}, 0x0) 14:46:39 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000030b00000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfffffffc}}}, 0xb8}}, 0x0) 14:46:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) 14:46:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:40 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:40 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000001f00000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffff00000000}}}, 0xb8}}, 0x0) 14:46:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 14:46:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:40 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000002000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x40030000000000}}}, 0xb8}}, 0x0) 14:46:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 14:46:40 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) 14:46:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}}, 0xb8}}, 0x0) 14:46:41 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000003000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0xd8}, 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:41 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x100000000000000}}}, 0xb8}}, 0x0) 14:46:41 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000005000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:41 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}}}, 0xb8}}, 0x0) 14:46:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) 14:46:41 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:42 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000006000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 14:46:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}}}, 0xb8}}, 0x0) 14:46:42 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000007000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x9000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:42 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:42 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}}, 0xb8}}, 0x0) 14:46:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 14:46:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000008000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:43 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1810000000000000}}}, 0xb8}}, 0x0) 14:46:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x700000000000000}}}, 0xb8}}, 0x0) 14:46:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000007c000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:43 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000}}}, 0xb8}}, 0x0) 14:46:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xa000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x900000000000000}}}, 0xb8}}, 0x0) 14:46:43 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000f0000100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:43 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}}, 0xb8}}, 0x0) 14:46:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf00000000000000}}}, 0xb8}}, 0x0) 14:46:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000030100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:46:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2f00000000000000}}}, 0xb8}}, 0x0) 14:46:44 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:44 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000050100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}}, 0xb8}}, 0x0) 14:46:44 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x1, 0x0, 0x7}, 0x10) 14:46:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x6b04000000000000}}}, 0xb8}}, 0x0) 14:46:44 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:44 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) 14:46:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:46:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000060100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:46:45 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:45 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) [ 3272.177272][T10477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:45 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000070100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x9effffff00000000}}}, 0xb8}}, 0x0) 14:46:45 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) 14:46:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:46:45 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:46 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x7}, 0x10) 14:46:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:46:46 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000001f0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:46:46 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:46:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xd000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:46:46 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000003f0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:46:46 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) 14:46:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:46:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:46:47 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000007c0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:47 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 14:46:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:46:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xe000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 14:46:48 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000f00100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:48 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, 0x0, 0x0) 14:46:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:46:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfffffffc}}}, 0xb8}}, 0x0) 14:46:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0xb8}}, 0x0) 14:46:48 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000000ca000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:46:48 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xd8}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000008000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000008000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r2}, 0x10) sendfile(r1, r2, &(0x7f0000000000)=0x72fe, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r2, 0xb2074000) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getaddr={0x18, 0x16, 0x20, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x31, 0xfe, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x141c8e571a5f01e}, 0x2004c0c0) 14:46:48 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, 0x0, 0x0) 14:46:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:46:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xf000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 14:46:49 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000000f0000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}}, 0xb8}}, 0x0) 14:46:49 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:46:49 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, 0x0, 0x0) 14:46:49 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000ca0000000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 14:46:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}}, 0xb8}}, 0x0) 14:46:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f00000002c0)={0x23, 0x10, 0x3}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) 14:46:49 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0), 0x0) 14:46:49 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000f00000000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f00000002c0)={0x23, 0x10, 0x3}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) 14:46:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x7}}}, 0xb8}}, 0x0) 14:46:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}}, 0xb8}}, 0x0) 14:46:50 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000020100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:50 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0), 0x0) 14:46:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f00000002c0)={0x23, 0x10, 0x3}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) [ 3277.298996][T10477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:50 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000030100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0xb8}}, 0x0) 14:46:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:46:50 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0), 0x0) 14:46:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f00000002c0)={0x23, 0x10, 0x3}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) 14:46:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf}}}, 0xb8}}, 0x0) 14:46:51 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000050100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}}, 0xb8}}, 0x0) 14:46:51 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f00000002c0)={0x23, 0x10, 0x3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:46:51 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{0x0}], 0x1) 14:46:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}, 0xb8}}, 0x0) 14:46:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2f}}}, 0xb8}}, 0x0) 14:46:51 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000060100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:51 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$phonet(r1, &(0x7f00000002c0)={0x23, 0x10, 0x3}, 0x10) 14:46:51 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{0x0}], 0x1) 14:46:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}}, 0xb8}}, 0x0) 14:46:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x12000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:52 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000070100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf0}}}, 0xb8}}, 0x0) 14:46:52 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{0x0}], 0x1) 14:46:52 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) 14:46:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}}, 0xb8}}, 0x0) 14:46:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x300}}}, 0xb8}}, 0x0) 14:46:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}}, 0xb8}}, 0x0) 14:46:52 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000080100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:52 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:46:52 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)}], 0x1) 14:46:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x46b}}}, 0xb8}}, 0x0) 14:46:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x13000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:53 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c040000000000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000f000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x1) 14:46:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1018}}}, 0xb8}}, 0x0) 14:46:53 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000007c0100000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x700}}}, 0xb8}}, 0x0) 14:46:53 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)}], 0x1) 14:46:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x900}}}, 0xb8}}, 0x0) 14:46:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1810}}}, 0xb8}}, 0x0) 14:46:53 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 14:46:53 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000300000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:53 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)}], 0x1) 14:46:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf00}}}, 0xb8}}, 0x0) 14:46:54 executing program 0: ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 14:46:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}}}, 0xb8}}, 0x0) 14:46:54 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000500000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2f00}}}, 0xb8}}, 0x0) 14:46:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x14000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:54 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7", 0x9}], 0x1) 14:46:54 executing program 0: ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 14:46:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0xb8}}, 0x0) 14:46:54 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000600000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x6b04}}}, 0xb8}}, 0x0) 14:46:54 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7", 0x9}], 0x1) 14:46:55 executing program 0: ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 14:46:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}}, 0xb8}}, 0x0) 14:46:55 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000700000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:55 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 14:46:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf000}}}, 0xb8}}, 0x0) 14:46:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x15000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}}, 0xb8}}, 0x0) 14:46:55 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7", 0x9}], 0x1) 14:46:55 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000900000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x34000}}}, 0xb8}}, 0x0) 14:46:55 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 14:46:55 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000030b00000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x400300}}}, 0xb8}}, 0x0) 14:46:55 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 14:46:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}}, 0xb8}}, 0x0) 14:46:56 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8be", 0xe}], 0x1) [ 3283.045326][T26477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:46:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 14:46:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x16000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 14:46:56 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000001f00000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:56 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (fail_nth: 1) 14:46:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1000000}}}, 0xb8}}, 0x0) 14:46:56 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8be", 0xe}], 0x1) [ 3283.858258][T20689] FAULT_INJECTION: forcing a failure. [ 3283.858258][T20689] name failslab, interval 1, probability 0, space 0, times 0 [ 3283.871239][T20689] CPU: 1 PID: 20689 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 3283.879710][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3283.889785][T20689] Call Trace: [ 3283.893080][T20689] [ 3283.896024][T20689] dump_stack_lvl+0xcd/0x134 [ 3283.900650][T20689] should_fail.cold+0x5/0xa [ 3283.905228][T20689] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3283.911046][T20689] should_failslab+0x5/0x10 [ 3283.915561][T20689] __kmalloc+0x72/0x320 [ 3283.919839][T20689] tomoyo_realpath_from_path+0xc3/0x620 [ 3283.925415][T20689] ? tomoyo_profile+0x42/0x50 [ 3283.930112][T20689] tomoyo_path_number_perm+0x1d5/0x590 [ 3283.935582][T20689] ? tomoyo_path_number_perm+0x18d/0x590 [ 3283.941223][T20689] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3283.947069][T20689] ? lock_downgrade+0x6e0/0x6e0 [ 3283.951932][T20689] ? __fget_files+0x23d/0x3e0 [ 3283.956620][T20689] security_file_ioctl+0x50/0xb0 [ 3283.961626][T20689] __x64_sys_ioctl+0xb3/0x200 [ 3283.966313][T20689] do_syscall_64+0x35/0xb0 [ 3283.970731][T20689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3283.976625][T20689] RIP: 0033:0x7fe61bbeaae9 [ 3283.981046][T20689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3284.000757][T20689] RSP: 002b:00007fe619160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3284.009172][T20689] RAX: ffffffffffffffda RBX: 00007fe61bcfdf60 RCX: 00007fe61bbeaae9 [ 3284.017138][T20689] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003 [ 3284.025106][T20689] RBP: 00007fe6191601d0 R08: 0000000000000000 R09: 0000000000000000 [ 3284.033073][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3284.041035][T20689] R13: 00007fff92f8020f R14: 00007fe619160300 R15: 0000000000022000 [ 3284.049028][T20689] [ 3284.053880][T20689] ERROR: Out of memory at tomoyo_realpath_from_path. 14:46:57 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000200000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:57 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (fail_nth: 2) 14:46:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0xb8}}, 0x0) 14:46:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2000000}}}, 0xb8}}, 0x0) [ 3284.311871][T20705] FAULT_INJECTION: forcing a failure. [ 3284.311871][T20705] name failslab, interval 1, probability 0, space 0, times 0 [ 3284.325569][T20705] CPU: 1 PID: 20705 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 3284.334136][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3284.344219][T20705] Call Trace: [ 3284.347522][T20705] [ 3284.350460][T20705] dump_stack_lvl+0xcd/0x134 [ 3284.355079][T20705] should_fail.cold+0x5/0xa [ 3284.359656][T20705] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3284.365051][T20705] should_failslab+0x5/0x10 [ 3284.369582][T20705] __kmalloc+0x72/0x320 [ 3284.373768][T20705] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3284.379006][T20705] tomoyo_encode+0x28/0x50 [ 3284.383448][T20705] tomoyo_realpath_from_path+0x186/0x620 [ 3284.389109][T20705] ? tomoyo_profile+0x42/0x50 [ 3284.393818][T20705] tomoyo_path_number_perm+0x1d5/0x590 [ 3284.399305][T20705] ? tomoyo_path_number_perm+0x18d/0x590 [ 3284.404976][T20705] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3284.410852][T20705] ? lock_downgrade+0x6e0/0x6e0 [ 3284.415830][T20705] ? __fget_files+0x23d/0x3e0 [ 3284.420533][T20705] security_file_ioctl+0x50/0xb0 [ 3284.425485][T20705] __x64_sys_ioctl+0xb3/0x200 [ 3284.430166][T20705] do_syscall_64+0x35/0xb0 [ 3284.434585][T20705] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3284.440492][T20705] RIP: 0033:0x7fe61bbeaae9 [ 3284.444907][T20705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3284.464526][T20705] RSP: 002b:00007fe619160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3284.472937][T20705] RAX: ffffffffffffffda RBX: 00007fe61bcfdf60 RCX: 00007fe61bbeaae9 [ 3284.480904][T20705] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003 [ 3284.488866][T20705] RBP: 00007fe6191601d0 R08: 0000000000000000 R09: 0000000000000000 [ 3284.496834][T20705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3284.504798][T20705] R13: 00007fff92f8020f R14: 00007fe619160300 R15: 0000000000022000 14:46:57 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000300000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0xb8}}, 0x0) [ 3284.512780][T20705] [ 3284.517769][T20705] ERROR: Out of memory at tomoyo_realpath_from_path. 14:46:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x3000000}}}, 0xb8}}, 0x0) 14:46:58 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8be", 0xe}], 0x1) 14:46:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}, 0xb8}}, 0x0) 14:46:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (fail_nth: 3) 14:46:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x17000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:58 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000400000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3285.113265][T20722] FAULT_INJECTION: forcing a failure. [ 3285.113265][T20722] name failslab, interval 1, probability 0, space 0, times 0 [ 3285.127336][T20722] CPU: 1 PID: 20722 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 3285.135801][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3285.145879][T20722] Call Trace: [ 3285.149174][T20722] [ 3285.152116][T20722] dump_stack_lvl+0xcd/0x134 [ 3285.156737][T20722] should_fail.cold+0x5/0xa [ 3285.161280][T20722] should_failslab+0x5/0x10 [ 3285.165836][T20722] kmem_cache_alloc_node+0x65/0x3d0 [ 3285.171057][T20722] ? __alloc_skb+0x214/0x360 [ 3285.175676][T20722] ? pep_ioctl+0x57/0x510 [ 3285.180106][T20722] __alloc_skb+0x214/0x360 [ 3285.184562][T20722] pep_alloc_skb+0x31/0x290 [ 3285.189095][T20722] pep_ioctl+0x299/0x510 [ 3285.193365][T20722] pn_socket_ioctl+0xa0/0x380 [ 3285.198926][T20722] sock_do_ioctl+0xcc/0x230 [ 3285.203456][T20722] ? put_user_ifreq+0x140/0x140 [ 3285.208346][T20722] ? vfs_fileattr_set+0xbe0/0xbe0 [ 3285.213424][T20722] sock_ioctl+0x2f1/0x640 [ 3285.217773][T20722] ? br_ioctl_call+0xa0/0xa0 [ 3285.222382][T20722] ? __fget_files+0x23d/0x3e0 [ 3285.227072][T20722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3285.233318][T20722] ? br_ioctl_call+0xa0/0xa0 [ 3285.237916][T20722] __x64_sys_ioctl+0x193/0x200 [ 3285.242685][T20722] do_syscall_64+0x35/0xb0 [ 3285.247107][T20722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3285.252997][T20722] RIP: 0033:0x7fe61bbeaae9 [ 3285.257425][T20722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3285.277028][T20722] RSP: 002b:00007fe619160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3285.285440][T20722] RAX: ffffffffffffffda RBX: 00007fe61bcfdf60 RCX: 00007fe61bbeaae9 [ 3285.293408][T20722] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003 [ 3285.301372][T20722] RBP: 00007fe6191601d0 R08: 0000000000000000 R09: 0000000000000000 14:46:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x4000000}}}, 0xb8}}, 0x0) [ 3285.309339][T20722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3285.317302][T20722] R13: 00007fff92f8020f R14: 00007fe619160300 R15: 0000000000022000 [ 3285.325279][T20722] 14:46:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}}, 0xb8}}, 0x0) 14:46:58 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000500000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:58 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d", 0x10}], 0x1) 14:46:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x7000000}}}, 0xb8}}, 0x0) 14:46:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}}, 0xb8}}, 0x0) 14:46:58 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (fail_nth: 4) 14:46:58 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000600000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x9000000}}}, 0xb8}}, 0x0) 14:46:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}}}, 0xb8}}, 0x0) [ 3285.905180][T20752] FAULT_INJECTION: forcing a failure. [ 3285.905180][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 3285.917870][T20752] CPU: 0 PID: 20752 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 3285.926297][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3285.936349][T20752] Call Trace: [ 3285.939622][T20752] [ 3285.942562][T20752] dump_stack_lvl+0xcd/0x134 [ 3285.947174][T20752] should_fail.cold+0x5/0xa [ 3285.951682][T20752] should_failslab+0x5/0x10 [ 3285.956182][T20752] __kmalloc_node_track_caller+0x7d/0x340 [ 3285.961899][T20752] ? pep_alloc_skb+0x31/0x290 [ 3285.966582][T20752] __alloc_skb+0xda/0x360 [ 3285.970916][T20752] pep_alloc_skb+0x31/0x290 [ 3285.975415][T20752] pep_ioctl+0x299/0x510 [ 3285.979677][T20752] pn_socket_ioctl+0xa0/0x380 [ 3285.984370][T20752] sock_do_ioctl+0xcc/0x230 [ 3285.988881][T20752] ? put_user_ifreq+0x140/0x140 [ 3285.993747][T20752] ? vfs_fileattr_set+0xbe0/0xbe0 [ 3285.998799][T20752] sock_ioctl+0x2f1/0x640 [ 3286.003135][T20752] ? br_ioctl_call+0xa0/0xa0 [ 3286.007734][T20752] ? __fget_files+0x23d/0x3e0 [ 3286.012415][T20752] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3286.018663][T20752] ? br_ioctl_call+0xa0/0xa0 [ 3286.023268][T20752] __x64_sys_ioctl+0x193/0x200 [ 3286.028044][T20752] do_syscall_64+0x35/0xb0 [ 3286.032462][T20752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3286.038352][T20752] RIP: 0033:0x7fe61bbeaae9 [ 3286.042760][T20752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3286.062481][T20752] RSP: 002b:00007fe619160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3286.070892][T20752] RAX: ffffffffffffffda RBX: 00007fe61bcfdf60 RCX: 00007fe61bbeaae9 [ 3286.079471][T20752] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003 [ 3286.087433][T20752] RBP: 00007fe6191601d0 R08: 0000000000000000 R09: 0000000000000000 [ 3286.095401][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3286.103369][T20752] R13: 00007fff92f8020f R14: 00007fe619160300 R15: 0000000000022000 [ 3286.111347][T20752] 14:46:59 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000700000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:46:59 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d", 0x10}], 0x1) 14:46:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf000000}}}, 0xb8}}, 0x0) 14:46:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:46:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}}, 0xb8}}, 0x0) 14:46:59 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (fail_nth: 5) 14:46:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2f000000}}}, 0xb8}}, 0x0) 14:46:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}}, 0xb8}}, 0x0) 14:46:59 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000800000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3286.635674][T20774] FAULT_INJECTION: forcing a failure. [ 3286.635674][T20774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3286.649377][T20774] CPU: 0 PID: 20774 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 3286.657823][T20774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3286.667879][T20774] Call Trace: [ 3286.671152][T20774] [ 3286.674074][T20774] dump_stack_lvl+0xcd/0x134 [ 3286.678677][T20774] should_fail.cold+0x5/0xa [ 3286.683182][T20774] _copy_to_user+0x2c/0x150 [ 3286.687686][T20774] simple_read_from_buffer+0xcc/0x160 [ 3286.693067][T20774] proc_fail_nth_read+0x187/0x220 [ 3286.698106][T20774] ? proc_sessionid_read+0x220/0x220 [ 3286.703396][T20774] ? security_file_permission+0xab/0xd0 [ 3286.708946][T20774] ? proc_sessionid_read+0x220/0x220 [ 3286.714242][T20774] vfs_read+0x1b5/0x600 [ 3286.718494][T20774] ksys_read+0x12d/0x250 [ 3286.722739][T20774] ? vfs_write+0xae0/0xae0 [ 3286.727156][T20774] ? syscall_enter_from_user_mode+0x21/0x70 [ 3286.733064][T20774] do_syscall_64+0x35/0xb0 [ 3286.737488][T20774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3286.743388][T20774] RIP: 0033:0x7fe61bb9d69c [ 3286.747806][T20774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3286.767408][T20774] RSP: 002b:00007fe619160170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3286.775819][T20774] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe61bb9d69c 14:46:59 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d", 0x10}], 0x1) [ 3286.783803][T20774] RDX: 000000000000000f RSI: 00007fe6191601e0 RDI: 0000000000000004 [ 3286.791767][T20774] RBP: 00007fe6191601d0 R08: 0000000000000000 R09: 0000000000000000 [ 3286.799731][T20774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3286.807692][T20774] R13: 00007fff92f8020f R14: 00007fe619160300 R15: 0000000000022000 [ 3286.815673][T20774] 14:46:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18100000}}}, 0xb8}}, 0x0) 14:47:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x6b040000}}}, 0xb8}}, 0x0) 14:47:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 14:47:00 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000900000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000}}}, 0xb8}}, 0x0) 14:47:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x19000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x80ffffff}}}, 0xb8}}, 0x0) 14:47:00 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86", 0x11}], 0x1) 14:47:00 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000b03000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x2, 0x0) 14:47:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}}, 0xb8}}, 0x0) 14:47:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x10, 0x0) 14:47:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}}}, 0xb8}}, 0x0) 14:47:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x9effffff}}}, 0xb8}}, 0x0) 14:47:00 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000000ca000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:00 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86", 0x11}], 0x1) 14:47:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x4c01, 0x0) 14:47:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) 14:47:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}}, 0xb8}}, 0x0) 14:47:01 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000000f0000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:01 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x541b, 0x0) 14:47:01 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86", 0x11}], 0x1) 14:47:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) 14:47:01 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000102000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xfcffffff}}}, 0xb8}}, 0x0) 14:47:01 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x5421, 0x0) 14:47:01 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) (fail_nth: 1) 14:47:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}}}, 0xb8}}, 0x0) [ 3289.178082][T20862] FAULT_INJECTION: forcing a failure. [ 3289.178082][T20862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3289.191524][T20862] CPU: 0 PID: 20862 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 3289.199972][T20862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3289.210054][T20862] Call Trace: [ 3289.213355][T20862] [ 3289.216398][T20862] dump_stack_lvl+0xcd/0x134 [ 3289.221022][T20862] should_fail.cold+0x5/0xa [ 3289.225561][T20862] _copy_from_user+0x2c/0x180 [ 3289.230278][T20862] iovec_from_user+0x242/0x3c0 [ 3289.235082][T20862] __import_iovec+0x65/0x580 [ 3289.239702][T20862] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3289.245715][T20862] import_iovec+0x10c/0x150 [ 3289.250253][T20862] vfs_writev+0xc1/0x630 [ 3289.254526][T20862] ? vfs_iter_write+0xa0/0xa0 [ 3289.259235][T20862] ? lock_downgrade+0x6e0/0x6e0 [ 3289.264117][T20862] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3289.270142][T20862] ? __fget_files+0x23d/0x3e0 [ 3289.274857][T20862] ? __fget_light+0xea/0x280 [ 3289.279481][T20862] do_writev+0x139/0x300 [ 3289.283755][T20862] ? vfs_writev+0x630/0x630 [ 3289.288287][T20862] ? syscall_enter_from_user_mode+0x21/0x70 [ 3289.294216][T20862] do_syscall_64+0x35/0xb0 [ 3289.298664][T20862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3289.304585][T20862] RIP: 0033:0x7f09b402dae9 [ 3289.309028][T20862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3289.328658][T20862] RSP: 002b:00007f09b15a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3289.337125][T20862] RAX: ffffffffffffffda RBX: 00007f09b4140f60 RCX: 00007f09b402dae9 [ 3289.345134][T20862] RDX: 0000000000000001 RSI: 00000000200014c0 RDI: 0000000000000003 [ 3289.353164][T20862] RBP: 00007f09b15a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 3289.361154][T20862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3289.369151][T20862] R13: 00007ffddac3cd1f R14: 00007f09b15a3300 R15: 0000000000022000 [ 3289.377166][T20862] 14:47:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1b000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:02 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x5450, 0x0) 14:47:02 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000103000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xffff0000}}}, 0xb8}}, 0x0) 14:47:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}}, 0xb8}}, 0x0) 14:47:02 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) (fail_nth: 2) [ 3289.768010][T20874] FAULT_INJECTION: forcing a failure. [ 3289.768010][T20874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3289.781445][T20874] CPU: 0 PID: 20874 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 3289.789893][T20874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3289.799965][T20874] Call Trace: [ 3289.803255][T20874] [ 3289.806199][T20874] dump_stack_lvl+0xcd/0x134 [ 3289.810817][T20874] should_fail.cold+0x5/0xa [ 3289.815335][T20874] _copy_from_iter+0x389/0x1320 [ 3289.820203][T20874] ? hash_and_copy_to_iter+0x200/0x200 [ 3289.825680][T20874] ? __lock_acquire+0xbc2/0x54a0 [ 3289.830633][T20874] tun_get_user+0x229/0x36d0 [ 3289.835235][T20874] ? tun_build_skb+0xfc0/0xfc0 [ 3289.840003][T20874] ? lock_downgrade+0x6e0/0x6e0 [ 3289.844874][T20874] tun_chr_write_iter+0xdd/0x1a0 [ 3289.849815][T20874] do_iter_readv_writev+0x472/0x750 [ 3289.855022][T20874] ? new_sync_write+0x660/0x660 [ 3289.859894][T20874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3289.866135][T20874] ? security_file_permission+0xab/0xd0 [ 3289.871682][T20874] do_iter_write+0x188/0x710 [ 3289.876290][T20874] ? import_iovec+0x10c/0x150 [ 3289.880976][T20874] vfs_writev+0x1aa/0x630 [ 3289.885308][T20874] ? vfs_iter_write+0xa0/0xa0 [ 3289.889986][T20874] ? lock_downgrade+0x6e0/0x6e0 [ 3289.894848][T20874] ? __fget_files+0x23d/0x3e0 [ 3289.899537][T20874] ? __fget_light+0xea/0x280 [ 3289.904130][T20874] do_writev+0x139/0x300 [ 3289.908380][T20874] ? vfs_writev+0x630/0x630 [ 3289.912885][T20874] ? syscall_enter_from_user_mode+0x21/0x70 [ 3289.918799][T20874] do_syscall_64+0x35/0xb0 [ 3289.923213][T20874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3289.929101][T20874] RIP: 0033:0x7f09b402dae9 [ 3289.933510][T20874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3289.953120][T20874] RSP: 002b:00007f09b15a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3289.961539][T20874] RAX: ffffffffffffffda RBX: 00007f09b4140f60 RCX: 00007f09b402dae9 [ 3289.969772][T20874] RDX: 0000000000000001 RSI: 00000000200014c0 RDI: 0000000000000003 [ 3289.977745][T20874] RBP: 00007f09b15a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 3289.985713][T20874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3289.993696][T20874] R13: 00007ffddac3cd1f R14: 00007f09b15a3300 R15: 0000000000022000 [ 3290.001691][T20874] 14:47:03 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x5451, 0x0) 14:47:03 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000105000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xfffff000}}}, 0xb8}}, 0x0) 14:47:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}, 0xb8}}, 0x0) 14:47:03 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) (fail_nth: 3) 14:47:03 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x5452, 0x0) [ 3290.424966][T20897] FAULT_INJECTION: forcing a failure. [ 3290.424966][T20897] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.437732][T20897] CPU: 0 PID: 20897 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 3290.446173][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3290.456247][T20897] Call Trace: [ 3290.459718][T20897] [ 3290.462663][T20897] dump_stack_lvl+0xcd/0x134 [ 3290.467287][T20897] should_fail.cold+0x5/0xa [ 3290.471825][T20897] should_failslab+0x5/0x10 [ 3290.476352][T20897] kmem_cache_alloc_node+0x65/0x3d0 [ 3290.481571][T20897] ? __alloc_skb+0x214/0x360 [ 3290.486195][T20897] __alloc_skb+0x214/0x360 [ 3290.490651][T20897] alloc_skb_with_frags+0x93/0x620 [ 3290.495800][T20897] sock_alloc_send_pskb+0x783/0x910 [ 3290.501032][T20897] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3290.506790][T20897] ? sock_wmalloc+0x120/0x120 [ 3290.511498][T20897] ? __lock_acquire+0xbc2/0x54a0 [ 3290.516473][T20897] tun_get_user+0x12f5/0x36d0 [ 3290.521201][T20897] ? tun_build_skb+0xfc0/0xfc0 [ 3290.525998][T20897] ? lock_downgrade+0x6e0/0x6e0 [ 3290.530892][T20897] tun_chr_write_iter+0xdd/0x1a0 [ 3290.535857][T20897] do_iter_readv_writev+0x472/0x750 [ 3290.541088][T20897] ? new_sync_write+0x660/0x660 [ 3290.545973][T20897] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3290.552416][T20897] ? security_file_permission+0xab/0xd0 [ 3290.558080][T20897] do_iter_write+0x188/0x710 [ 3290.562719][T20897] ? import_iovec+0x10c/0x150 [ 3290.567429][T20897] vfs_writev+0x1aa/0x630 [ 3290.571792][T20897] ? vfs_iter_write+0xa0/0xa0 [ 3290.576516][T20897] ? lock_downgrade+0x6e0/0x6e0 [ 3290.581402][T20897] ? __fget_files+0x23d/0x3e0 [ 3290.586110][T20897] ? __fget_light+0xea/0x280 [ 3290.590752][T20897] do_writev+0x139/0x300 [ 3290.595021][T20897] ? vfs_writev+0x630/0x630 [ 3290.599547][T20897] ? syscall_enter_from_user_mode+0x21/0x70 [ 3290.605452][T20897] do_syscall_64+0x35/0xb0 [ 3290.609901][T20897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3290.615811][T20897] RIP: 0033:0x7f09b402dae9 [ 3290.620243][T20897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3290.639872][T20897] RSP: 002b:00007f09b15a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3290.648306][T20897] RAX: ffffffffffffffda RBX: 00007f09b4140f60 RCX: 00007f09b402dae9 [ 3290.656297][T20897] RDX: 0000000000000001 RSI: 00000000200014c0 RDI: 0000000000000003 [ 3290.664285][T20897] RBP: 00007f09b15a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 3290.672270][T20897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3290.680252][T20897] R13: 00007ffddac3cd1f R14: 00007f09b15a3300 R15: 0000000000022000 [ 3290.688256][T20897] 14:47:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}}}, 0xb8}}, 0x0) 14:47:03 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000106000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xffffff7f}}}, 0xb8}}, 0x0) 14:47:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1c000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:03 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x5460, 0x0) 14:47:03 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) (fail_nth: 4) 14:47:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}}, 0xb8}}, 0x0) 14:47:03 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x6364, 0x0) 14:47:03 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000107000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xffffff80}}}, 0xb8}}, 0x0) [ 3290.995218][T20915] FAULT_INJECTION: forcing a failure. [ 3290.995218][T20915] name failslab, interval 1, probability 0, space 0, times 0 [ 3291.008434][T20915] CPU: 1 PID: 20915 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 3291.016886][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3291.027055][T20915] Call Trace: [ 3291.030358][T20915] [ 3291.033303][T20915] dump_stack_lvl+0xcd/0x134 [ 3291.037921][T20915] should_fail.cold+0x5/0xa [ 3291.042632][T20915] should_failslab+0x5/0x10 [ 3291.047141][T20915] __kmalloc_node_track_caller+0x7d/0x340 [ 3291.052864][T20915] ? alloc_skb_with_frags+0x93/0x620 [ 3291.058256][T20915] __alloc_skb+0xda/0x360 [ 3291.062597][T20915] alloc_skb_with_frags+0x93/0x620 [ 3291.067730][T20915] sock_alloc_send_pskb+0x783/0x910 [ 3291.072939][T20915] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3291.078668][T20915] ? sock_wmalloc+0x120/0x120 [ 3291.083361][T20915] ? __lock_acquire+0xbc2/0x54a0 [ 3291.088313][T20915] tun_get_user+0x12f5/0x36d0 [ 3291.093004][T20915] ? tun_build_skb+0xfc0/0xfc0 [ 3291.097773][T20915] ? lock_downgrade+0x6e0/0x6e0 [ 3291.102634][T20915] tun_chr_write_iter+0xdd/0x1a0 [ 3291.107588][T20915] do_iter_readv_writev+0x472/0x750 [ 3291.112798][T20915] ? new_sync_write+0x660/0x660 [ 3291.117657][T20915] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3291.123990][T20915] ? security_file_permission+0xab/0xd0 [ 3291.129549][T20915] do_iter_write+0x188/0x710 [ 3291.134148][T20915] ? import_iovec+0x10c/0x150 [ 3291.138921][T20915] vfs_writev+0x1aa/0x630 [ 3291.143268][T20915] ? vfs_iter_write+0xa0/0xa0 [ 3291.147951][T20915] ? lock_downgrade+0x6e0/0x6e0 [ 3291.153289][T20915] ? __fget_files+0x23d/0x3e0 [ 3291.157978][T20915] ? __fget_light+0xea/0x280 [ 3291.162572][T20915] do_writev+0x139/0x300 [ 3291.166815][T20915] ? vfs_writev+0x630/0x630 [ 3291.171421][T20915] ? syscall_enter_from_user_mode+0x21/0x70 [ 3291.177424][T20915] do_syscall_64+0x35/0xb0 [ 3291.181840][T20915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3291.187918][T20915] RIP: 0033:0x7f09b402dae9 [ 3291.192427][T20915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3291.212030][T20915] RSP: 002b:00007f09b15a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3291.220440][T20915] RAX: ffffffffffffffda RBX: 00007f09b4140f60 RCX: 00007f09b402dae9 [ 3291.228405][T20915] RDX: 0000000000000001 RSI: 00000000200014c0 RDI: 0000000000000003 [ 3291.236374][T20915] RBP: 00007f09b15a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 3291.244436][T20915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3291.252400][T20915] R13: 00007ffddac3cd1f R14: 00007f09b15a3300 R15: 0000000000022000 [ 3291.260380][T20915] 14:47:04 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8901, 0x0) 14:47:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}}, 0xb8}}, 0x0) 14:47:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xffffff9e}}}, 0xb8}}, 0x0) 14:47:04 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000108000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:04 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8902, 0x0) 14:47:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1d000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0xb8}}, 0x0) 14:47:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xfffffff0}}}, 0xb8}}, 0x0) 14:47:04 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) (fail_nth: 5) 14:47:04 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000017c000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:04 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8903, 0x0) [ 3291.922592][T20947] FAULT_INJECTION: forcing a failure. [ 3291.922592][T20947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3291.936065][T20947] CPU: 1 PID: 20947 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 3291.944676][T20947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3291.954780][T20947] Call Trace: [ 3291.958077][T20947] [ 3291.961018][T20947] dump_stack_lvl+0xcd/0x134 [ 3291.965658][T20947] should_fail.cold+0x5/0xa [ 3291.970190][T20947] _copy_from_iter+0x389/0x1320 [ 3291.975072][T20947] ? hash_and_copy_to_iter+0x200/0x200 [ 3291.980556][T20947] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3291.986301][T20947] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3291.992567][T20947] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3291.998815][T20947] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3292.005058][T20947] ? __phys_addr+0xc4/0x140 [ 3292.009592][T20947] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3292.015848][T20947] ? __phys_addr_symbol+0x2c/0x70 [ 3292.021308][T20947] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3292.027028][T20947] ? __check_object_size+0x16e/0x3f0 [ 3292.032315][T20947] skb_copy_datagram_from_iter+0x120/0x6c0 [ 3292.038127][T20947] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 3292.043873][T20947] tun_get_user+0x1f6f/0x36d0 [ 3292.048566][T20947] ? tun_build_skb+0xfc0/0xfc0 [ 3292.053343][T20947] ? lock_downgrade+0x6e0/0x6e0 [ 3292.058216][T20947] tun_chr_write_iter+0xdd/0x1a0 [ 3292.063157][T20947] do_iter_readv_writev+0x472/0x750 [ 3292.068360][T20947] ? new_sync_write+0x660/0x660 [ 3292.073214][T20947] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3292.079458][T20947] ? security_file_permission+0xab/0xd0 [ 3292.085003][T20947] do_iter_write+0x188/0x710 [ 3292.089599][T20947] ? import_iovec+0x10c/0x150 [ 3292.094285][T20947] vfs_writev+0x1aa/0x630 [ 3292.098621][T20947] ? vfs_iter_write+0xa0/0xa0 [ 3292.103298][T20947] ? lock_downgrade+0x6e0/0x6e0 [ 3292.108158][T20947] ? __fget_files+0x23d/0x3e0 [ 3292.112840][T20947] ? __fget_light+0xea/0x280 [ 3292.117432][T20947] do_writev+0x139/0x300 [ 3292.121678][T20947] ? vfs_writev+0x630/0x630 [ 3292.126181][T20947] ? syscall_enter_from_user_mode+0x21/0x70 [ 3292.132093][T20947] do_syscall_64+0x35/0xb0 [ 3292.136511][T20947] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3292.142415][T20947] RIP: 0033:0x7f09b402dae9 [ 3292.146829][T20947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:47:05 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001f0000000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3292.166441][T20947] RSP: 002b:00007f09b15a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3292.174850][T20947] RAX: ffffffffffffffda RBX: 00007f09b4140f60 RCX: 00007f09b402dae9 [ 3292.182838][T20947] RDX: 0000000000000001 RSI: 00000000200014c0 RDI: 0000000000000003 [ 3292.190819][T20947] RBP: 00007f09b15a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 3292.198873][T20947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3292.206839][T20947] R13: 00007ffddac3cd1f R14: 00007f09b15a3300 R15: 0000000000022000 [ 3292.214828][T20947] 14:47:05 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8904, 0x0) 14:47:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xfffffffc}}}, 0xb8}}, 0x0) 14:47:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}}, 0xb8}}, 0x0) 14:47:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1e000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xffff00000000}}}, 0xb8}}, 0x0) 14:47:05 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100030000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:05 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8906, 0x0) 14:47:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) [ 3292.644708][T26477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:47:05 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) (fail_nth: 6) 14:47:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x40030000000000}}}, 0xb8}}, 0x0) 14:47:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}, 0xb8}}, 0x0) 14:47:05 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100050000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:05 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8907, 0x0) 14:47:05 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100060000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:05 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8912, 0x0) [ 3293.032517][T20986] FAULT_INJECTION: forcing a failure. [ 3293.032517][T20986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3293.045899][T20986] CPU: 0 PID: 20986 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 3293.054358][T20986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3293.064427][T20986] Call Trace: [ 3293.067707][T20986] [ 3293.070634][T20986] dump_stack_lvl+0xcd/0x134 [ 3293.075243][T20986] should_fail.cold+0x5/0xa [ 3293.079755][T20986] _copy_to_user+0x2c/0x150 [ 3293.084259][T20986] simple_read_from_buffer+0xcc/0x160 [ 3293.089899][T20986] proc_fail_nth_read+0x187/0x220 [ 3293.094934][T20986] ? proc_sessionid_read+0x220/0x220 [ 3293.100223][T20986] ? security_file_permission+0xab/0xd0 [ 3293.105788][T20986] ? proc_sessionid_read+0x220/0x220 [ 3293.111077][T20986] vfs_read+0x1b5/0x600 [ 3293.115241][T20986] ksys_read+0x12d/0x250 [ 3293.119482][T20986] ? vfs_write+0xae0/0xae0 [ 3293.123911][T20986] ? syscall_enter_from_user_mode+0x21/0x70 [ 3293.129814][T20986] do_syscall_64+0x35/0xb0 [ 3293.134243][T20986] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3293.140136][T20986] RIP: 0033:0x7f09b3fe069c [ 3293.144545][T20986] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3293.164254][T20986] RSP: 002b:00007f09b15a3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3293.172665][T20986] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00007f09b3fe069c [ 3293.180629][T20986] RDX: 000000000000000f RSI: 00007f09b15a31e0 RDI: 0000000000000005 [ 3293.188591][T20986] RBP: 00007f09b15a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 3293.196567][T20986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3293.204530][T20986] R13: 00007ffddac3cd1f R14: 00007f09b15a3300 R15: 0000000000022000 [ 3293.212608][T20986] 14:47:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1f000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) 14:47:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) 14:47:06 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100070000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:06 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8913, 0x0) 14:47:06 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:06 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001001f0000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 14:47:06 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8914, 0x0) 14:47:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x100000000000000}}}, 0xb8}}, 0x0) 14:47:06 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001003f0000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) 14:47:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:07 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d05dd", 0x12}], 0x1) 14:47:07 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8933, 0x0) 14:47:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 14:47:07 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001007c0000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 14:47:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}}, 0xb8}}, 0x0) 14:47:07 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100f00000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 14:47:07 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8940, 0x0) 14:47:07 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x3}], 0x1) 14:47:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}}}, 0xb8}}, 0x0) 14:47:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x21000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:08 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001fffff000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x700000000000000}}}, 0xb8}}, 0x0) 14:47:08 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8941, 0x0) 14:47:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}}}, 0xb8}}, 0x0) 14:47:08 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x4}], 0x1) 14:47:08 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x894c, 0x0) 14:47:08 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000001fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x900000000000000}}}, 0xb8}}, 0x0) 14:47:08 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8953, 0x0) 14:47:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}}, 0xb8}}, 0x0) 14:47:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf00000000000000}}}, 0xb8}}, 0x0) 14:47:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x22000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:09 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0xfdef}], 0x1) 14:47:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1810000000000000}}}, 0xb8}}, 0x0) 14:47:09 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000002fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:09 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8955, 0x0) 14:47:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2f00000000000000}}}, 0xb8}}, 0x0) 14:47:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000}}}, 0xb8}}, 0x0) 14:47:09 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8982, 0x0) 14:47:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x6b04000000000000}}}, 0xb8}}, 0x0) 14:47:09 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000003fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}}, 0xb8}}, 0x0) 14:47:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x8983, 0x0) 14:47:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x23000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:10 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x20000292}], 0x1) 14:47:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:47:10 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000005fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:47:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89a0, 0x0) 14:47:10 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000006fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}}, 0xb8}}, 0x0) 14:47:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x9effffff00000000}}}, 0xb8}}, 0x0) [ 3297.684850][T10477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:47:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89a1, 0x0) [ 3297.774455][T10472] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 14:47:10 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x7ffff000}], 0x1) 14:47:10 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000007fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3f000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:47:11 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x0) 14:47:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:47:11 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000008fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:11 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0xfffffdef}], 0x1) 14:47:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:47:11 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000001ffe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:11 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89f1, 0x0) 14:47:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:47:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:47:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89f2, 0x0) 14:47:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4a000000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:12 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000003ffe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:12 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0xfffffffffffffdef}], 0x1) 14:47:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:47:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:47:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0xf505, 0x0) 14:47:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x400448c9, 0x0) 14:47:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:47:12 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000007cfe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:47:13 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001ffffff8dfe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:13 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x400448dd, 0x0) 14:47:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80010000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:47:13 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x7) 14:47:13 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001fffffff5fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 14:47:13 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x400454ca, 0x0) 14:47:13 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100f0fffffe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:13 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x40049366, 0x0) 14:47:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:47:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 14:47:14 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x8) 14:47:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x40049409, 0x0) 14:47:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfe050000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 14:47:14 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000018dfffffffe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2}}, 0xb8}}, 0x0) 14:47:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x4004f506, 0x0) 14:47:14 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x300) 14:47:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x3}}, 0xb8}}, 0x0) 14:47:14 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001f5fffffffe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x40086602, 0x0) 14:47:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0xb8}}, 0x0) 14:47:15 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100020000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:15 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0xffffff1f) 14:47:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x4}}, 0xb8}}, 0x0) 14:47:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:47:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x40086607, 0x0) 14:47:15 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100030000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:15 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x4e}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0xc0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x310) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x7}}, 0xb8}}, 0x0) 14:47:15 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x40186366, 0x0) 14:47:15 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100050000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}}, 0xb8}}, 0x0) 14:47:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}}, 0xb8}}, 0x0) 14:47:16 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x401c5820, 0x0) 14:47:16 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x20, 0x4, 0x52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x20, 0x1, 0x1}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, r0, 0x2d, r1}, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4804000025d3c444d0946242d8668520c92cc37d7f31e71a099a04851f0c7117caa17608872e0d1d97868c77d94d08f0a8a97f0949c75d942c6a1f7ff26dcd4b8aa0858fc1a31ee463cfc9b76180f54e6c0417c524bdde95d1d7b5d3d861d4f8196b4f7573a797af25fa7731c3569625ff823cf1ab9ef0c49af72144707a514d5f925e1758377410fe458fab4e55bfcda53b6d8d6306318d8730c83e28c8f99f3e73fc54528a9632552f97d2dd7922b28735936eabb9743d39b3fba96c339e3df7c456fb6573a30eed54aae7c5fa8d09a651fa42c6a234b5941c3027143d1e6eb0a3f9e1f052e140dc5608705e91f301af6e607ea37e82c25936058048547cb994f25f4b6152a2390f9e22f09c2cfb846be7e596d4d16c8e964ea42360", @ANYRES16, @ANYRES32, @ANYBLOB="2d0416267591de"], 0x448}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000200)=0x8001, 0x4) bind$inet(r3, &(0x7f0000001600)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x0, @generic={0x1a, "8112234d5dc24edcf026717225b6"}, @isdn={0x22, 0x0, 0x1f, 0x40, 0x3}, @l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='gretap0\x00', 0x1f, 0x101, 0x4}) writev(r2, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x9}}, 0xb8}}, 0x0) 14:47:16 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100060000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}}, 0xb8}}, 0x0) 14:47:16 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x4020940d, 0x0) [ 3303.534200][T10472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:47:16 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100070000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:16 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) r3 = accept4(r2, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000200)=0x80, 0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000240)={0x3, @default, 0xee00}) 14:47:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0xb8}}, 0x0) 14:47:16 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80086301, 0x0) 14:47:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xf}}, 0xb8}}, 0x0) 14:47:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:17 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80086601, 0x0) 14:47:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2f}}, 0xb8}}, 0x0) 14:47:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}}, 0xb8}}, 0x0) 14:47:17 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100080000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:17 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80108906, 0x0) 14:47:17 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0400005000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="e9e49551ac8ee6b718d9e45da0b86c3e221c841e37916d7d4d8e6e3a1a2bfeec08777ae94c857b4b998a547f6702091e90bf849e5a9cf3cb696a33714b0247aa9d33cb819627d9a9ab9d2a04f9f5", 0x4e}], 0x1) 14:47:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xf0}}, 0xb8}}, 0x0) 14:47:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}, 0xb8}}, 0x0) 14:47:17 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001007c0000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:17 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80108907, 0x0) 14:47:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x300}}, 0xb8}}, 0x0) 14:47:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:17 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100f00000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}}, 0xb8}}, 0x0) 14:47:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x46b}}, 0xb8}}, 0x0) 14:47:17 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x801c581f, 0x0) 14:47:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="868a34c5386154f4ae3ac8ba9e239af5b85a7670d1dab3eb4b5c5600040a4134c6386f05bcd59ee629fcb858db831c828ddb37864084cc16f745d3396efdc53e907d95278fb2276049bc35881109fa6fc8b0d6dfabca54eb9f969f8ade50a487db4bddb485a13ec03a3c9ef1859925cac62352c9e6699344486b5faeee8705e30e11d07811bf759e2032d385deaf0f15e4d6489caeca24ec426c6f4e8862e977c1e2c43811780d960512c7c3730c17370680a0fc33023701481a73", @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB="165bdd88ef1a2d45f605c7a9df9bd2593edf5f4e2fc1fe0dcb80eef7f96af410a065dc6fd8dd3ec8029407bffaaedda60d9031d32a640f42eff4d0e64e38ae"], 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008011) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x8040) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="699f0f8c", @ANYRES16, @ANYRES32, @ANYBLOB="2d0407b9010450fc372cc5a6f38c27fe84a21f499d32090f2b1813520342219bcd3d909ca20c71f135883e0b16e3689b2700000020000000000000"], 0x448}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) r5 = accept$alg(r4, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f00000000c0)={'macvlan1\x00', {0x2, 0x0, @initdev}}) writev(r2, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x200, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x1, 0x3}, 0x0, 0x0, &(0x7f00000005c0)={0x5, 0x10, 0x5, 0x6}, &(0x7f0000000600)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0xffffffff7fffffff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x7, 0x1, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000440)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x8, 0xf27c, 0xf8}, 0x10, r7, r6}, 0x78) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r5, &(0x7f0000000300)={'syz0', "d06479c91944b58844867bcf8f6711c47aac1e3d676ca0b4d50a38201d90724bcd82254f9c2f2e41b3c65445f69c06a20e1cc6b087abb26e5f0a96ccb29f1105feac8f3340c8da0bfd0db7f195f56deb376f930ca75cf68f35bf4869a7ff7f738f80ce492b59cec1e7cd1949a1359f381cd620cb5a503e460a2996fa17916944b0e1f4d3806ca43e91b80e81301f6a71d4c8e5ba6a968cc8316361cf749fd1f8e4bc8a3a709312f1ba98cc914587be2322cee8e55b14078b4951c0e1470e9e3e3068853c7312a21a0f20043932a4dbe9fad3f468bf7e7fe989227d10458aa62380"}, 0xe5) 14:47:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x810c9365, 0x0) 14:47:18 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000300fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}}, 0xb8}}, 0x0) 14:47:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x700}}, 0xb8}}, 0x0) 14:47:18 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) write$binfmt_misc(r2, &(0x7f0000000180)={'syz1', "5c804820c3a4db2c97948be72ddea0149c94113f46b08b68e9d223778dfa067dba61025142fb1f4ba7802f1347ea97fb50120f34dc53f41129c723d13d8d0ab9375cb070266b4d9fae4b5c57af2c660c153d99"}, 0x57) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0xc0045878, 0x0) 14:47:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:19 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000500fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}}, 0xb8}}, 0x0) 14:47:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0xc0045878, 0x0) 14:47:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x900}}, 0xb8}}, 0x0) 14:47:19 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48040000dc942eab86e5b439ab26e5301f830deb7f6b3813f454208b66d51ed1079e090fa6dfd7503edd59c027d677492518ba8ae4cb051d1d6d6f532e0dd7f9eedcdabc37634b378d0db9832193768b1a62b82e619aaa386157a043b1a366c69325cca02a65a87226bb37b6ff077bbdc9245cc7b276b703222fdcb893dfb95a8ebf884937ad0f851a40dcc6993e3421bfdd16eda68e53cf4a1cd34ba3d50b62356b348c752e4256ceed039247956d67428a0b992268ff5eaf", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}, {&(0x7f0000000180)="498da1d126ff092c949aea18b185cb157025d5b8278dcac94fc4ad168c606298d19ee3876e4f8347b399cbe8cd71", 0x2e}, {&(0x7f00000002c0)="319c2cdfc8b1ca034487e5246f617c2b73535eb7a41d4d64ced986110d0afa25e41ae60aa35e102c35a394c0b6329b4be56caf0ec765e16adffe44104cbcb561aecd497ea3e7ca3993b4e45a290366a2899f3bfcce0df5ff85f2089cabaf5ca53781acac82918b70e0d3eb2a343c7a645a0212428031538e6da5f2862e04c064eef0c69a52fd8147d921ba88702b80da06ead35a7076f650e49cf44c6550b56a1cabffa7a777dc608026745374f3677b19efcda2412dd6899cd8319f09fbf7d0ede4c2cb66872d3ada6033c90e48409204662752bd34bb39d7a83846f4ce", 0xde}, {&(0x7f00000001c0)="cc4dd557dfca85f9ce33f0a310e40313f2907953b323bbc7ed880781dd1b79c722db37fdfa6945f56d4efb6206b1556ecc2b03a9bebffda9e0b1ee400aa06b05d3efd2ad279c7833860741a412fbbebe648c97eede9dec93ac00d2", 0x5b}, {&(0x7f0000000240)="bfde5744a184ec909abfa5b5cc32d8cd6b4ede", 0x13}, {&(0x7f00000003c0)="c36defd1deb2cd608c1f8b5aa3e9a13be469d388740c36e1a1b5234e161c7f05c171ebbe0f94e93800bd695b536d0652219630fd4682304e3098c823e99ea3415f8eb31b0385cacb601f51c1542381138729ba1fa7646e7348615e4858a34c8bee1a19a6d8798b69185dcfa1a515f280948956d2bd9bd57a36938c5cd412a16b7a23c14b1aa7e454773212b67bf421593a", 0x91}], 0x51) 14:47:19 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000600fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xf00}}, 0xb8}}, 0x0) 14:47:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1018}}}, 0xb8}}, 0x0) 14:47:19 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0xc0189436, 0x0) 14:47:19 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff7f000000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2f00}}, 0xb8}}, 0x0) 14:47:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1810}}}, 0xb8}}, 0x0) 14:47:20 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000700fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:20 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0xc020660b, 0x0) 14:47:20 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d040104507550841caa92f8711600de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="67ea071301803a00fc000000000000000000000000000000fe8000000000000000000000000000bb840400fb0000000000000000000000000000fffffffffffffe880000000000000000000000000001890090780000000000000000000000000000ffffac1e0101ff0100000000000000000001020d88e45a719228a5432cd048bd67ce8c08b55b017dbeb4512a2d3b9a85fecbcc109e7b0281538e25d7bd2f922afa19ade721fcce4b1be40e89a7ba6ee02596dff905f8fb6a011acdbe3bedbc5c4cda9e8dd6f9dc1023b95e25b1d3f43caffc740ae74f021d09817a01013eba39b7ba04203d7df5911803c5b0c52ca1dd0169d06e772f26138e200be9ecc10aab7b1d9ee91913bea2a9ca6359887b94eb38d71bd1f8b0e70806d3b06945f473525383d84d4d5e3955b2b38d9004aef7f5d6b930a141821f234148f02e8a7838aa526287241d0e921aa5fd83f4e4b11c2290d79ce37c444173ecba05df2e621706dbcab6ef29a5863ccc9d36f16de8f2802ded94649c1557972113c8256db04d13b37ffe569561bd68e2729264c8f5415ee3b05c2efb8ae52ec8cddd9c2b8cf05a7701"], 0x1a8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffb}, 0x1c) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x6b04}}, 0xb8}}, 0x0) 14:47:20 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100001f00fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:20 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0xc020f509, 0x0) 14:47:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xf000}}, 0xb8}}, 0x0) 14:47:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}}}, 0xb8}}, 0x0) 14:47:20 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100003f00fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:20 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x2) 14:47:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:21 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x6, 0x8, 0x10, @private2, @mcast1, 0x8, 0x700, 0xfffff800, 0x5}}) sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2000880908000800", @ANYRES32=r4, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="0a0001000180c2000002000014000100fe8000000000000000000000000000aa"], 0x4c}, 0x1, 0x0, 0x0, 0x24004884}, 0x40800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x9) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x34000}}, 0xb8}}, 0x0) 14:47:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0xb8}}, 0x0) 14:47:21 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100007c00fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:21 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x3) 14:47:21 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x4) 14:47:21 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000f000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x400300}}, 0xb8}}, 0x0) 14:47:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}}, 0xb8}}, 0x0) 14:47:21 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x408001, 0x0) close(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40100200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x8000040) pipe(&(0x7f0000000240)={0xffffffffffffffff}) bind$netrom(r6, &(0x7f00000002c0)={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 14:47:21 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x5) 14:47:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:22 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000ff8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xf0ffff}}, 0xb8}}, 0x0) 14:47:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}}, 0xb8}}, 0x0) 14:47:22 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x6) 14:47:22 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) [ 3309.285536][T17301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:47:22 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000200fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}}, 0xb8}}, 0x0) 14:47:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x1000000}}, 0xb8}}, 0x0) 14:47:22 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x7) 14:47:22 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000300fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}, 0xb8}}, 0x0) 14:47:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:23 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000500fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:23 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fedbdf250100000008002b000000008005002a000100000008003a000000000008013100f8ffffff08000600", @ANYRES32=r2, @ANYBLOB="05002f0001000000"], 0x44}}, 0x8004) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r3, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2000000}}, 0xb8}}, 0x0) 14:47:23 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x8) 14:47:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0xb8}}, 0x0) 14:47:23 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x1f4) 14:47:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0xb8}}, 0x0) 14:47:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x3000000}}, 0xb8}}, 0x0) 14:47:23 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000600fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x4000000}}, 0xb8}}, 0x0) 14:47:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}, 0xb8}}, 0x0) 14:47:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:24 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x300) 14:47:24 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000700fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:24 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x7000000}}, 0xb8}}, 0x0) 14:47:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}}, 0xb8}}, 0x0) 14:47:24 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000800fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x9000000}}, 0xb8}}, 0x0) 14:47:24 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x3e8) 14:47:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}}, 0xb8}}, 0x0) 14:47:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xf000000}}, 0xb8}}, 0x0) 14:47:24 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x500) 14:47:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:25 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x800c0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14, 0x800) sendmsg(r3, &(0x7f0000000880)={&(0x7f0000000400)=@can={0x1d, r6}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="078a823d333dd46da8d38039adf8d46a8670fc207a3fa50008e1bffbeebb1c1d03703599e87bb0691c917eb8c9a93733355643e8adb3badbaa6640ab155db2c96bbe", 0x42}, {&(0x7f0000000580)="17d7cbd556217a8dbed172c2786b90297310c189f23af6e4bb5ea74be70572a29e13b4411114b43ac13f8aac4c9743e1ee11b98959277163d49148e0a1c4", 0x3e}, {&(0x7f00000005c0)="f7ce2ce38891f5dff560d1da20cc753247dccb97faf5f590bb83e87ff9bb86988e6aa47ccbf33eaa7506e1e1eaab304e6d9a889c3fdd2fca57226674ba11a10d2f8f55ae6d579925bc3484d30f277deb15980d09c67acec8971d5e28cee29fa9b44ca11797f77a6fe2c9088365c686f268e7eeb8ae3769f89cea12188e4c7727cbeadceb2bf322458e61fdcbde160718178da8b8b17bb3d4f1c5885f283b24e9bece22825b5d0f0bb0", 0xa9}], 0x3, &(0x7f00000006c0)=[{0xa0, 0x0, 0x6, "8743394d80e28a0616b99b44437de61b6981bf9bac314e4988b74211f6769c8c7e7fbec320b48c2d8db3b48b59ba2a4fd4ba154a88c455d76ccba9643f07cdafa07fb1415111208efc28e2bb3caee60ad62f0f1f3e29ad90dcad78bb63bfdb08573154713533c9eced71d15841d37cec9fad3de582671cfd1896925d87849df1863841c8450f214c4fdc2f8107d7"}, {0xe8, 0x10e, 0x2, "654fd5b7af519a9b6ba29b8ff2b614c7f0b923af3bd50df168d7b1d6c824250d26db78d263b13c0150a2e0955316956b6bc60c45add792c94ea8171276dab026fef655147d7684d86d39b2f21a32f5f011e17850f20c5c6065e2dbdf69667e545ae6804d71793cfedde19248170d1c998a1d668b326bfcfefb8c22bef3fd5546b99347923996f55d83b9e5b1ddb4bbd087bcf5177f9f4a1dc52c78932da625884e07f25a8b619bea4bc27531688b358b7155475acd5b994b686a28e97487686476aadb9d96e61427b5ec8dc2e8aae741b91ac5"}], 0x188}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@bridge_delvlan={0x88, 0x71, 0x8, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x34}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x880) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x9) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000340)={'bond_slave_1\x00'}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}}}, 0xb8}}, 0x0) 14:47:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2f000000}}, 0xb8}}, 0x0) 14:47:25 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100007c00fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:25 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x600) 14:47:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}}, 0xb8}}, 0x0) 14:47:25 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x700) 14:47:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x6b040000}}, 0xb8}}, 0x0) 14:47:25 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000f000fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}}, 0xb8}}, 0x0) 14:47:26 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x94, 0x0, 0x110, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c8fd058}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62ce4a04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8148}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52d337b}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dc055b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x140c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40a6c2f7}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79f3baba}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4002}, 0x40080) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x41}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'syzkaller1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x4d080) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:26 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xe803) 14:47:26 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000003fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x80ffffff}}, 0xb8}}, 0x0) 14:47:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18100000}}}, 0xb8}}, 0x0) 14:47:26 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d04010450859d453301124a3154ef4f31195900de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000}}}, 0xb8}}, 0x0) 14:47:27 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000005fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x9effffff}}, 0xb8}}, 0x0) 14:47:27 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xf401) 14:47:27 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480400006d130384ad3de3dc82d81f88c690ebf007c9362f84b6afb5fd916b3649ef1e9d1a466967bd3b28a5dbf3551185da81d8fbcb70621d3fe31a53af6ba6aaf9ccd33bb8e355f09b9a251fcf8a4cfb79fd8a19f959401fc99aaa986617a8cbe0aed9ecfcc9a4da00783a154ab7363861e00faef5f4a7b357acc6a580204fd4f71aafa51f69ca6256c1dfd5dc558a44d9c023cbff6c18bef210945f7be6bc8bd6dbca16d7f334afb651f200cc3663ce254aa73332cdee724675e2d76b1881ceb2b8294930475a0233aa6a33552f9951345d", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_to_team\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'veth0_to_bridge\x00'}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}, {&(0x7f00000001c0)="bc03427fd30c9e20e6ee90bb60582867cccfd17c0f907065a5e5fea79cc59d8901b873e885b3d5b2fdaae54d993206d2d4d1be3900253aad6566be6f6aab3d64768f706d3c96543f6f3f1dfc6f4a7545ccfff73f90d9affc21a7b7fc8a429035c065d9d0137dce19a4", 0x69}], 0x2) 14:47:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}}, 0xb8}}, 0x0) 14:47:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:27 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000006fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xf0ffffff}}, 0xb8}}, 0x0) 14:47:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}}}, 0xb8}}, 0x0) 14:47:27 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xff00) 14:47:27 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000b00", @ANYRES32=0x0, @ANYBLOB="0500040000000000070000000000000000000106000900"/36], 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf250300000008000800ac141414050002000200000008000b00", @ANYRES32=r3, @ANYBLOB="050003002b00000014000700fc02000000000000000000000000000014000700ff020099feeb4e6ddad7fa8844c0a8f72000000000000000000000000001060001004e23000006000a004e210000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000100}, 0x11) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}}, 0xb8}}, 0x0) 14:47:28 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x1000000) 14:47:28 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000007fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3315.058793][T10445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:47:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfcffffff}}, 0xb8}}, 0x0) 14:47:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}, 0xb8}}, 0x0) 14:47:28 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x2000000) 14:47:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:29 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x69, 0x2e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2008000) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:29 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000001ffe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}}}, 0xb8}}, 0x0) 14:47:29 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x3000000) 14:47:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffff0000}}, 0xb8}}, 0x0) 14:47:29 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000003ffe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}}, 0xb8}}, 0x0) 14:47:29 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x4000000) 14:47:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffff000}}, 0xb8}}, 0x0) 14:47:29 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000007cfe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:29 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x5000000) 14:47:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:30 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480151d129146adc8de2267cf9e25ffadfbe44e092", @ANYRES16, @ANYRES32=r0, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'geneve1\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x881800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x81) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000380)) 14:47:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}, 0xb8}}, 0x0) 14:47:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffffff7f}}, 0xb8}}, 0x0) 14:47:30 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x6000000) 14:47:30 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc0000000000000000000001000000f0fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffffff80}}, 0xb8}}, 0x0) 14:47:30 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000002fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}}}, 0xb8}}, 0x0) 14:47:30 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x7000000) 14:47:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}}, 0xb8}}, 0x0) 14:47:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffffff9e}}, 0xb8}}, 0x0) 14:47:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:31 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x8000000) 14:47:31 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/126, 0x7e}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/49, 0x31}, {&(0x7f0000000580)=""/10, 0xa}], 0x7, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x12043) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000007c0)={'nat\x00', 0x0, [0xfffff6d8, 0x1, 0x6, 0xfffffffc, 0xc10a]}, &(0x7f0000000840)=0x54) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:31 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000003fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}}, 0xb8}}, 0x0) 14:47:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffff0}}, 0xb8}}, 0x0) 14:47:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0xb8}}, 0x0) 14:47:31 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000005fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:31 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xe8030000) 14:47:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffc}}, 0xb8}}, 0x0) 14:47:31 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000006fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}}, 0xb8}}, 0x0) 14:47:32 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="0553930b630b4b921603912b9277256d2043d33eed7ef754cf80a5cdb07489c8a06cb03bd33aa234ef2fd32421caf819fe8d", 0x32}, {&(0x7f00000001c0)="82a73e366d330db5080d44dfbc564c27e8db6898a22f2a897983af991f1f931d69f917b10a7b54a740e4b000e0766aa975eb6347354812c81c14c18377f48adcc65c6fdbdbf5265af513e1a5b674fddaea0b18e40e59f567d99301736b1624495251623a562f7e042b9e4c26607293be8367", 0x72}, {&(0x7f00000002c0)="c24ee77fdc9032a50b2afd957c91ca3582c6112f723ecf97d2ed5756ead0e5e56ce270c9390b6e9925db5e97611b31835d14422ce8dd87aef09736e591fc1bfb79252f3dc4b339c6e74071775da813b2bb8bc32b7c2c3d5a12748914f81a91ab342ca1cd4e14423c27f2a2bf743bcc0c4bc009135764d05a9fcec2f09cca4e7287fc0a43fe", 0x85}, {&(0x7f0000000380)="3909eff4e140c9466ca4ec5c161fbc446cf912e022971bd98fd47192947a14866a411e658ce436279dd1095e6e41e510023c7e594e489dcfa28cfdd86fe8b527f527fb2bdc64b8906af3b16d069c84d795b67344f4296f1564c0d48a556afe2148893cc62a88c83f799ce15e418f0db65eac4c8e581af291f4ec27e7bd307bd6c6264f65c64563e16305fb6af5ae0f44f332c513c379642beb4041d1b7bc33b97bd1d6818a225e3ff675e33d6a6084c05491b187da71c6c3154d62a9a852e1c3cd3aaa665ffc2486e432a441f5a1bcc2f8ab207ca42b6fe6d4aec13c0866b50ba4466559", 0xe4}, {&(0x7f0000001500)="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", 0x1000}], 0x5) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000500)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="01", @ANYRES16=0x0, @ANYBLOB="020029bd7000fedbdf250d0000000800040005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r6, 0xe11, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0x14, r6, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0x3, @private2, 0x800}], 0x1c) 14:47:32 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xf4010000) 14:47:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffffffff}}, 0xb8}}, 0x0) 14:47:32 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000007fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) 14:47:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:47:32 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xfcffffff) 14:47:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}, 0xb8}}, 0x0) 14:47:32 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000008fe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:32 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xfdfdffff) 14:47:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) 14:47:32 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x2}}, 0xb8}}, 0x0) 14:47:32 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc00000000000000000000010000007cfe8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xff000000) 14:47:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:33 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000ff8000000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 14:47:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x3}}, 0xb8}}, 0x0) 14:47:33 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRESDEC, @ANYBLOB="ede0d33a584ec3"], 0x448}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010300000000000000151100000048000600d5e657b5eb39e6738549f3aaa3bdd59a37ab8e435e42e3eca925ae1964ae8d5b66010000800000000022eb4a1176d92f4b1168df52df34873745d5d616e676e0e60469847a06614083e6ff421d72dc21ffc33c87ab127e", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40009000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f42daa24", @ANYRES16=r5, @ANYBLOB="000225bd7000fcdbdf257a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) close(r2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r3) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x21, 0xa8, @random="56e52d707a10fe8ff8d2454ce4031967d1c8e5be09a922b3c883501fa5"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x11}, 0x24040004) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r2, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xfffffdfd) [ 3320.541878][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:47:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 14:47:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x4}}, 0xb8}}, 0x0) 14:47:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xfffffffc) 14:47:33 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8002000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3320.781156][T22003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3320.804077][T25896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:47:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}}, 0xb8}}, 0x0) 14:47:33 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x100000000000000) 14:47:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x12}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:34 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x7}}, 0xb8}}, 0x0) 14:47:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}}}, 0xb8}}, 0x0) 14:47:34 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8003000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:34 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x200000000000000) 14:47:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}}}, 0xb8}}, 0x0) 14:47:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x9}}, 0xb8}}, 0x0) 14:47:34 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x300000000000000) 14:47:34 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8005000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xf}}, 0xb8}}, 0x0) 14:47:34 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x400000000000000) 14:47:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x13}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}}, 0xb8}}, 0x0) 14:47:35 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48040000b71e602ea5d9ac69414a75174005152cc20b100dc9ae424156f71c4e39992c0775966efdb6954f770d2cecdd0e073116fc911982ef6153fabfcc3260424951af5b135244dcbd7a51565f37d0ee351ec6b860a6a3d1bfdbe7b7cc3973afb2da94ad6f800b4852c4d1b391f49f2920c390", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001500200029bd7000fedbdf250a18c4ff", @ANYRES32=0x0, @ANYBLOB="0801080020020000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x440100c0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000340)={'netpci0\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x500000000000000) 14:47:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x2f}}, 0xb8}}, 0x0) 14:47:35 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8006000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1810000000000000}}}, 0xb8}}, 0x0) 14:47:35 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x600000000000000) 14:47:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xf0}}, 0xb8}}, 0x0) 14:47:35 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="c766fa3b4d400fca986370a04f2190903b9cce8b734c14a9f781faa704196a00484f77c5ffacf3da8d12668b45db55afb912fe6e35fe1b59e9f7b9f619520828257425dfa03b8c82f7884666b372b32eef501752eb5a4e8fb52230f54df6cab0d83e7c8cd5622732d511029731f6dc53e996433fccd33bf744b43439c382dfcc283084b77748e1d55dd5070bf3b793bef87b8b35af", @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x20, 0x8, 0x70bd2c, 0x25dfdbff, {0xa, 0x14, 0x14, 0x88, 0x2, 0x0, 0x0, 0x5, 0x1}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008001) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r4, &(0x7f00000003c0)=""/114, 0x72, 0x4bb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x9) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000089bd86a4a0d9198a682580da0d665ae7c3bf27ca66b4f578f1215257aa242dc6155cc8ca6d5017f5fb2f9984711430d5f746bffa2bb3cf09599ef77baa5260d8136da8826c0040b78c460bc9241c5d80b8a567d2f0ea44c1ef07e52d27463d42c5a9b8da7b44d1f9c1dce76a9a3748106d590fbba717fb522c095db2ab750a3db6c488e986b0e56befd6bf2707d8aa54a6990963b10dc8ed", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c009900000000007e000000080026006c090000080026006c0900000500180135000000050019010f000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x811) 14:47:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000}}}, 0xb8}}, 0x0) 14:47:35 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8007000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x300}}, 0xb8}}, 0x0) 14:47:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x700000000000000) 14:47:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}}, 0xb8}}, 0x0) 14:47:36 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8008000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:36 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x8003, 0xffffffff}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r0 = socket(0x29, 0x80000, 0x81) sendmsg$nl_netfilter(r0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000002500)={0x1184, 0x14, 0xb, 0x201, 0x70bd27, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@typed={0x53, 0x3f, 0x0, 0x0, @binary="a279f8c2f3bc8ea8deef69b629e89a0623e0ee270b45a59f8288c8f77d75728b9a1a279b9faf62339b61fba5c60d44a50ab729b991960d28b6ea8591a12213e8dbd61969a6b9a8880f0fee9d4b8a4a"}, @nested={0x111c, 0x1a, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @ipv4=@local}, @typed={0xc5, 0x1a, 0x0, 0x0, @binary="7dc7a0a4b457cb39491b9187c64dc9a8b258694dd325332f5993e1a08e77b480825b8e2d69311571dc5dce4213569cc25d31fff9d1411c64a803bb1d92c3c284fb7599d26770cdb87c668562420133807730d20dff11da2844e6ca2f234fe9ffcfd9529046737b7b6c55393b9247f7475a3ac595e5751bdc02fa8153c53e0b31e4c2da7d3981d7b3d1b83a60a9dc523c7d7ecef61f87a4b8313e86d6dea281b1dc248ce0a3e60f91de37d52ed8821d779737f4471ced72f02556e373556455489e"}, @typed={0x4, 0x4f}, @typed={0x3d, 0x13, 0x0, 0x0, @binary="8583892bf7a9fae1557613825b0347430c459c26e101169252d3e6df88326f5fd8167492caba80fb31cb2336ee617204f60be7941386f0c518"}, @generic="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", @typed={0x4, 0x1b}]}]}, 0x1184}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x55}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000f40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x24044081) 14:47:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x46b}}, 0xb8}}, 0x0) 14:47:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x800000000000000) 14:47:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}}}, 0xb8}}, 0x0) 14:47:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x700}}, 0xb8}}, 0x0) 14:47:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xe803000000000000) 14:47:36 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe807c000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x15}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:37 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="2d04b8045000de121215defaaba41e56795e2aa32ded92f0e6c500e3e601050bccf646943c9fff2cf0bfa6f90d854b3a9e068f204acf3341bd4c0d94e56f4a85309db578ce9bf09ab7d202ec9a8c084e449c79bbdebb79ea4ed8ae4999fc5ab25fedf3000000000000000000"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000540)=""/182, &(0x7f0000000340)=0xb6) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x840) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}}, 0xb8}}, 0x0) 14:47:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x900}}, 0xb8}}, 0x0) 14:47:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xf401000000000000) 14:47:37 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe80f0000000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xf00}}, 0xb8}}, 0x0) 14:47:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}}, 0xb8}}, 0x0) 14:47:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xfcffffff00000000) 14:47:37 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xa0, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @NL80211_ATTR_CSA_IES={0x28, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xf4bf, 0x0, 0x3, 0x23, 0xff01]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0xfe00, 0x9, 0x7, 0x40, 0x73d, 0x724e, 0x400]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ca}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x54}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:37 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8000030000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000}}}, 0xb8}}, 0x0) 14:47:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x2f00}}, 0xb8}}, 0x0) 14:47:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xfdfdffff00000000) 14:47:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}}, 0xb8}}, 0x0) 14:47:38 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8000050000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:38 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x448}}, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) 14:47:38 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xff00000000000000) 14:47:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6b04}}, 0xb8}}, 0x0) [ 3325.847888][T10445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 14:47:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 14:47:39 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8000060000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:39 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x17}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0xffffffff00000000) 14:47:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xf000}}, 0xb8}}, 0x0) 14:47:39 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8000070000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2}}}, 0xb8}}, 0x0) 14:47:39 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/39, 0x27}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f0000000240)=""/42, 0x2a}], 0x3, &(0x7f0000000400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/47, 0x2f}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="0f01000000000000011dfc393b770c53", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003500)=""/4096, 0x1000}], 0x1, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000680)}, {&(0x7f0000000940)=""/98, 0x62}, {&(0x7f00000009c0)=""/169, 0xa9}, {&(0x7f0000000a80)=""/36, 0x24}, {&(0x7f0000000ac0)=""/173, 0xad}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/42, 0x2a}, {&(0x7f0000000bc0)=""/48, 0x30}, {&(0x7f0000000c00)=""/146, 0x92}, {&(0x7f0000000cc0)=""/250, 0xfa}], 0xa, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000f00), 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000f80)=""/252, 0xfc}, {&(0x7f0000000680)=""/7, 0x7}], 0x2}}], 0x5, 0x10002, &(0x7f0000001240)) r4 = openat$cgroup_ro(r3, &(0x7f0000001480)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001600)=[@in={0x2, 0x4e21, @multicast2}], 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x34000}}, 0xb8}}, 0x0) 14:47:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x3}}}, 0xb8}}, 0x0) 14:47:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000008000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r0}, 0x10) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000008000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00', r4}, 0x10) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x8}, {r1, 0x21}, {r2, 0x8000}, {r3, 0x85a0}, {0xffffffffffffffff, 0xd1a1}, {r4, 0x9232}, {}, {0xffffffffffffffff, 0x300}, {0xffffffffffffffff, 0x4a}, {r5, 0x2001}], 0xa, &(0x7f0000000180)={r6, r7+60000000}, &(0x7f00000001c0)={[0x1]}, 0x8) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) 14:47:40 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe80001f0000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:40 executing program 0: getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 14:47:40 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) splice(r3, &(0x7f0000000180)=0x80000001, r0, &(0x7f00000001c0)=0x4, 0x3, 0x0) 14:47:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x4}}}, 0xb8}}, 0x0) 14:47:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x400300}}, 0xb8}}, 0x0) 14:47:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000b00)={r0, 0x4, 0x1f, 0xfff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='devices.list\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 14:47:40 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe80003f0000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:40 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xf0ffff}}, 0xb8}}, 0x0) 14:47:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x8}}}, 0xb8}}, 0x0) 14:47:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) sendfile(r1, r0, 0x0, 0xe7) 14:47:41 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48040000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC], 0x448}}, 0x20000891) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:41 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe80007c0000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x1000000}}, 0xb8}}, 0x0) 14:47:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bind(r1, &(0x7f00000002c0)=@l2={0x1f, 0x8, @none, 0x1ff, 0x1}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000004b000000000000000600000085100000fcffffff8510010005000000183300000100000000000000000008009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f00000001c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x2, 0x800, 0xfffff0d7}, 0x10, 0x0, r0}, 0x78) 14:47:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9}}}, 0xb8}}, 0x0) 14:47:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x2000000}}, 0xb8}}, 0x0) 14:47:41 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8000f00000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:41 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x55}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x15}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff4a}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="482200009d679e07905e0c15351336fb80e946557e7519b2364fa3c61fe5176c332ddc2071d329a8f622622009505b77b970623a87697ffe090caed4c1fe5dc2eba62b7fc4", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) writev(r4, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xe}}}, 0xb8}}, 0x0) 14:47:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x3000000}}, 0xb8}}, 0x0) 14:47:42 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 14:47:42 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:42 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe80fffff000000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x4000000}}, 0xb8}}, 0x0) [ 3329.763964][T25896] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 14:47:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r4, 0x0, 0xf03b0000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r4, 0xecc, 0xff, 0x2}) openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x3, 0x3, 0x7, 0xc, 0x4}, @generic={0x6, 0xe, 0xc, 0x6, 0xdbe}, @jmp={0x5, 0x1, 0x0, 0xa, 0xa, 0x100, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x23, 0x7ff}, 0x10, 0xffffffffffffffff, r5}, 0x78) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 14:47:42 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0xfffff645, 0x4) 14:47:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xf}}}, 0xb8}}, 0x0) 14:47:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x7000000}}, 0xb8}}, 0x0) 14:47:42 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8000000001000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 14:47:42 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000054ced667c67023d8ee07dac657a606a7ca6ba743967f", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x9000000}}, 0xb8}}, 0x0) 14:47:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2f}}}, 0xb8}}, 0x0) 14:47:43 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x3f, 0x4) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000140)=0xfffffffe, 0x4) sendmsg(r0, &(0x7f0000000740)={&(0x7f00000002c0)=@llc={0x1a, 0x32c, 0x5, 0x8, 0x80, 0xd2, @link_local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="08cc5f7433e70284e1429b01ebde15c8b89a2d03636cb5779b013e35cf191725d3c7b0421ded1bfde8821689426a3de4bf66a9483ba052d94aa5fa1095d3d8d8ea320b3597d859fc4943d325d789bdb786c178259c944dee523586f6fa1ac5a21432708c60566b378a30c582b9ca9e9c96c658712281146c93571dae4db162f71d05c84e1fd0ee7a2bc5780134e70ca9b9adec627efc7aadd56d9095426f534847919f8d0d2c730c7e53a40bc63effe592d9ef1e23d95c03d9c90d494bae31bf99195990779cc4468a12ff889e6ea0dba47ddb95b648392f0dcd6a6ed634b58c90d46c9b", 0xe4}, {&(0x7f0000000440)="b87459038278dc4e02fb18184136a3d406a66fda0aa5f3061541a2", 0x1b}], 0x2, &(0x7f00000004c0)=[{0x48, 0x2736668d33396d9f, 0x81, "98ed2609bf73f05073a4b80b2ed7e689d3f102464530f3b1b338867d05af62259917bc210570fad9d25ee624c1e5f4f53ad8ae1e01cc8d"}, {0x38, 0x0, 0x2, "b75cfe0012a1c0db753bd394ff726d6f9cf4db06f7bb1741357e590203faf8c3363baa6781a3"}, {0x90, 0x117, 0x1, "fbd2af510e52ed79c2325981137f1052438d8c29f2eef42e235e7e2003a27a3aad5e296fa4014a5bff7f336508500b70c86d130f5e3f781d287a6ece26a281da01a04d9e14dded290b3101d51bd0700e572dd5d7bf20d07b46a9db8188981df4678633a87e48a5af11e25929db1e72412857feca03018bf8e148"}, {0x28, 0x113, 0x4ce, "00f3be78794ce5f686d8c4316ca7a5fe271516d7141554"}, {0x108, 0x10a, 0x7, "fa05dd0e1eb7618dc055492f177c3740a475f4c27b402e1cc9c49c5c198ea2dca4434336a0a1dd05117b70809490afc592cee5b04bae56942f83bc7333f9a345bcb8d6d57fde8836283622de6a63718edd37bd8fd11d121d97feecec846ebe1d40414393b52a57c53a627bf78daea4c6c3672c6a16e657e93c7699c1c1ca48f1776631a3f88d6032c16fd74e0b384e38ae34062a5f2316ae84fbdea06fb4aab0a8583ff087f0401e71c8f8bec096f15abc624fb022cc33672b5cf624f78f0f4ba70c21ddb670a5c7ae147295267ac353847e73ee6b4b71bb89b9f68cd72f75987635ecb71fc41215c7e8796cbc46ab1adabdcbc1c4fa17"}, {0x28, 0x10f, 0x95, "60b283f5e17223dca1397040f905c76f4ce4536cee"}], 0x268}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x140c, 0x400, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x40) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000180)={r2, 0x7}) 14:47:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYRES32, @ANYBLOB="2d0401045000de"], 0x448}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x54}}, 0x20800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 14:47:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200540600fc000000000000000000000100000000fe8000000002000000000000000000aa00004122", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) [ 3330.240148][T22366] ------------[ cut here ]------------ [ 3330.246698][T22366] kernel BUG at net/phonet/socket.c:213! [ 3330.252559][T22366] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 3330.258645][T22366] CPU: 0 PID: 22366 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 3330.267070][T22366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3330.277489][T22366] RIP: 0010:pn_socket_autobind+0x13c/0x160 [ 3330.283337][T22366] Code: 44 05 00 00 00 00 00 48 8b 44 24 58 65 48 2b 04 25 28 00 00 00 75 26 48 83 c4 60 44 89 e0 5b 5d 41 5c 41 5d c3 e8 04 d1 2a f9 <0f> 0b e8 9d 3e 71 f9 eb 9f e8 b6 3e 71 f9 e9 6d ff ff ff e8 1c cb [ 3330.302985][T22366] RSP: 0018:ffffc90002c4fa78 EFLAGS: 00010216 [ 3330.309064][T22366] RAX: 0000000000000142 RBX: 0000000000000000 RCX: ffffc90002dd1000 [ 3330.317046][T22366] RDX: 0000000000040000 RSI: ffffffff884ca18c RDI: 0000000000000003 [ 3330.325026][T22366] RBP: 1ffff92000589f4f R08: 00000000ffffffea R09: 0000000000000000 [ 3330.333013][T22366] R10: ffffffff884ca14c R11: 0000000000000000 R12: 0000000000000000 [ 3330.340996][T22366] R13: dffffc0000000000 R14: ffff888085910000 R15: 0000000000000000 [ 3330.349014][T22366] FS: 00007fe619160700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 3330.357959][T22366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3330.364553][T22366] CR2: 0000001b31821000 CR3: 0000000042060000 CR4: 00000000003506f0 [ 3330.372536][T22366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3330.380518][T22366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 14:47:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xc2d, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xf000000}}, 0xb8}}, 0x0) [ 3330.388498][T22366] Call Trace: [ 3330.391780][T22366] [ 3330.394713][T22366] ? pn_res_seq_show+0x1d0/0x1d0 [ 3330.399671][T22366] pn_socket_sendmsg+0x40/0xd0 [ 3330.404455][T22366] ? pn_socket_autobind+0x160/0x160 [ 3330.409674][T22366] sock_sendmsg+0xcf/0x120 [ 3330.414111][T22366] ____sys_sendmsg+0x6e8/0x810 [ 3330.418900][T22366] ? kernel_sendmsg+0x50/0x50 [ 3330.423593][T22366] ? do_recvmmsg+0x6d0/0x6d0 [ 3330.428195][T22366] ? lock_chain_count+0x20/0x20 [ 3330.433059][T22366] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3330.439054][T22366] ? futex_wait+0x533/0x670 [ 3330.443648][T22366] ___sys_sendmsg+0xf3/0x170 [ 3330.448248][T22366] ? sendmsg_copy_msghdr+0x160/0x160 [ 3330.453548][T22366] ? lock_downgrade+0x6e0/0x6e0 [ 3330.458424][T22366] ? __fget_light+0xea/0x280 [ 3330.463118][T22366] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3330.469389][T22366] __sys_sendmsg+0xe5/0x1b0 [ 3330.473907][T22366] ? __sys_sendmsg_sock+0x30/0x30 [ 3330.478955][T22366] ? syscall_enter_from_user_mode+0x21/0x70 [ 3330.484869][T22366] do_syscall_64+0x35/0xb0 [ 3330.489302][T22366] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3330.495210][T22366] RIP: 0033:0x7fe61bbeaae9 [ 3330.499630][T22366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3330.519251][T22366] RSP: 002b:00007fe619160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3330.527700][T22366] RAX: ffffffffffffffda RBX: 00007fe61bcfdf60 RCX: 00007fe61bbeaae9 [ 3330.535683][T22366] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 3330.543667][T22366] RBP: 00007fe61bc44f25 R08: 0000000000000000 R09: 0000000000000000 [ 3330.551645][T22366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3330.559606][T22366] R13: 00007fff92f8020f R14: 00007fe619160300 R15: 0000000000022000 [ 3330.567591][T22366] [ 3330.570604][T22366] Modules linked in: [ 3330.574578][T22366] ---[ end trace 95d6c3184ba43f1b ]--- [ 3330.580035][T22366] RIP: 0010:pn_socket_autobind+0x13c/0x160 [ 3330.585925][T22366] Code: 44 05 00 00 00 00 00 48 8b 44 24 58 65 48 2b 04 25 28 00 00 00 75 26 48 83 c4 60 44 89 e0 5b 5d 41 5c 41 5d c3 e8 04 d1 2a f9 <0f> 0b e8 9d 3e 71 f9 eb 9f e8 b6 3e 71 f9 e9 6d ff ff ff e8 1c cb [ 3330.605591][T22366] RSP: 0018:ffffc90002c4fa78 EFLAGS: 00010216 [ 3330.611673][T22366] RAX: 0000000000000142 RBX: 0000000000000000 RCX: ffffc90002dd1000 [ 3330.619694][T22366] RDX: 0000000000040000 RSI: ffffffff884ca18c RDI: 0000000000000003 [ 3330.627721][T22366] RBP: 1ffff92000589f4f R08: 00000000ffffffea R09: 0000000000000000 [ 3330.635749][T22366] R10: ffffffff884ca14c R11: 0000000000000000 R12: 0000000000000000 [ 3330.643793][T22366] R13: dffffc0000000000 R14: ffff888085910000 R15: 0000000000000000 [ 3330.651788][T22366] FS: 00007fe619160700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 3330.660786][T22366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3330.667440][T22366] CR2: 0000001b31821000 CR3: 0000000042060000 CR4: 00000000003506f0 [ 3330.675480][T22366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3330.683519][T22366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3330.691528][T22366] Kernel panic - not syncing: Fatal exception [ 3330.697833][T22366] Kernel Offset: disabled [ 3330.702153][T22366] Rebooting in 86400 seconds..